From 76dac09fda48b5dd1ba290bd12aecf4091c83f79 Mon Sep 17 00:00:00 2001 From: Weblate Date: Mon, 3 May 2021 22:02:23 +0200 Subject: [PATCH] Update translation files Updated by "Update PO files to match POT (msgmerge)" hook in Weblate. Co-authored-by: Weblate Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/ Translation: freeipa/master --- po/bn_IN.po | 12556 +++++++++++++++++------------------ po/ca.po | 12710 ++++++++++++++++++------------------ po/cs.po | 13134 ++++++++++++++++++------------------- po/de.po | 14144 ++++++++++++++++++++-------------------- po/en_GB.po | 12152 +++++++++++++++++----------------- po/es.po | 16710 +++++++++++++++++++++++------------------------ po/eu.po | 12952 ++++++++++++++++++------------------ po/fr.po | 17766 +++++++++++++++++++++++++------------------------- po/hi.po | 12262 +++++++++++++++++----------------- po/hu.po | 12690 ++++++++++++++++++------------------ po/id.po | 13026 ++++++++++++++++++------------------ po/ja.po | 12718 ++++++++++++++++++------------------ po/kn.po | 13066 ++++++++++++++++++------------------- po/mr.po | 12296 +++++++++++++++++----------------- po/nl.po | 12242 +++++++++++++++++----------------- po/pa.po | 12232 +++++++++++++++++----------------- po/pl.po | 13728 +++++++++++++++++++------------------- po/pt.po | 12436 +++++++++++++++++------------------ po/pt_BR.po | 12736 ++++++++++++++++++------------------ po/ru.po | 17304 ++++++++++++++++++++++++------------------------ po/sk.po | 14142 ++++++++++++++++++++-------------------- po/tg.po | 12628 +++++++++++++++++------------------ po/tr.po | 13474 +++++++++++++++++++------------------- po/uk.po | 16624 +++++++++++++++++++++++----------------------- po/zh_CN.po | 13372 ++++++++++++++++++------------------- 25 files changed, 169600 insertions(+), 169500 deletions(-) diff --git a/po/bn_IN.po b/po/bn_IN.po index ce8ea9023..a2a9294c5 100644 --- a/po/bn_IN.po +++ b/po/bn_IN.po @@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Bengali (India)\n" @@ -18,6 +18,99 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + #, c-format msgid "Out of memory!\n" msgstr "" @@ -270,99 +363,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - #, c-format msgid "cannot open configuration file %s\n" msgstr "" @@ -8941,6 +8941,101 @@ msgid "" "Establish bi-directional trust. By default trust is inbound one-way only." msgstr "" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "" "\n" "ID ranges\n" @@ -9153,101 +9248,6 @@ msgid "" " " msgstr "" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - msgid "Remove users that can manage this token." msgstr "" @@ -11468,161 +11468,20 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "Additional instructions:" +msgid "Results are truncated, try a more specific search" msgstr "" #, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" +msgid "Unknown option: %(option)s" msgstr "" -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." +msgid "Client version. Used to determine if server will accept request." msgstr "" -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" +msgid "any of the configured servers" msgstr "" -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." +msgid "Exceeded number of tries to forward a request." msgstr "" #, python-format @@ -11678,6 +11537,151 @@ msgstr "" msgid "No file to read" msgstr "" +msgid "incorrect type" +msgstr "ভুল প্রকার" + +msgid "Only one value is allowed" +msgstr "কেবলমাত্র একটি মান অনুমদিত" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "must be an integer" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +#, fuzzy, python-format +#| msgid "must be a decimal number" +msgid "must be at least %(minvalue)d" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +#, fuzzy, python-format +#| msgid "must be a decimal number" +msgid "must be at least %(minvalue)s" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "must be a certificate" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "must be '%(value)s'" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "must be datetime value" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "must be DNS name" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "must be absolute" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +msgid "must be relative" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "must be dictionary" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + msgid "A dictionary representing an LDAP entry" msgstr "" @@ -11687,16 +11691,6 @@ msgstr "" msgid "All commands should at least have a result" msgstr "" -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" @@ -12057,163 +12051,161 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" -msgid "incorrect type" -msgstr "ভুল প্রকার" - -msgid "Only one value is allowed" -msgstr "কেবলমাত্র একটি মান অনুমদিত" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -#, fuzzy -#| msgid "must be a decimal number" -msgid "must be an integer" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -#, fuzzy, python-format -#| msgid "must be a decimal number" -msgid "must be at least %(minvalue)d" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -#, fuzzy, python-format -#| msgid "must be a decimal number" -msgid "must be at least %(minvalue)s" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -#, python-format -msgid "can be at most %(maxvalue)s" +msgid "Additional instructions:" msgstr "" #, python-format msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." msgstr "" #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" msgstr "" #, python-format -msgid "must be at least %(minlength)d bytes" +msgid "'%(option)s' option is deprecated. %(additional_info)s" msgstr "" #, python-format -msgid "can be at most %(maxlength)d bytes" +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" msgstr "" #, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -#, fuzzy -#| msgid "must be a decimal number" -msgid "must be a certificate" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -msgid "must be a certificate signing request" +msgid "DNS server %(server)s: %(error)s." msgstr "" #, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "must be at least %(minlength)d characters" +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." msgstr "" #, python-format -msgid "can be at most %(maxlength)d characters" +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "must be exactly %(length)d characters" +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." msgstr "" #, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "must be '%(value)s'" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "must be one of %(values)s" -msgstr "" - -#, fuzzy -#| msgid "must be a decimal number" -msgid "must be datetime value" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -#, fuzzy -#| msgid "must be a decimal number" -msgid "must be DNS name" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -#, fuzzy -#| msgid "must be a decimal number" -msgid "must be absolute" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -msgid "must be relative" -msgstr "" - -#, fuzzy -#| msgid "must be a decimal number" -msgid "must be dictionary" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -msgid "must be Kerberos principal" +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" msgstr "" #, python-format -msgid "Malformed principal: '%(value)s'" +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." msgstr "" -msgid "Service principal is required" +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." msgstr "" #, python-format -msgid "%(filename)s: file not found" +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." msgstr "" -#, python-brace-format -msgid "Unable to parse option {item}" +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" msgstr "" -msgid "any of the configured servers" +#, python-format +msgid "%(line)s" msgstr "" -msgid "Exceeded number of tries to forward a request." +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." msgstr "" msgid "Filename is empty" @@ -12315,6 +12307,18 @@ msgstr "" msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + #, python-format msgid "Retrieving CA cert chain failed: %s" msgstr "" @@ -12331,10 +12335,6 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" -#, python-format -msgid "objectclass %s not found" -msgstr "" - #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" @@ -12471,117 +12471,10 @@ msgid_plural "%(count)d automount keys matched" msgstr[0] "" msgstr[1] "" +#, python-format msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d plugin loaded" -#| msgid_plural "%(count)d plugins loaded" -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Imported profile \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted profile \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "" @@ -12810,22 +12703,4239 @@ msgstr "" msgid "%i CAs removed." msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added automember rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added condition(s) to \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified automember rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted automember rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "%(count)d ভেরিয়াবেল" +msgstr[1] "%(count)d ভেরিয়াবেল" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "" + +msgid "User Group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added group \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "gid cannot be set for external group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted group \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "privileged group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified group \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified DNS server \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Delete a DNS server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject" +msgstr "" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added segment \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted segment \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified segment \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added netgroup \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted netgroup \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified netgroup \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Changed password for \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)d ভেরিয়াবেল" +msgstr[1] "%(count)d ভেরিয়াবেল" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added privilege \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted privilege \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified privilege \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Password Policy" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added service delegation rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added stage user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted stage user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified stage user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Activate a stage user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject email address" +msgstr "" + +msgid "Subject DNS name" +msgstr "" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +msgid "Subject IP Address" +msgstr "" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +msgid "Serial number (hex)" +msgstr "" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "" + +msgid "command" +msgstr "" + +msgid "commands" +msgstr "" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust type" +msgstr "" + +msgid "Trust status" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " msgstr "" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." msgstr "" +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted trust \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Enabled trust domain \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Disabled trust domain \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "%(count)d ভেরিয়াবেল" +msgstr[1] "%(count)d ভেরিয়াবেল" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Vault configuration" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Imported profile \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted profile \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "" + +msgid "Host Group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "hostgroup" +msgstr "" + +msgid "privileged hostgroup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +msgid "Location name" +msgstr "" + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +msgid "Servers" +msgstr "" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added IPA location \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +msgid "IPA Server" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "Role" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added role \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted role \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified role \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Undeleted user account \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Staged user account \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Disabled user account \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Enabled user account \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Unlocked account \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "cannot be empty" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "A list of ACI values" +msgstr "" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Created ACI \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted ACI \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified ACI \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Renamed ACI to \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + msgid "" "\n" "Domain Name System (DNS)\n" @@ -13370,9 +17480,6 @@ msgstr "" msgid "Managedby permission" msgstr "" -msgid "DNS is not configured" -msgstr "" - msgid "cannot be used when a zone is specified" msgstr "" @@ -13599,1392 +17706,534 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, python-brace-format msgid "" -"\n" -"DNS server configuration\n" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." msgstr "" -msgid "" -"\n" -"Manipulate DNS server configuration\n" +msgid "Server does not support domain level functionality" msgstr "" -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified DNS server \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added new DNS server \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Delete a DNS server" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted DNS server \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added stage user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted stage user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified stage user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "%(count)d plugin loaded" -#| msgid_plural "%(count)d plugins loaded" -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Activate a stage user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" +msgid "Domain Level cannot be lowered." msgstr "" #, python-brace-format -msgid "Topology management requires minimum domain level {0} " +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." msgstr "" -msgid "segment" +msgid "" +"\n" +"API Schema\n" msgstr "" -msgid "segments" +msgid "" +"\n" +"Provides API introspection capabilities.\n" msgstr "" -msgid "Topology Segments" +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" msgstr "" -msgid "Topology Segment" +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" msgstr "" #, python-format -msgid "left node is not a topology node: %(leftnode)s" +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Version" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +msgid "Method name" msgstr "" #, python-format -msgid "right node is not a topology node: %(rightnode)s" +msgid "%(pkey)s: %(oname)s not found" msgstr "" -msgid "left node and right node must not be the same" +msgid "Display information about a command." msgstr "" -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" +msgid "Search for commands." msgstr "" -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" +msgid "Return command defaults" msgstr "" +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +msgid "CLI name" +msgstr "" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + #, fuzzy, python-format #| msgid "%(count)d plugin loaded" #| msgid_plural "%(count)d plugins loaded" -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" #, fuzzy, python-format #| msgid "Added user \"%(value)s\"" -msgid "Added segment \"%(value)s\"" +msgid "Enabled HBAC rule \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" #, fuzzy, python-format #| msgid "Added user \"%(value)s\"" -msgid "Deleted segment \"%(value)s\"" +msgid "Disabled HBAC rule \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified segment \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(value)s" +msgid "Access time" msgstr "" -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d plugin loaded" -#| msgid_plural "%(count)d plugins loaded" -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added topology suffix \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" +msgid "Add source hosts and hostgroups to an HBAC rule." msgstr "" msgid "" "\n" -"Verify replication topology for suffix.\n" +"Simulate use of Host-based access controls\n" "\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"Groups of hosts.\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" "\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" "\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" "\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "" - -msgid "Host Group" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "hostgroup" -msgstr "" - -msgid "privileged hostgroup" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "%(count)d plugin loaded" -#| msgid_plural "%(count)d plugins loaded" -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" +"HBACTEST AND TRUSTED DOMAINS\n" "\n" -"Vaults\n" -msgstr "" - -msgid "" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" "\n" -"Manage vaults.\n" -msgstr "" - -msgid "" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" "\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added vault \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted vault \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d ভেরিয়াবেল" -msgstr[1] "%(count)d ভেরিয়াবেল" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified vault \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Vault configuration" -msgstr "" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added netgroup \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted netgroup \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified netgroup \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "%(count)d plugin loaded" -#| msgid_plural "%(count)d plugins loaded" -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Changed password for \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)d ভেরিয়াবেল" -msgstr[1] "%(count)d ভেরিয়াবেল" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -msgid "ACI" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Created ACI \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted ACI \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified ACI \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "%(count)d plugin loaded" -#| msgid_plural "%(count)d plugins loaded" -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Renamed ACI to \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" -#, fuzzy -#| msgid "must be a decimal number" -msgid "must be at least 10" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -msgid "configuration options" +msgid "Unresolved rules in --rules" msgstr "" -msgid "Configuration" +#, python-format +msgid "Access granted: %s" msgstr "" -msgid "Maximum hostname length" +msgid "ID View" msgstr "" -msgid "IPA masters" +msgid "system ID View" msgstr "" -msgid "List of all IPA masters" +msgid "ID Views" msgstr "" -msgid "Hidden IPA masters" +msgid "User object overrides" msgstr "" -msgid "List of all hidden IPA masters" +msgid "Group object overrides" msgstr "" -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" +msgid "Hosts the view applies to" msgstr "" msgid "Domain resolution order" @@ -14993,233 +18242,193 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - #, fuzzy, python-format #| msgid "Added user \"%(value)s\"" -msgid "Added group \"%(value)s\"" +msgid "Added ID View \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" -msgid "gid cannot be set for external group" -msgstr "" - #, fuzzy, python-format #| msgid "Added user \"%(value)s\"" -msgid "Deleted group \"%(value)s\"" +msgid "Deleted ID View \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" -msgid "privileged group" -msgstr "" - #, fuzzy, python-format #| msgid "Added user \"%(value)s\"" -msgid "Modified group \"%(value)s\"" +msgid "Modified an ID View \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" #, fuzzy, python-format #| msgid "%(count)d plugin loaded" #| msgid_plural "%(count)d plugins loaded" -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgid "Default Trust View cannot be applied on hosts" msgstr "" -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" msgstr "" #, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "ID View applied to %i host." msgstr "" -msgid "not allowed to modify user entries" +#, python-format +msgid "ID View applied to %i hosts." msgstr "" -msgid "not allowed to modify group entries" +#, python-format +msgid "ID View cleared from %i host." msgstr "" -msgid "Not a managed group" +#, python-format +msgid "ID View cleared from %i hosts." msgstr "" -msgid "Add users that can manage members of this group." +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" -msgid "Remove users that can manage members of this group." +msgid "IPA object" msgstr "" +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Delete an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Modify an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified an ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d ভেরিয়াবেল" +msgstr[1] "%(count)d ভেরিয়াবেল" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified an User ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" "Permissions\n" @@ -15444,1248 +18653,41 @@ msgid_plural "%(count)d permissions matched" msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgid "" -"\n" -"OTP Tokens\n" +msgid "delegation" msgstr "" -msgid "" -"\n" -"Manage OTP tokens.\n" +msgid "delegations" msgstr "" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" +msgid "Delegations" msgstr "" -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" +msgid "Delegation" msgstr "" #, fuzzy, python-format #| msgid "Added user \"%(value)s\"" -msgid "Added OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "cannot be empty" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted OTP token \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" #, fuzzy, python-format #| msgid "Added user \"%(value)s\"" -msgid "Modified OTP token \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" #, fuzzy, python-format #| msgid "%(count)d plugin loaded" #| msgid_plural "%(count)d plugins loaded" -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -msgid "command" -msgstr "" - -msgid "commands" -msgstr "" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d plugin loaded" -#| msgid_plural "%(count)d plugins loaded" -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "%(count)d plugin loaded" -#| msgid_plural "%(count)d plugins loaded" -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -msgid "Location name" -msgstr "" - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -msgid "Servers" -msgstr "" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added IPA location \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -msgid "IPA Server" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d plugin loaded" -#| msgid_plural "%(count)d plugins loaded" -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Version" -msgstr "" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -msgid "Method name" -msgstr "" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -msgid "CLI name" -msgstr "" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added ID range \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted ID range \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "%(count)d plugin loaded" -#| msgid_plural "%(count)d plugins loaded" -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified ID range \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added selfservice \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted selfservice \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified selfservice \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "%(count)d plugin loaded" -#| msgid_plural "%(count)d plugins loaded" -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "IPA role name" -msgstr "" - msgid "HBAC rule and local members cannot both be set" msgstr "" @@ -16754,991 +18756,191 @@ msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হ msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "pyhbac is not installed." +msgid "" +"\n" +"IPA servers\n" msgstr "" msgid "" "\n" -"IPA certificate operations\n" +"Get information about installed IPA servers.\n" msgstr "" msgid "" "\n" -"Implements a set of commands for managing server SSL certificates.\n" +" Find all servers:\n" +" ipa server-find\n" msgstr "" msgid "" "\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" msgstr "" -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" +msgid "server" msgstr "" -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" +msgid "servers" msgstr "" -msgid "" -"\n" -"In order to request a certificate:\n" +msgid "IPA Servers" msgstr "" -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" +msgid "Server location" msgstr "" -msgid "" -"\n" -"SEARCHING:\n" +msgid "Service weight" msgstr "" -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" +msgid "Weight for server services" msgstr "" -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" +msgid "Service relative weight" msgstr "" -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" +msgid "Relative weight for server services (counts per location)" msgstr "" -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" +msgid "Enabled server roles" msgstr "" -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgid "List of enabled roles" msgstr "" -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "Subject" -msgstr "" - -msgid "Subject email address" -msgstr "" - -msgid "Subject DNS name" -msgstr "" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -msgid "Subject IP Address" -msgstr "" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -msgid "Issuer" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Serial number (hex)" -msgstr "" - -msgid "Request status" -msgstr "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" +msgid "Modify information about an IPA server." msgstr "" #, fuzzy, python-format #| msgid "Added user \"%(value)s\"" -msgid "Added ID View \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted ID View \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified an ID View \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "%(count)d plugin loaded" -#| msgid_plural "%(count)d plugins loaded" -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Delete an ID override." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Modify an ID override." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified an ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d ভেরিয়াবেল" -msgstr[1] "%(count)d ভেরিয়াবেল" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added User ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted User ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified an User ID override \"%(value)s\"" +msgid "Modified IPA server \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" #, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" msgstr[0] "" msgstr[1] "" #, fuzzy, python-format #| msgid "Added user \"%(value)s\"" -msgid "Added Group ID override \"%(value)s\"" +msgid "Deleted IPA server \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" +msgid "Ignore topology errors" +msgstr "" -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" +msgid "Ignore topology connectivity problems after removal" +msgstr "" -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" -msgid "" -"\n" -"Auto Membership Rule.\n" +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" msgstr "" msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." msgstr "" msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." msgstr "" msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." msgstr "" -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" +msgid "Ignoring these warnings and proceeding with removal" msgstr "" #, python-format -msgid "%(otype)s \"%(oname)s\" not found" +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" #, python-format -msgid "%s is not a valid attribute." +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" msgstr "" -msgid "" -"\n" -" Add an automember rule.\n" -" " +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +msgid "Server state" msgstr "" #, fuzzy, python-format #| msgid "Added user \"%(value)s\"" -msgid "Added automember rule \"%(value)s\"" +msgid "Changed server state of \"%(value)s\"." msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" -msgid "Auto Membership is not configured" +msgid "Cannot hide CA renewal master." msgstr "" -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added condition(s) to \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " +msgid "Cannot hide DNSSec key master." msgstr "" #, python-format -msgid "Removed condition(s) from \"%(value)s\"" +msgid "Cannot hide last enabled %(name)s server." msgstr "" msgid "" "\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified automember rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted automember rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d ভেরিয়াবেল" -msgstr[1] "%(count)d ভেরিয়াবেল" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" +"Session Support for IPA\n" msgstr "" msgid "" @@ -17916,6 +19118,868 @@ msgstr "" msgid "Enabled CA \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "must be at least 10" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added host \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted host \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified host \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Disabled host \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to host \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Removed aliases from host \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified ID range \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + msgid "Internationalization messages" msgstr "" @@ -18980,12 +21044,6 @@ msgstr "" msgid "REVOKED" msgstr "" -msgid "Serial Number" -msgstr "" - -msgid "Serial Number (hex)" -msgstr "" - msgid "SHA1 Fingerprint" msgstr "" @@ -19038,9 +21096,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -msgid "Certificate mapping data" -msgstr "" - msgid "Configuration string" msgstr "" @@ -19763,9 +21818,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "" - msgid "Netgroup Settings" msgstr "" @@ -19881,9 +21933,6 @@ msgstr "" msgid "Add password policy" msgstr "" -msgid "Password Policy" -msgstr "" - msgid "Remove password policies" msgstr "" @@ -20335,15 +22384,6 @@ msgstr "" msgid "Remove domains" msgstr "" -msgid "Trust direction" -msgstr "" - -msgid "Trust status" -msgstr "" - -msgid "Trust type" -msgstr "" - msgid "Alternative UPN suffixes" msgstr "" @@ -20876,9 +22916,6 @@ msgstr "" msgid "Topology" msgstr "" -msgid "Trusts" -msgstr "" - msgid "True" msgstr "" @@ -20987,1429 +23024,6 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "Role" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added role \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted role \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified role \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "%(count)d plugin loaded" -#| msgid_plural "%(count)d plugins loaded" -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -msgid "IPA Servers" -msgstr "" - -msgid "Server location" -msgstr "" - -msgid "Service weight" -msgstr "" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified IPA server \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted IPA server \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -msgid "Server state" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Changed server state of \"%(value)s\"." -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added service delegation rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted service delegation \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added service delegation target \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added host \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted host \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified host \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d plugin loaded" -#| msgid_plural "%(count)d plugins loaded" -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Disabled host \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added certificates to host \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added new aliases to host \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Removed aliases from host \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -msgid "Password Policies" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted trust \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d plugin loaded" -#| msgid_plural "%(count)d plugins loaded" -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Enabled trust domain \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Disabled trust domain \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d plugin loaded" -#| msgid_plural "%(count)d plugins loaded" -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added privilege \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted privilege \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified privilege \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "%(count)d plugin loaded" -#| msgid_plural "%(count)d plugins loaded" -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -22580,651 +23194,41 @@ msgstr "" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "" -msgid "delegation" +msgid "self service permission" msgstr "" -msgid "delegations" +msgid "self service permissions" msgstr "" -msgid "Delegations" +msgid "Self Service Permissions" msgstr "" -msgid "Delegation" +msgid "Self Service Permission" msgstr "" #, fuzzy, python-format #| msgid "Added user \"%(value)s\"" -msgid "Added delegation \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" #, fuzzy, python-format #| msgid "Added user \"%(value)s\"" -msgid "Deleted delegation \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" #, fuzzy, python-format #| msgid "Added user \"%(value)s\"" -msgid "Modified delegation \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" #, fuzzy, python-format #| msgid "%(count)d plugin loaded" #| msgid_plural "%(count)d plugins loaded" -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "%(count)d plugin loaded" -#| msgid_plural "%(count)d plugins loaded" -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Deleted user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Modified user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Undeleted user account \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Staged user account \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Disabled user account \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Enabled user account \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Unlocked account \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added certificates to user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added new aliases to user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Removed aliases from user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - #, python-format msgid "all masters must have %(role)s role enabled" msgstr "" @@ -23404,25 +23408,6 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - msgid "Request must be a dict" msgstr "" @@ -23444,6 +23429,25 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #, python-format msgid "must equal %r" msgstr "" diff --git a/po/ca.po b/po/ca.po index d90d54101..b5a40bed4 100644 --- a/po/ca.po +++ b/po/ca.po @@ -3,7 +3,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Catalan\n" @@ -14,6 +14,101 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "Sortida de depuració" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Realm name" +msgstr "Canvia el nom" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + #, fuzzy, c-format #| msgid "Out of memory\n" msgid "Out of memory!\n" @@ -270,101 +365,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "Sortida de depuració" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -#, fuzzy -#| msgid "Rename" -msgid "Realm name" -msgstr "Canvia el nom" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - #, c-format msgid "cannot open configuration file %s\n" msgstr "" @@ -9316,6 +9316,107 @@ msgid "" "Establish bi-directional trust. By default trust is inbound one-way only." msgstr "" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +#| msgid "description" +msgid "Profile description" +msgstr "descripció" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +#, fuzzy +#| msgid "Certificate Hold" +msgid "Delete a Certificate Profile." +msgstr "Retenció del certificat" + +msgid "Search for Certificate Profiles." +msgstr "" + +#, fuzzy +#| msgid "Certificate Hold" +msgid "Import a Certificate Profile." +msgstr "Retenció del certificat" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "" "\n" "ID ranges\n" @@ -9528,107 +9629,6 @@ msgid "" " " msgstr "" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -#| msgid "description" -msgid "Profile description" -msgstr "descripció" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -#, fuzzy -#| msgid "Certificate Hold" -msgid "Delete a Certificate Profile." -msgstr "Retenció del certificat" - -msgid "Search for Certificate Profiles." -msgstr "" - -#, fuzzy -#| msgid "Certificate Hold" -msgid "Import a Certificate Profile." -msgstr "Retenció del certificat" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - msgid "Remove users that can manage this token." msgstr "" @@ -11877,161 +11877,20 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "Additional instructions:" +msgid "Results are truncated, try a more specific search" msgstr "" #, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" +msgid "Unknown option: %(option)s" msgstr "" -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." +msgid "Client version. Used to determine if server will accept request." msgstr "" -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" +msgid "any of the configured servers" msgstr "" -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." +msgid "Exceeded number of tries to forward a request." msgstr "" #, python-format @@ -12091,6 +11950,140 @@ msgstr "" msgid "No file to read" msgstr "" +msgid "incorrect type" +msgstr "" + +msgid "Only one value is allowed" +msgstr "" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +msgid "must be an integer" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "must be a certificate" +msgstr "Certificat" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, python-format +msgid "must be '%(value)s'" +msgstr "" + +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +msgid "must be datetime value" +msgstr "" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +msgid "must be DNS name" +msgstr "" + +msgid "must be absolute" +msgstr "" + +msgid "must be relative" +msgstr "" + +#, fuzzy +#| msgid "Home directory" +msgid "must be dictionary" +msgstr "Directori de l'usuari" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + msgid "A dictionary representing an LDAP entry" msgstr "" @@ -12100,16 +12093,6 @@ msgstr "" msgid "All commands should at least have a result" msgstr "" -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" @@ -12468,152 +12451,161 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" -msgid "incorrect type" -msgstr "" - -msgid "Only one value is allowed" -msgstr "" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)s" +msgid "Additional instructions:" msgstr "" #, python-format msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." msgstr "" #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" msgstr "" #, python-format -msgid "must be at least %(minlength)d bytes" +msgid "'%(option)s' option is deprecated. %(additional_info)s" msgstr "" #, python-format -msgid "can be at most %(maxlength)d bytes" +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" msgstr "" #, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -#, fuzzy -#| msgid "Certificate" -msgid "must be a certificate" -msgstr "Certificat" - -msgid "must be a certificate signing request" +msgid "DNS server %(server)s: %(error)s." msgstr "" #, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "must be at least %(minlength)d characters" +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." msgstr "" #, python-format -msgid "can be at most %(maxlength)d characters" +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "must be exactly %(length)d characters" +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." msgstr "" #, python-format -msgid "The character %(char)r is not allowed." +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" msgstr "" #, python-format -msgid "must be '%(value)s'" +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." msgstr "" #, python-format -msgid "must be one of %(values)s" -msgstr "" - -msgid "must be datetime value" -msgstr "" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -msgid "must be relative" -msgstr "" - -#, fuzzy -#| msgid "Home directory" -msgid "must be dictionary" -msgstr "Directori de l'usuari" - -msgid "must be Kerberos principal" +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." msgstr "" #, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" +msgid "'%(command)s' is deprecated. %(additional_info)s" msgstr "" #, python-format -msgid "%(filename)s: file not found" +msgid "%(line)s" msgstr "" -#, python-brace-format -msgid "Unable to parse option {item}" +#, python-format +msgid "Search result has been truncated: %(reason)s" msgstr "" -msgid "any of the configured servers" +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." msgstr "" -msgid "Exceeded number of tries to forward a request." +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." msgstr "" msgid "Filename is empty" @@ -12715,6 +12707,18 @@ msgstr "" msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + #, python-format msgid "Retrieving CA cert chain failed: %s" msgstr "" @@ -12731,10 +12735,6 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" -#, python-format -msgid "objectclass %s not found" -msgstr "" - #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" @@ -12864,119 +12864,10 @@ msgid_plural "%(count)d automount keys matched" msgstr[0] "" msgstr[1] "" +#, python-format msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -#, fuzzy -#| msgid "Certificate Hold" -msgid "Certificate Profile" -msgstr "Retenció del certificat" - -#, fuzzy -#| msgid "Certificate Hold" -msgid "Certificate Profiles" -msgstr "Retenció del certificat" - -#, fuzzy -#| msgid "Configuration" -msgid "Profile configuration" -msgstr "Configuració" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "" @@ -13201,20 +13092,4313 @@ msgstr "" msgid "%i CAs removed." msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +#| msgid "group" +msgid "groups" +msgstr "grup" + +#, fuzzy +#| msgid "Group" +msgid "User Group" +msgstr "Grup" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "" +"\n" +"DNS server configuration\n" +msgstr "Configuració" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +#, fuzzy +#| msgid "Server" +msgid "DNS server" +msgstr "Servidor" + +#, fuzzy +#| msgid "Server" +msgid "DNS servers" +msgstr "Servidor" + +#, fuzzy +#| msgid "Server" +msgid "DNS Servers" +msgstr "Servidor" + +#, fuzzy +#| msgid "Server" +msgid "DNS Server" +msgstr "Servidor" + +#, fuzzy +#| msgid "Server Name" +msgid "DNS Server name" +msgstr "Nom del servidor" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "services" +msgid "HBAC services" +msgstr "serveis" + +#, fuzzy +#| msgid "Services" +msgid "HBAC Services" +msgstr "Serveis" + +#, fuzzy +#| msgid "Services" +msgid "HBAC Service" +msgstr "Serveis" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "User password expiration" +msgstr "" + +#, fuzzy +#| msgid "SHA1 Fingerprint" +msgid "SSH public key fingerprint" +msgstr "Empremta digital SHA1" + +msgid "Base-64 encoded user certificate" +msgstr "" + +#, fuzzy +#| msgid "Certificate Hold" +msgid "Certificate mapping data" +msgstr "Retenció del certificat" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +#, fuzzy +#| msgid "Home directory" +msgid "SMB Home Directory" +msgstr "Directori de l'usuari" + +#, fuzzy +#| msgid "Home directory" +msgid "SMB Home Directory Drive" +msgstr "Directori de l'usuari" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +msgid "Issuer" +msgstr "Emissor" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject" +msgstr "Assumpte" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +#, fuzzy +#| msgid "group" +msgid "netgroups" +msgstr "grup" + +#, fuzzy +#| msgid "Netgroup name" +msgid "Netgroups" +msgstr "Nom de grup de xarxa" + +#, fuzzy +#| msgid "group" +msgid "Netgroup" +msgstr "grup" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "OTP configuration options" +msgstr "Configuració" + +#, fuzzy +#| msgid "Configuration" +msgid "OTP Configuration" +msgstr "Configuració" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "invalid port number" +msgstr "Número de sèrie" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +#, fuzzy +#| msgid "Server" +msgid "RADIUS Servers" +msgstr "Servidor" + +#, fuzzy +#| msgid "Server" +msgid "RADIUS Server" +msgstr "Servidor" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "password policy" +msgstr "contrasenya" + +#, fuzzy +#| msgid "password" +msgid "password policies" +msgstr "contrasenya" + +#, fuzzy +#| msgid "Password" +msgid "Password Policies" +msgstr "Contrasenya" + +#, fuzzy +#| msgid "Password" +msgid "Password Policy" +msgstr "Contrasenya" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "Nom d'usuari" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +#, fuzzy +#| msgid "Domain" +msgid "Realm Domains" +msgstr "Domini" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Users" +msgid "Stage Users" +msgstr "Usuaris" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +#, fuzzy +#| msgid "users" +msgid "stage users" +msgstr "usuaris" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Unspecified" +msgid " * 0 - unspecified\n" +msgstr "Sense especificar" + +#, fuzzy +#| msgid "Key Compromise" +msgid " * 1 - keyCompromise\n" +msgstr "Clau en compromís" + +#, fuzzy +#| msgid "CA Compromise" +msgid " * 2 - cACompromise\n" +msgstr "CA en compromís" + +#, fuzzy +#| msgid "Affiliation Changed" +msgid " * 3 - affiliationChanged\n" +msgstr "L'afiliació ha canviat" + +msgid " * 4 - superseded\n" +msgstr "" + +#, fuzzy +#| msgid "Cessation of Operation" +msgid " * 5 - cessationOfOperation\n" +msgstr "Cessació de l'operació" + +#, fuzzy +#| msgid "Certificate Hold" +msgid " * 6 - certificateHold\n" +msgstr "Retenció del certificat" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate chain" +msgstr "Certificat" + +msgid "X.509 certificate chain" +msgstr "" + +#, fuzzy +#| msgid "Email address" +msgid "Subject email address" +msgstr "Adreça de correu electrònic" + +#, fuzzy +#| msgid "Subject" +msgid "Subject DNS name" +msgstr "Assumpte" + +msgid "Subject X.400 address" +msgstr "" + +#, fuzzy +#| msgid "Home directory" +msgid "Subject directory name" +msgstr "Directori de l'usuari" + +msgid "Subject EDI Party name" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject URI" +msgstr "Assumpte" + +#, fuzzy +#| msgid "IP Address" +msgid "Subject IP Address" +msgstr "Adreça IP" + +#, fuzzy +#| msgid "Subject" +msgid "Subject OID" +msgstr "Assumpte" + +#, fuzzy +#| msgid "Subject" +msgid "Subject UPN" +msgstr "Assumpte" + +msgid "Subject Kerberos principal name" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Subject Other Name" +msgstr "Nom del servidor" + +#, fuzzy +#| msgid "Issuer" +msgid "Issuer DN" +msgstr "Emissor" + +msgid "Not Before" +msgstr "No abans" + +msgid "Not After" +msgstr "No després" + +#, fuzzy +#| msgid "Fingerprint" +msgid "Fingerprint (SHA1)" +msgstr "Empremta" + +#, fuzzy +#| msgid "Fingerprint" +msgid "Fingerprint (SHA256)" +msgstr "Empremta" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial number (hex)" +msgstr "Número de sèrie" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "Estat" + +msgid "Revoked" +msgstr "Revocat" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +#, fuzzy +#| msgid "Commands" +msgid "sudo command" +msgstr "Ordres" + +#, fuzzy +#| msgid "Commands" +msgid "sudo commands" +msgstr "Ordres" + +#, fuzzy +#| msgid "Commands" +msgid "Sudo Commands" +msgstr "Ordres" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +#, fuzzy +#| msgid "Rules" +msgid "Sudo Rules" +msgstr "Regles" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "usuaris" + +#, fuzzy +#| msgid "Commands" +msgid "command" +msgstr "Ordres" + +#, fuzzy +#| msgid "Commands" +msgid "commands" +msgstr "Ordres" + +msgid "runAs user" +msgstr "" + +#, fuzzy +#| msgid "users" +msgid "runAs users" +msgstr "usuaris" + +#, fuzzy +#| msgid "group" +msgid "group runAs" +msgstr "grup" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "Trust" +msgid "trust" +msgstr "Confiança" + +#, fuzzy +#| msgid "Trust" +msgid "trusts" +msgstr "Confiança" + +#, fuzzy +#| msgid "Trust" +msgid "Trusts" +msgstr "Confiança" + +msgid "Trust" +msgstr "Confiança" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "Trust direction" +msgstr "" + +#, fuzzy +#| msgid "Trust" +msgid "Trust type" +msgstr "Confiança" + +msgid "Trust status" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Active Directory domain range" +msgstr "Domini d'Active Directory" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +#, fuzzy +#| msgid "External" +msgid "External trust" +msgstr "Extern" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +#, fuzzy +#| msgid "Domain" +msgid "domain" +msgstr "Domini" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " msgstr "" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Configuration" +msgid "trust configuration" +msgstr "Configuració" + +#, fuzzy +#| msgid "Configuration" +msgid "Global Trust Configuration" +msgstr "Configuració" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +#, fuzzy +#| msgid "Host Name" +msgid "Name" +msgstr "Nom de l'ordinador" + +#, fuzzy +#| msgid "UID" +msgid "SID" +msgstr "UID" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +#, fuzzy +#| msgid "Disabled" +msgid "Domain enabled" +msgstr "Inhabilitat" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "server role" +msgstr "Nom del servidor" + +#, fuzzy +#| msgid "Server Name" +msgid "server roles" +msgstr "Nom del servidor" + +msgid "IPA Server Roles" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "IPA Server Role" +msgstr "Nom del servidor" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +#, fuzzy +#| msgid "Group name" +msgid "IPA role name" +msgstr "Nom del grup" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +#, fuzzy +#| msgid "Continue" +msgid "Vault Container" +msgstr "Continua" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Vault configuration" +msgstr "Configuració" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +#, fuzzy +#| msgid "Certificate Hold" +msgid "Certificate Profile" +msgstr "Retenció del certificat" + +#, fuzzy +#| msgid "Certificate Hold" +msgid "Certificate Profiles" +msgstr "Retenció del certificat" + +#, fuzzy +#| msgid "Configuration" +msgid "Profile configuration" +msgstr "Configuració" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "group" +msgid "host groups" +msgstr "grup" + +#, fuzzy +#| msgid "Group" +msgid "Host Group" +msgstr "Grup" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "group" +msgid "hostgroup" +msgstr "grup" + +msgid "privileged hostgroup" +msgstr "" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +#, fuzzy +#| msgid "Actions" +msgid "" +"\n" +"IPA locations\n" +msgstr "Accions" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "location" +msgstr "Ubicació" + +#, fuzzy +#| msgid "Location" +msgid "locations" +msgstr "Ubicació" + +#, fuzzy +#| msgid "Location" +msgid "IPA Locations" +msgstr "Ubicació" + +#, fuzzy +#| msgid "Location" +msgid "IPA Location" +msgstr "Ubicació" + +#, fuzzy +#| msgid "Location" +msgid "Location name" +msgstr "Ubicació" + +msgid "IPA location name" +msgstr "" + +#, fuzzy +#| msgid "description" +msgid "IPA Location description" +msgstr "descripció" + +#, fuzzy +#| msgid "Server" +msgid "Servers" +msgstr "Servidor" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Server" +msgid "IPA Server" +msgstr "Servidor" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "Role" +msgstr "Rol" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "User login" +msgid "Failed logins" +msgstr "Entrada" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "L'hora actual" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +#, fuzzy +#| msgid "UID" +msgid "URI" +msgstr "UID" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "A list of ACI values" +msgstr "" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" msgstr "" msgid "" @@ -13766,9 +17950,6 @@ msgstr "" msgid "Managedby permission" msgstr "permisos" -msgid "DNS is not configured" -msgstr "" - msgid "cannot be used when a zone is specified" msgstr "" @@ -13991,1391 +18172,550 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" -#, fuzzy -#| msgid "Configuration" +#, python-brace-format msgid "" -"\n" -"DNS server configuration\n" -msgstr "Configuració" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#, fuzzy -#| msgid "Server" -msgid "DNS server" -msgstr "Servidor" - -#, fuzzy -#| msgid "Server" -msgid "DNS servers" -msgstr "Servidor" - -#, fuzzy -#| msgid "Server" -msgid "DNS Servers" -msgstr "Servidor" - -#, fuzzy -#| msgid "Server" -msgid "DNS Server" -msgstr "Servidor" - -#, fuzzy -#| msgid "Server Name" -msgid "DNS Server name" -msgstr "Nom del servidor" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#, fuzzy -#| msgid "services" -msgid "HBAC services" -msgstr "serveis" - -#, fuzzy -#| msgid "Services" -msgid "HBAC Services" -msgstr "Serveis" - -#, fuzzy -#| msgid "Services" -msgid "HBAC Service" -msgstr "Serveis" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -#, fuzzy -#| msgid "Users" -msgid "Stage Users" -msgstr "Usuaris" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -#, fuzzy -#| msgid "users" -msgid "stage users" -msgstr "usuaris" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." msgstr "" -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" +msgid "Server does not support domain level functionality" msgstr "" -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" +msgid "Domain Level cannot be lowered." msgstr "" #, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." msgstr "" msgid "" "\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." +"API Schema\n" msgstr "" msgid "" "\n" -"Groups of hosts.\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" "\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" "\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" msgstr "" #, fuzzy -#| msgid "group" -msgid "host groups" -msgstr "grup" +#| msgid "Location" +msgid "Documentation" +msgstr "Ubicació" -#, fuzzy -#| msgid "Group" -msgid "Host Group" -msgstr "Grup" +msgid "Exclude from" +msgstr "" -#, python-format -msgid "Added hostgroup \"%(value)s\"" +msgid "Include in" msgstr "" #, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" +msgid "Results should contain primary key attribute only (\"%s\")" msgstr "" -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" +msgid "Help topic" msgstr "" #, fuzzy -#| msgid "group" -msgid "hostgroup" -msgstr "grup" +#| msgid "Permission" +msgid "Version" +msgstr "Permís" -msgid "privileged hostgroup" +msgid "Parameters" msgstr "" -#, python-format -msgid "Modified hostgroup \"%(value)s\"" +msgid "Method of" msgstr "" -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -#, fuzzy -#| msgid "Continue" -msgid "Vault Container" -msgstr "Continua" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -#, fuzzy -#| msgid "Configuration" -msgid "Vault configuration" -msgstr "Configuració" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -#, fuzzy -#| msgid "group" -msgid "netgroups" -msgstr "grup" - #, fuzzy #| msgid "Netgroup name" -msgid "Netgroups" +msgid "Method name" msgstr "Nom de grup de xarxa" -#, fuzzy -#| msgid "group" -msgid "Netgroup" -msgstr "grup" - #, python-format -msgid "Added netgroup \"%(value)s\"" +msgid "%(pkey)s: %(oname)s not found" msgstr "" -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" +msgid "Display information about a command." msgstr "" -#, python-format -msgid "Deleted netgroup \"%(value)s\"" +msgid "Search for commands." msgstr "" -#, python-format -msgid "Modified netgroup \"%(value)s\"" +msgid "Return command defaults" msgstr "" -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" +msgid "Display information about a class." +msgstr "" -msgid "One time password commands" +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" msgstr "" #, fuzzy -#| msgid "Configuration" -msgid "OTP configuration options" -msgstr "Configuració" +#| msgid "Last name" +msgid "CLI name" +msgstr "Cognom" #, fuzzy -#| msgid "Configuration" -msgid "OTP Configuration" -msgstr "Configuració" +#| msgid "password" +msgid "Confirm (password)" +msgstr "contrasenya" -#, python-format -msgid "Changed password for \"%(value)s\"" +msgid "Default" msgstr "" -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgid "Default from" msgstr "" -msgid "pkinit" +msgid "Label" msgstr "" -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" +msgid "Convert on server" msgstr "" #, fuzzy -#| msgid "Serial number" -msgid "invalid port number" -msgstr "Número de sèrie" +#| msgid "Options" +msgid "Option group" +msgstr "Opcions" -msgid "RADIUS proxy server" +msgid "Sensitive" msgstr "" -msgid "RADIUS proxy servers" +msgid "Positional argument" msgstr "" +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "entrada" + #, fuzzy -#| msgid "Server" -msgid "RADIUS Servers" -msgstr "Servidor" +#| msgid "entry" +msgid "entries" +msgstr "entrada" #, fuzzy -#| msgid "Server" -msgid "RADIUS Server" -msgstr "Servidor" +#| msgid "entry" +msgid "Entry" +msgstr "entrada" #, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" +msgid "container entry (%(container)s) not found" msgstr "" #, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgid "%(parent)s: %(oname)s not found" msgstr "" #, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" +msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "" #, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "A list of ACI values" +msgid "attribute \"%(attribute)s\" not allowed" msgstr "" -msgid "type, filter, subtree and targetgroup are mutually exclusive" +#, python-format +msgid "these attributes are not allowed: %(attrs)s" msgstr "" -msgid "ACI prefix is required" +msgid "attribute is not configurable" msgstr "" +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." msgstr "" #, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." msgstr "" #, python-format -msgid "Syntax Error: %(error)s" +msgid "added attribute value to entry %(value)s" msgstr "" #, python-format -msgid "invalid DN (%s)" +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +#, fuzzy +#| msgid "Rules" +msgid "HBAC Rules" +msgstr "Regles" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" msgstr "" #, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -msgid "ACI" +msgid "Deleted HBAC rule \"%(value)s\"" msgstr "" #, python-format -msgid "Created ACI \"%(value)s\"" +msgid "Modified HBAC rule \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" msgstr[0] "" msgstr[1] "" #, python-format -msgid "Renamed ACI to \"%(value)s\"" +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +msgid "Access time" +msgstr "Temps d'accés" + +msgid "Add source hosts and hostgroups to an HBAC rule." msgstr "" msgid "" "\n" -"Server configuration\n" +"Simulate use of Host-based access controls\n" "\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"NOTES:\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" "\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" "\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" +" --user, --host, and --service are mandatory, others are optional.\n" "\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" "\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" -msgid "must be at least 10" +msgid "Unresolved rules in --rules" +msgstr "" + +#, fuzzy, python-format +#| msgid "Access Granted" +msgid "Access granted: %s" +msgstr "Accés permès" + +#, fuzzy +#| msgid "View" +msgid "ID View" +msgstr "Visualització" + +msgid "system ID View" msgstr "" #, fuzzy -#| msgid "Configuration" -msgid "configuration options" -msgstr "Configuració" +#| msgid "View" +msgid "ID Views" +msgstr "Visualització" -msgid "Configuration" -msgstr "Configuració" - -msgid "Maximum hostname length" +msgid "User object overrides" msgstr "" -msgid "IPA masters" +msgid "Group object overrides" msgstr "" -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" +msgid "Hosts the view applies to" msgstr "" msgid "Domain resolution order" @@ -15384,232 +18724,177 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Empty domain is not allowed" +#, python-format +msgid "Added ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" +msgid "Deleted ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Server has no information about domain '%(domain)s'" +msgid "Modified an ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -#| msgid "group" -msgid "groups" -msgstr "grup" - -#, fuzzy -#| msgid "Group" -msgid "User Group" -msgstr "Grup" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" msgstr[0] "" msgstr[1] "" -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgid "Default Trust View cannot be applied on hosts" msgstr "" -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" msgstr "" #, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "ID View applied to %i host." msgstr "" -msgid "not allowed to modify user entries" +#, python-format +msgid "ID View applied to %i hosts." msgstr "" -msgid "not allowed to modify group entries" +#, python-format +msgid "ID View cleared from %i host." msgstr "" -msgid "Not a managed group" +#, python-format +msgid "ID View cleared from %i hosts." msgstr "" -msgid "Add users that can manage members of this group." +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" -msgid "Remove users that can manage members of this group." +msgid "IPA object" msgstr "" +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + #, fuzzy #| msgid "Permissions" msgid "" @@ -15833,1288 +19118,38 @@ msgid_plural "%(count)d permissions matched" msgstr[0] "" msgstr[1] "" -msgid "" -"\n" -"OTP Tokens\n" +msgid "delegation" msgstr "" -msgid "" -"\n" -"Manage OTP tokens.\n" +msgid "delegations" msgstr "" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" +msgid "Delegations" msgstr "" #, fuzzy -#| msgid "UID" -msgid "URI" -msgstr "UID" +#| msgid "Delete" +msgid "Delegation" +msgstr "Suprimeix" #, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" +msgid "Added delegation \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted OTP token \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" msgstr "" #, python-format -msgid "Modified OTP token \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "" msgstr[1] "" -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -#, fuzzy -#| msgid "Rules" -msgid "Sudo Rules" -msgstr "Regles" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "usuaris" - -#, fuzzy -#| msgid "Commands" -msgid "command" -msgstr "Ordres" - -#, fuzzy -#| msgid "Commands" -msgid "commands" -msgstr "Ordres" - -msgid "runAs user" -msgstr "" - -#, fuzzy -#| msgid "users" -msgid "runAs users" -msgstr "usuaris" - -#, fuzzy -#| msgid "group" -msgid "group runAs" -msgstr "grup" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, fuzzy -#| msgid "Commands" -msgid "sudo command" -msgstr "Ordres" - -#, fuzzy -#| msgid "Commands" -msgid "sudo commands" -msgstr "Ordres" - -#, fuzzy -#| msgid "Commands" -msgid "Sudo Commands" -msgstr "Ordres" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -#, fuzzy -#| msgid "Domain" -msgid "Realm Domains" -msgstr "Domini" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -#, fuzzy -#| msgid "Actions" -msgid "" -"\n" -"IPA locations\n" -msgstr "Accions" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -#, fuzzy -#| msgid "Location" -msgid "location" -msgstr "Ubicació" - -#, fuzzy -#| msgid "Location" -msgid "locations" -msgstr "Ubicació" - -#, fuzzy -#| msgid "Location" -msgid "IPA Locations" -msgstr "Ubicació" - -#, fuzzy -#| msgid "Location" -msgid "IPA Location" -msgstr "Ubicació" - -#, fuzzy -#| msgid "Location" -msgid "Location name" -msgstr "Ubicació" - -msgid "IPA location name" -msgstr "" - -#, fuzzy -#| msgid "description" -msgid "IPA Location description" -msgstr "descripció" - -#, fuzzy -#| msgid "Server" -msgid "Servers" -msgstr "Servidor" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -#, fuzzy -#| msgid "Server" -msgid "IPA Server" -msgstr "Servidor" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -#, fuzzy -#| msgid "Host Name" -msgid "Name" -msgstr "Nom de l'ordinador" - -#, fuzzy -#| msgid "Location" -msgid "Documentation" -msgstr "Ubicació" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -#| msgid "Permission" -msgid "Version" -msgstr "Permís" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -#| msgid "Netgroup name" -msgid "Method name" -msgstr "Nom de grup de xarxa" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -#| msgid "Last name" -msgid "CLI name" -msgstr "Cognom" - -#, fuzzy -#| msgid "password" -msgid "Confirm (password)" -msgstr "contrasenya" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -#, fuzzy -#| msgid "Options" -msgid "Option group" -msgstr "Opcions" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -#, fuzzy -#| msgid "Active Directory domain" -msgid "Active Directory domain range" -msgstr "Domini d'Active Directory" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "self service permission" -msgstr "" - -#, fuzzy -#| msgid "permissions" -msgid "self service permissions" -msgstr "permisos" - -#, fuzzy -#| msgid "Permissions" -msgid "Self Service Permissions" -msgstr "Permisos" - -#, fuzzy -#| msgid "Permission" -msgid "Self Service Permission" -msgstr "Permís" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#, fuzzy -#| msgid "Server Name" -msgid "server role" -msgstr "Nom del servidor" - -#, fuzzy -#| msgid "Server Name" -msgid "server roles" -msgstr "Nom del servidor" - -msgid "IPA Server Roles" -msgstr "" - -#, fuzzy -#| msgid "Server Name" -msgid "IPA Server Role" -msgstr "Nom del servidor" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -#, fuzzy -#| msgid "Group name" -msgid "IPA role name" -msgstr "Nom del grup" - msgid "HBAC rule and local members cannot both be set" msgstr "" @@ -17178,1012 +19213,202 @@ msgstr "" msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "" -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "pyhbac is not installed." +msgid "" +"\n" +"IPA servers\n" msgstr "" msgid "" "\n" -"IPA certificate operations\n" +"Get information about installed IPA servers.\n" msgstr "" msgid "" "\n" -"Implements a set of commands for managing server SSL certificates.\n" +" Find all servers:\n" +" ipa server-find\n" msgstr "" msgid "" "\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" msgstr "" #, fuzzy -#| msgid "Unspecified" -msgid " * 0 - unspecified\n" -msgstr "Sense especificar" +#| msgid "Server" +msgid "server" +msgstr "Servidor" #, fuzzy -#| msgid "Key Compromise" -msgid " * 1 - keyCompromise\n" -msgstr "Clau en compromís" +#| msgid "services" +msgid "servers" +msgstr "serveis" #, fuzzy -#| msgid "CA Compromise" -msgid " * 2 - cACompromise\n" -msgstr "CA en compromís" - -#, fuzzy -#| msgid "Affiliation Changed" -msgid " * 3 - affiliationChanged\n" -msgstr "L'afiliació ha canviat" - -msgid " * 4 - superseded\n" -msgstr "" - -#, fuzzy -#| msgid "Cessation of Operation" -msgid " * 5 - cessationOfOperation\n" -msgstr "Cessació de l'operació" - -#, fuzzy -#| msgid "Certificate Hold" -msgid " * 6 - certificateHold\n" -msgstr "Retenció del certificat" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -#, fuzzy -#| msgid "Certificate" -msgid "Certificate chain" -msgstr "Certificat" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "Subject" -msgstr "Assumpte" - -#, fuzzy -#| msgid "Email address" -msgid "Subject email address" -msgstr "Adreça de correu electrònic" - -#, fuzzy -#| msgid "Subject" -msgid "Subject DNS name" -msgstr "Assumpte" - -msgid "Subject X.400 address" -msgstr "" - -#, fuzzy -#| msgid "Home directory" -msgid "Subject directory name" -msgstr "Directori de l'usuari" - -msgid "Subject EDI Party name" -msgstr "" - -#, fuzzy -#| msgid "Subject" -msgid "Subject URI" -msgstr "Assumpte" - -#, fuzzy -#| msgid "IP Address" -msgid "Subject IP Address" -msgstr "Adreça IP" - -#, fuzzy -#| msgid "Subject" -msgid "Subject OID" -msgstr "Assumpte" - -#, fuzzy -#| msgid "Subject" -msgid "Subject UPN" -msgstr "Assumpte" - -msgid "Subject Kerberos principal name" -msgstr "" +#| msgid "Server" +msgid "IPA Servers" +msgstr "Servidor" #, fuzzy #| msgid "Server Name" -msgid "Subject Other Name" +msgid "Server location" msgstr "Nom del servidor" -msgid "Issuer" -msgstr "Emissor" +#, fuzzy +#| msgid "Services" +msgid "Service weight" +msgstr "Serveis" + +msgid "Weight for server services" +msgstr "" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" #, fuzzy -#| msgid "Issuer" -msgid "Issuer DN" -msgstr "Emissor" - -msgid "Not Before" -msgstr "No abans" - -msgid "Not After" -msgstr "No després" - -#, fuzzy -#| msgid "Fingerprint" -msgid "Fingerprint (SHA1)" -msgstr "Empremta" - -#, fuzzy -#| msgid "Fingerprint" -msgid "Fingerprint (SHA256)" -msgstr "Empremta" - -#, fuzzy -#| msgid "Serial number" -msgid "Serial number (hex)" -msgstr "Número de sèrie" - -msgid "Request status" -msgstr "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Status" +#| msgid "Status" +msgid "State" msgstr "Estat" -msgid "Revoked" -msgstr "Revocat" - -msgid "Revocation reason" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - #, fuzzy -#| msgid "View" -msgid "ID View" -msgstr "Visualització" +#| msgid "Server Name" +msgid "Server state" +msgstr "Nom del servidor" -msgid "system ID View" +#, python-format +msgid "Changed server state of \"%(value)s\"." msgstr "" -#, fuzzy -#| msgid "View" -msgid "ID Views" -msgstr "Visualització" - -msgid "User object overrides" +msgid "Cannot hide CA renewal master." msgstr "" -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" +msgid "Cannot hide DNSSec key master." msgstr "" #, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Auto Membership Rule.\n" +msgid "Cannot hide last enabled %(name)s server." msgstr "" msgid "" "\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" +"Session Support for IPA\n" msgstr "" msgid "" @@ -18366,6 +19591,858 @@ msgstr "Habilita" msgid "Enabled CA \"%(value)s\"" msgstr "" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +#, fuzzy +#| msgid "Matched" +msgid "Matching rule" +msgstr "Coincideix" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "User login" +msgid "User logins" +msgstr "Entrada" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "configuration options" +msgstr "Configuració" + +msgid "Configuration" +msgstr "Configuració" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "Ordinador central" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "Número de sèrie" + +#, fuzzy +#| msgid "Serial Number" +msgid "Serial Number (hex)" +msgstr "Número de sèrie" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + msgid "Internationalization messages" msgstr "" @@ -19514,14 +21591,6 @@ msgstr "Retenció del certificat" msgid "REVOKED" msgstr "" -msgid "Serial Number" -msgstr "Número de sèrie" - -#, fuzzy -#| msgid "Serial Number" -msgid "Serial Number (hex)" -msgstr "Número de sèrie" - msgid "SHA1 Fingerprint" msgstr "Empremta digital SHA1" @@ -19592,11 +21661,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -#, fuzzy -#| msgid "Certificate Hold" -msgid "Certificate mapping data" -msgstr "Retenció del certificat" - #, fuzzy #| msgid "Configuration" msgid "Configuration string" @@ -20379,9 +22443,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "Ordinador central" - #, fuzzy #| msgid "Account Settings" msgid "Netgroup Settings" @@ -20517,11 +22578,6 @@ msgstr "" msgid "Add password policy" msgstr "" -#, fuzzy -#| msgid "Password" -msgid "Password Policy" -msgstr "Contrasenya" - msgid "Remove password policies" msgstr "" @@ -21021,17 +23077,6 @@ msgstr "" msgid "Remove domains" msgstr "" -msgid "Trust direction" -msgstr "" - -msgid "Trust status" -msgstr "" - -#, fuzzy -#| msgid "Trust" -msgid "Trust type" -msgstr "Confiança" - msgid "Alternative UPN suffixes" msgstr "" @@ -21596,11 +23641,6 @@ msgstr "" msgid "Topology" msgstr "" -#, fuzzy -#| msgid "Trust" -msgid "Trusts" -msgstr "Confiança" - msgid "True" msgstr "Cert" @@ -21709,1441 +23749,6 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "Role" -msgstr "Rol" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#, fuzzy -#| msgid "Server" -msgid "server" -msgstr "Servidor" - -#, fuzzy -#| msgid "services" -msgid "servers" -msgstr "serveis" - -#, fuzzy -#| msgid "Server" -msgid "IPA Servers" -msgstr "Servidor" - -#, fuzzy -#| msgid "Server Name" -msgid "Server location" -msgstr "Nom del servidor" - -#, fuzzy -#| msgid "Services" -msgid "Service weight" -msgstr "Serveis" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -#, fuzzy -#| msgid "Status" -msgid "State" -msgstr "Estat" - -#, fuzzy -#| msgid "Server Name" -msgid "Server state" -msgstr "Nom del servidor" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Principal alias" -msgstr "" - -#, fuzzy -#| msgid "SHA1 Fingerprint" -msgid "SSH public key fingerprint" -msgstr "Empremta digital SHA1" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -#, fuzzy -#| msgid "password" -msgid "password policy" -msgstr "contrasenya" - -#, fuzzy -#| msgid "password" -msgid "password policies" -msgstr "contrasenya" - -#, fuzzy -#| msgid "Password" -msgid "Password Policies" -msgstr "Contrasenya" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -#| msgid "User name" -msgid "User check" -msgstr "Nom d'usuari" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -#, fuzzy -#| msgid "Trust" -msgid "trust" -msgstr "Confiança" - -#, fuzzy -#| msgid "Trust" -msgid "trusts" -msgstr "Confiança" - -msgid "Trust" -msgstr "Confiança" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -#, fuzzy -#| msgid "External" -msgid "External trust" -msgstr "Extern" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -#, fuzzy -#| msgid "Domain" -msgid "domain" -msgstr "Domini" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -#| msgid "Configuration" -msgid "trust configuration" -msgstr "Configuració" - -#, fuzzy -#| msgid "Configuration" -msgid "Global Trust Configuration" -msgstr "Configuració" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -#, fuzzy -#| msgid "UID" -msgid "SID" -msgstr "UID" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -#, fuzzy -#| msgid "Disabled" -msgid "Domain enabled" -msgstr "Inhabilitat" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -#, fuzzy -#| msgid "Matched" -msgid "Matching rule" -msgstr "Coincideix" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#, fuzzy -#| msgid "User login" -msgid "User logins" -msgstr "Entrada" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -23311,643 +23916,42 @@ msgstr "" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "" -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" +msgid "self service permission" msgstr "" #, fuzzy -#| msgid "Delete" -msgid "Delegation" -msgstr "Suprimeix" +#| msgid "permissions" +msgid "self service permissions" +msgstr "permisos" + +#, fuzzy +#| msgid "Permissions" +msgid "Self Service Permissions" +msgstr "Permisos" + +#, fuzzy +#| msgid "Permission" +msgid "Self Service Permission" +msgstr "Permís" #, python-format -msgid "Added delegation \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted delegation \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "Modified delegation \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" msgstr[0] "" msgstr[1] "" -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -#, fuzzy -#| msgid "Rules" -msgid "HBAC Rules" -msgstr "Regles" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "Temps d'accés" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, fuzzy, python-format -#| msgid "Access Granted" -msgid "Access granted: %s" -msgstr "Accés permès" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "entrada" - -#, fuzzy -#| msgid "entry" -msgid "entries" -msgstr "entrada" - -#, fuzzy -#| msgid "entry" -msgid "Entry" -msgstr "entrada" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -#, fuzzy -#| msgid "Home directory" -msgid "SMB Home Directory" -msgstr "Directori de l'usuari" - -#, fuzzy -#| msgid "Home directory" -msgid "SMB Home Directory Drive" -msgstr "Directori de l'usuari" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -#, fuzzy -#| msgid "User login" -msgid "Failed logins" -msgstr "Entrada" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "L'hora actual" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - #, python-format msgid "all masters must have %(role)s role enabled" msgstr "" @@ -24135,25 +24139,6 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - msgid "Request must be a dict" msgstr "" @@ -24175,6 +24160,25 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #, python-format msgid "must equal %r" msgstr "" diff --git a/po/cs.po b/po/cs.po index 30bfac479..688c68140 100644 --- a/po/cs.po +++ b/po/cs.po @@ -5,7 +5,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Czech\n" @@ -16,6 +16,102 @@ msgstr "" "Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: dnf +#, fuzzy +#| msgid "User name" +msgid "Realm name" +msgstr "Uživatelské jméno" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + # auto translated by TM merge from project: selinux (policycoreutils), # version: master, DocId: policycoreutils #, c-format @@ -293,102 +389,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: dnf -#, fuzzy -#| msgid "User name" -msgid "Realm name" -msgstr "Uživatelské jméno" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - #, c-format msgid "cannot open configuration file %s\n" msgstr "" @@ -9690,6 +9690,105 @@ msgid "" "Establish bi-directional trust. By default trust is inbound one-way only." msgstr "" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f22-branch, +# DocId: anaconda +#, fuzzy +#| msgid "description" +msgid "Profile description" +msgstr "popis" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "" "\n" "ID ranges\n" @@ -9902,105 +10001,6 @@ msgid "" " " msgstr "" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f22-branch, -# DocId: anaconda -#, fuzzy -#| msgid "description" -msgid "Profile description" -msgstr "popis" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - msgid "Remove users that can manage this token." msgstr "" @@ -12252,162 +12252,20 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "Additional instructions:" +msgid "Results are truncated, try a more specific search" msgstr "" #, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" +msgid "Unknown option: %(option)s" msgstr "" -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." +msgid "Client version. Used to determine if server will accept request." msgstr "" -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" +msgid "any of the configured servers" msgstr "" -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "error on server '%(server)s': %(error)s" -msgid "DNS server %(server)s: %(error)s." -msgstr "chyba na serveru '%(server)s': %(error)s" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." +msgid "Exceeded number of tries to forward a request." msgstr "" #, python-format @@ -12462,6 +12320,136 @@ msgstr "Zastaralé volby" msgid "No file to read" msgstr "Žádný soubor k přečtení" +msgid "incorrect type" +msgstr "nesprávný typ" + +msgid "Only one value is allowed" +msgstr "" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +msgid "must be an integer" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +msgid "must be a certificate" +msgstr "" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, python-format +msgid "must be '%(value)s'" +msgstr "" + +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +msgid "must be datetime value" +msgstr "" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +msgid "must be DNS name" +msgstr "" + +msgid "must be absolute" +msgstr "" + +msgid "must be relative" +msgstr "" + +msgid "must be dictionary" +msgstr "" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + msgid "A dictionary representing an LDAP entry" msgstr "" @@ -12471,16 +12459,6 @@ msgstr "" msgid "All commands should at least have a result" msgstr "" -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" @@ -12852,148 +12830,162 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" -msgid "incorrect type" -msgstr "nesprávný typ" - -msgid "Only one value is allowed" -msgstr "" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)s" +msgid "Additional instructions:" msgstr "" #, python-format msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." msgstr "" #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" msgstr "" #, python-format -msgid "must be at least %(minlength)d bytes" +msgid "'%(option)s' option is deprecated. %(additional_info)s" msgstr "" #, python-format -msgid "can be at most %(maxlength)d bytes" +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "DNS server %(server)s: %(error)s." +msgstr "chyba na serveru '%(server)s': %(error)s" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -msgid "must be a certificate" -msgstr "" - -msgid "must be a certificate signing request" +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." msgstr "" #, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "must be at least %(minlength)d characters" +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." msgstr "" #, python-format -msgid "can be at most %(maxlength)d characters" +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" msgstr "" #, python-format -msgid "must be exactly %(length)d characters" +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." msgstr "" #, python-format -msgid "The character %(char)r is not allowed." +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." msgstr "" #, python-format -msgid "must be '%(value)s'" +msgid "'%(command)s' is deprecated. %(additional_info)s" msgstr "" #, python-format -msgid "must be one of %(values)s" -msgstr "" - -msgid "must be datetime value" -msgstr "" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -msgid "must be relative" -msgstr "" - -msgid "must be dictionary" -msgstr "" - -msgid "must be Kerberos principal" +msgid "%(line)s" msgstr "" #, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" +msgid "Search result has been truncated: %(reason)s" msgstr "" #, python-format -msgid "%(filename)s: file not found" +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." msgstr "" -#, python-brace-format -msgid "Unable to parse option {item}" +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" msgstr "" -msgid "any of the configured servers" +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." msgstr "" -msgid "Exceeded number of tries to forward a request." +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." msgstr "" msgid "Filename is empty" @@ -13096,6 +13088,18 @@ msgstr "" msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + #, python-format msgid "Retrieving CA cert chain failed: %s" msgstr "" @@ -13112,10 +13116,6 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" -#, python-format -msgid "objectclass %s not found" -msgstr "" - #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" @@ -13262,118 +13262,10 @@ msgstr[0] "" msgstr[1] "" msgstr[2] "" +#, python-format msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -#| msgid "Configuration" -msgid "Profile configuration" -msgstr "Nastavení" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "" @@ -13598,20 +13490,4474 @@ msgstr "" msgid "%i CAs removed." msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "group" +msgid "groups" +msgstr "skupinu" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +#, fuzzy +#| msgid "Group" +msgid "User Group" +msgstr "Skupina" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "" +"\n" +"DNS server configuration\n" +msgstr "Nastavení" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org +#, fuzzy +#| msgid "Server" +msgid "DNS server" +msgstr "Server" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +#, fuzzy +#| msgid "Servers" +msgid "DNS servers" +msgstr "Servery" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +#, fuzzy +#| msgid "Servers" +msgid "DNS Servers" +msgstr "Servery" + +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org +#, fuzzy +#| msgid "Server" +msgid "DNS Server" +msgstr "Server" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "service" +msgid "HBAC services" +msgstr "službu" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +#, fuzzy +#| msgid "Services" +msgid "HBAC Services" +msgstr "Služby" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Service" +msgid "HBAC Service" +msgstr "Služba" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "Principal alias" +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "User password expiration" +msgstr "Uživatelské heslo" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +# auto translated by TM merge from project: libreport, version: master, DocId: +# libreport +msgid "Subject" +msgstr "Předmět" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +# auto translated by TM merge from project: authconfig, version: master, +# DocId: po/authconfig +msgid "Invalid LDAP URI." +msgstr "Neplatné URI pro LDAP." + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "group" +msgid "netgroups" +msgstr "skupinu" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "group" +msgid "Netgroups" +msgstr "skupinu" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "group" +msgid "Netgroup" +msgstr "skupinu" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "One time password commands" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "OTP configuration options" +msgstr "Nastavení" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "OTP Configuration" +msgstr "Nastavení" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +#, fuzzy +#| msgid "Servers" +msgid "RADIUS Servers" +msgstr "Servery" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "RADIUS" +msgid "RADIUS Server" +msgstr "RADIUS" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +#| msgid "password" +msgid "password policy" +msgstr "heslo" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +#| msgid "password" +msgid "password policies" +msgstr "heslo" + +# auto translated by TM merge from project: python-simpleline, version: +# master, DocId: python-simpleline +#, fuzzy +#| msgid "Password" +msgid "Password Policies" +msgstr "Heslo" + +# auto translated by TM merge from project: python-simpleline, version: +# master, DocId: python-simpleline +#, fuzzy +#| msgid "Password" +msgid "Password Policy" +msgstr "Heslo" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: dnf +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "Uživatelské jméno" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy, python-format +#| msgid "Members" +msgid "member %s" +msgstr "Členové" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "service delegation rules" +msgstr "Nastavení služeb" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "Service delegation rules" +msgstr "Nastavení služeb" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "Service delegation rule" +msgstr "Nastavení služeb" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "service delegation target" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "service delegation targets" +msgstr "Nastavení služeb" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "Service delegation targets" +msgstr "Nastavení služeb" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "Service delegation target" +msgstr "Nastavení služeb" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# labs.fedoraproject.org, DocId: po/labs.fedoraproject.org +#, fuzzy +#| msgid "Stage" +msgid "Stage Users" +msgstr "Stage" + +# auto translated by TM merge from project: Fedora Websites, version: +# labs.fedoraproject.org, DocId: po/labs.fedoraproject.org +#, fuzzy +#| msgid "Stage" +msgid "Stage User" +msgstr "Stage" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "Zastaralé volby" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +#| msgid "Unspecified" +msgid " * 0 - unspecified\n" +msgstr "Nespecifikováno" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject email address" +msgstr "" + +# auto translated by TM merge from project: libreport, version: master, DocId: +# libreport +#, fuzzy +#| msgid "Subject" +msgid "Subject DNS name" +msgstr "Předmět" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +# auto translated by TM merge from project: libreport, version: master, DocId: +# libreport +#, fuzzy +#| msgid "Subject" +msgid "Subject URI" +msgstr "Předmět" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "IP Address" +msgid "Subject IP Address" +msgstr "IP adresa" + +# auto translated by TM merge from project: libreport, version: master, DocId: +# libreport +#, fuzzy +#| msgid "Subject" +msgid "Subject OID" +msgstr "Předmět" + +# auto translated by TM merge from project: libreport, version: master, DocId: +# libreport +#, fuzzy +#| msgid "Subject" +msgid "Subject UPN" +msgstr "Předmět" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Fingerprint" +msgid "Fingerprint (SHA1)" +msgstr "Otisk" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Fingerprint" +msgid "Fingerprint (SHA256)" +msgstr "Otisk" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Serial Number" +msgid "Serial number (hex)" +msgstr "Sériové číslo" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "'add' option" +msgstr "Zastaralé volby" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Status" +msgstr "Stav" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "command" +msgid "sudo command" +msgstr "příkaz" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "commands" +msgid "sudo commands" +msgstr "příkazy" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "commands" +msgid "Sudo Commands" +msgstr "příkazy" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +#, fuzzy +#| msgid "Rules" +msgid "Sudo Rules" +msgstr "Pravidla" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "user" +msgid "users" +msgstr "uživatel" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +msgid "command" +msgstr "příkaz" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "commands" +msgstr "příkazy" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "group" +msgid "group runAs" +msgstr "skupinu" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust type" +msgstr "" + +msgid "Trust status" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " msgstr "" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "trust configuration" +msgstr "Nastavení" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "Global Trust Configuration" +msgstr "Nastavení" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Name" +msgstr "Název" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +# auto translated by TM merge from project: Cockpit, version: master, DocId: +# cockpit +#, fuzzy +#| msgid "Disabled" +msgid "Domain enabled" +msgstr "Zakázáno" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Server Roles" +msgid "" +"\n" +"IPA server roles\n" +msgstr "Serverové role" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Server Roles" +msgid "server role" +msgstr "Serverové role" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Server Roles" +msgid "server roles" +msgstr "Serverové role" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Server Roles" +msgid "IPA Server Roles" +msgstr "Serverové role" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Server Roles" +msgid "IPA Server Role" +msgstr "Serverové role" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Continue" +msgid "Vault Container" +msgstr "Pokračovat" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +# auto translated by TM merge from project: ibus-input-pad, version: head, +# DocId: ibus-input-pad +#, fuzzy +#| msgid "Default" +msgid "vault" +msgstr "Výchozí" + +# auto translated by TM merge from project: ibus-input-pad, version: head, +# DocId: ibus-input-pad +#, fuzzy +#| msgid "Default" +msgid "vaults" +msgstr "Výchozí" + +# auto translated by TM merge from project: ibus-input-pad, version: head, +# DocId: ibus-input-pad +#, fuzzy +#| msgid "Default" +msgid "Vaults" +msgstr "Výchozí" + +# auto translated by TM merge from project: ibus-input-pad, version: head, +# DocId: ibus-input-pad +#, fuzzy +#| msgid "Default" +msgid "Vault" +msgstr "Výchozí" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "Vault configuration" +msgstr "Nastavení" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "Profile configuration" +msgstr "Nastavení" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "group" +msgid "host groups" +msgstr "skupinu" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +#, fuzzy +#| msgid "Group" +msgid "Host Group" +msgstr "Skupina" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "group" +msgid "hostgroup" +msgstr "skupinu" + +msgid "privileged hostgroup" +msgstr "" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Location" +msgid "" +"\n" +"IPA locations\n" +msgstr "Umístění" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Location" +msgid "location" +msgstr "Umístění" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Location" +msgid "locations" +msgstr "Umístění" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Location" +msgid "IPA Locations" +msgstr "Umístění" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Location" +msgid "IPA Location" +msgstr "Umístění" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Location" +msgid "Location name" +msgstr "Umístění" + +msgid "IPA location name" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f22-branch, +# DocId: anaconda +#, fuzzy +#| msgid "description" +msgid "IPA Location description" +msgstr "popis" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +msgid "Servers" +msgstr "Servery" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org +#, fuzzy +#| msgid "Server" +msgid "IPA Server" +msgstr "Server" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Role" +msgstr "Role" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Authentication" +msgid "Last failed authentication" +msgstr "Autentizace" + +# auto translated by TM merge from project: Pulseaudio, version: 6.0, DocId: +# pulseaudio.pot +#, fuzzy +#| msgid "Timeout" +msgid "Time now" +msgstr "Časový limit" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +#, fuzzy +#| msgid "URL" +msgid "URI" +msgstr "URL" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "A list of ACI values" +msgstr "" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" msgstr "" msgid "" @@ -14165,9 +18511,6 @@ msgstr "" msgid "Managedby permission" msgstr "" -msgid "DNS is not configured" -msgstr "" - msgid "cannot be used when a zone is specified" msgstr "" @@ -14398,1463 +18741,566 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -#| msgid "Configuration" +#, python-brace-format msgid "" -"\n" -"DNS server configuration\n" -msgstr "Nastavení" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" -msgid "" -"\n" -"Manipulate DNS server configuration\n" +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." msgstr "" msgid "" "\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" +"API Schema\n" msgstr "" msgid "" "\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" msgstr "" # auto translated by TM merge from project: Fedora Websites, version: # alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -#, fuzzy -#| msgid "Server" -msgid "DNS server" -msgstr "Server" +msgid "Documentation" +msgstr "Dokumentace" -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -#| msgid "Servers" -msgid "DNS servers" -msgstr "Servery" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -#| msgid "Servers" -msgid "DNS Servers" -msgstr "Servery" - -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -#, fuzzy -#| msgid "Server" -msgid "DNS Server" -msgstr "Server" - -msgid "DNS Server name" +msgid "Exclude from" msgstr "" -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Modify DNS server configuration" +msgid "Include in" msgstr "" #, python-format -msgid "Modified DNS server \"%(value)s\"" +msgid "Results should contain primary key attribute only (\"%s\")" msgstr "" -msgid "Search for DNS servers." +msgid "Help topic" msgstr "" -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Version" +msgstr "Verze" -msgid "IPA DNS Server is not installed" +msgid "Parameters" msgstr "" -msgid "Display configuration of a DNS server." +msgid "Method of" msgstr "" -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users #, fuzzy -#| msgid "service" -msgid "HBAC services" -msgstr "službu" +#| msgid "Command name" +msgid "Method name" +msgstr "Název příkazu" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command." +msgstr "" + +#, fuzzy +#| msgid "Topic or Command" +msgid "Search for commands." +msgstr "Téma nebo příkaz" + +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "CLI name" +msgstr "Název příkazu" + +#, fuzzy +#| msgid "User password" +msgid "Confirm (password)" +msgstr "Uživatelské heslo" + +# auto translated by TM merge from project: ibus-input-pad, version: head, +# DocId: ibus-input-pad +msgid "Default" +msgstr "Výchozí" + +# auto translated by TM merge from project: ibus-input-pad, version: head, +# DocId: ibus-input-pad +#, fuzzy +#| msgid "Default" +msgid "Default from" +msgstr "Výchozí" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +msgid "Label" +msgstr "Název" + +msgid "Convert on server" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +#| msgid "Options" +msgid "Option group" +msgstr "Přepínače" + +msgid "Sensitive" +msgstr "" + +#, fuzzy +#| msgid "Positional arguments" +msgid "Positional argument" +msgstr "Poziční argumenty" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" # auto translated by TM merge from project: firewalld, version: master, DocId: # po/firewalld #, fuzzy -#| msgid "Services" -msgid "HBAC Services" -msgstr "Služby" +#| msgid "Entry" +msgid "entry" +msgstr "Položka" -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils +msgid "entries" +msgstr "" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +msgid "Entry" +msgstr "Položka" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +# auto translated by TM merge from project: libguestfs, version: master, +# DocId: po/libguestfs +#, python-format +msgid "%s" +msgstr "%s" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld #, fuzzy -#| msgid "Service" -msgid "HBAC Service" -msgstr "Služba" +#| msgid "Rules" +msgid "HBAC Rules" +msgstr "Pravidla" #, python-format -msgid "Added HBAC service \"%(value)s\"" +msgid "Added HBAC rule \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted HBAC service \"%(value)s\"" +msgid "Deleted HBAC rule \"%(value)s\"" msgstr "" #, python-format -msgid "Modified HBAC service \"%(value)s\"" +msgid "Modified HBAC rule \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" msgstr[0] "" msgstr[1] "" msgstr[2] "" -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" msgstr "" #, python-format -msgid "Added HBAC service group \"%(value)s\"" +msgid "Disabled HBAC rule \"%(value)s\"" msgstr "" -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" +msgid "Access time" msgstr "" -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" +msgid "Add source hosts and hostgroups to an HBAC rule." msgstr "" -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - msgid "" "\n" -"Stageusers\n" +"Simulate use of Host-based access controls\n" "\n" -"Manage stage user entries.\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" "\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" "\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" +" --user, --host, and --service are mandatory, others are optional.\n" "\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" "\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" "\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# labs.fedoraproject.org, DocId: po/labs.fedoraproject.org -#, fuzzy -#| msgid "Stage" -msgid "Stage Users" -msgstr "Stage" - -# auto translated by TM merge from project: Fedora Websites, version: -# labs.fedoraproject.org, DocId: po/labs.fedoraproject.org -#, fuzzy -#| msgid "Stage" -msgid "Stage User" -msgstr "Stage" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" -"Topology\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" "\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" "\n" "\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" +"HBACTEST AND TRUSTED DOMAINS\n" "\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" "\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" "\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" "\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" "\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" "\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" "\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" "\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -#| msgid "group" -msgid "host groups" -msgstr "skupinu" - -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -#, fuzzy -#| msgid "Group" -msgid "Host Group" -msgstr "Skupina" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" +msgid "Unresolved rules in --rules" msgstr "" #, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" +msgid "Access granted: %s" msgstr "" -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" +msgid "ID View" msgstr "" -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -#| msgid "group" -msgid "hostgroup" -msgstr "skupinu" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -#| msgid "Continue" -msgid "Vault Container" -msgstr "Pokračovat" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -# auto translated by TM merge from project: ibus-input-pad, version: head, -# DocId: ibus-input-pad -#, fuzzy -#| msgid "Default" -msgid "vault" -msgstr "Výchozí" - -# auto translated by TM merge from project: ibus-input-pad, version: head, -# DocId: ibus-input-pad -#, fuzzy -#| msgid "Default" -msgid "vaults" -msgstr "Výchozí" - -# auto translated by TM merge from project: ibus-input-pad, version: head, -# DocId: ibus-input-pad -#, fuzzy -#| msgid "Default" -msgid "Vaults" -msgstr "Výchozí" - -# auto translated by TM merge from project: ibus-input-pad, version: head, -# DocId: ibus-input-pad -#, fuzzy -#| msgid "Default" -msgid "Vault" -msgstr "Výchozí" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -#| msgid "Configuration" -msgid "Vault configuration" -msgstr "Nastavení" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -#| msgid "group" -msgid "netgroups" -msgstr "skupinu" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -#| msgid "group" -msgid "Netgroups" -msgstr "skupinu" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -#| msgid "group" -msgid "Netgroup" -msgstr "skupinu" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "One time password commands" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -#| msgid "Configuration" -msgid "OTP configuration options" -msgstr "Nastavení" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -#| msgid "Configuration" -msgid "OTP Configuration" -msgstr "Nastavení" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -#| msgid "Servers" -msgid "RADIUS Servers" -msgstr "Servery" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -#| msgid "RADIUS" -msgid "RADIUS Server" -msgstr "RADIUS" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "must be at least 10" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -#| msgid "Configuration" -msgid "configuration options" -msgstr "Nastavení" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -msgid "Configuration" -msgstr "Nastavení" - -msgid "Maximum hostname length" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" +msgid "system ID View" msgstr "" -msgid "Renewal master for IPA certificate authority" +msgid "ID Views" msgstr "" -msgid "IPA servers configured as key recovery agent" +msgid "User object overrides" msgstr "" -msgid "Hidden IPA KRA servers" +msgid "Group object overrides" msgstr "" -msgid "Hidden IPA servers configured as key recovery agent" +msgid "Hosts the view applies to" msgstr "" msgid "Domain resolution order" @@ -15863,238 +19309,185 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Empty domain is not allowed" +#, python-format +msgid "Added ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" +msgid "Deleted ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Server has no information about domain '%(domain)s'" +msgid "Modified an ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, fuzzy, python-format -#| msgid "error on server '%(server)s': %(error)s" -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "chyba na serveru '%(server)s': %(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -#| msgid "group" -msgid "groups" -msgstr "skupinu" - -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -#, fuzzy -#| msgid "Group" -msgid "User Group" -msgstr "Skupina" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" msgstr[0] "" msgstr[1] "" msgstr[2] "" -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgid "Default Trust View cannot be applied on hosts" msgstr "" -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" msgstr "" #, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "ID View applied to %i host." msgstr "" -msgid "not allowed to modify user entries" +#, python-format +msgid "ID View applied to %i hosts." msgstr "" -msgid "not allowed to modify group entries" +#, python-format +msgid "ID View cleared from %i host." msgstr "" -msgid "Not a managed group" +#, python-format +msgid "ID View cleared from %i hosts." msgstr "" -msgid "Add users that can manage members of this group." +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" -msgid "Remove users that can manage members of this group." +msgid "IPA object" msgstr "" +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Display information about an ID override." +msgstr "" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +#, fuzzy +#| msgid "User ID" +msgid "User ID override" +msgstr "ID uživatele" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + # auto translated by TM merge from project: selinux (policycoreutils), # version: master, DocId: policycoreutils #, fuzzy @@ -16320,1346 +19713,43 @@ msgstr[0] "" msgstr[1] "" msgstr[2] "" -msgid "" -"\n" -"OTP Tokens\n" +msgid "delegation" msgstr "" -msgid "" -"\n" -"Manage OTP tokens.\n" +msgid "delegations" msgstr "" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf #, fuzzy -#| msgid "URL" -msgid "URI" -msgstr "URL" +#| msgid "Deprecated options" +msgid "Delegations" +msgstr "Zastaralé volby" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +#| msgid "Delete" +msgid "Delegation" +msgstr "Smazat" #, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" +msgid "Added delegation \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted OTP token \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" msgstr "" #, python-format -msgid "Modified OTP token \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "" msgstr[1] "" msgstr[2] "" -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -#, fuzzy -#| msgid "Rules" -msgid "Sudo Rules" -msgstr "Pravidla" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -#| msgid "user" -msgid "users" -msgstr "uživatel" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -msgid "command" -msgstr "příkaz" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "commands" -msgstr "příkazy" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -#| msgid "group" -msgid "group runAs" -msgstr "skupinu" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -#| msgid "command" -msgid "sudo command" -msgstr "příkaz" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -#| msgid "commands" -msgid "sudo commands" -msgstr "příkazy" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -#| msgid "commands" -msgid "Sudo Commands" -msgstr "příkazy" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -#| msgid "Location" -msgid "" -"\n" -"IPA locations\n" -msgstr "Umístění" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -#| msgid "Location" -msgid "location" -msgstr "Umístění" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -#| msgid "Location" -msgid "locations" -msgstr "Umístění" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -#| msgid "Location" -msgid "IPA Locations" -msgstr "Umístění" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -#| msgid "Location" -msgid "IPA Location" -msgstr "Umístění" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -#| msgid "Location" -msgid "Location name" -msgstr "Umístění" - -msgid "IPA location name" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f22-branch, -# DocId: anaconda -#, fuzzy -#| msgid "description" -msgid "IPA Location description" -msgstr "popis" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -msgid "Servers" -msgstr "Servery" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -#, fuzzy -#| msgid "Server" -msgid "IPA Server" -msgstr "Server" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Name" -msgstr "Název" - -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -msgid "Documentation" -msgstr "Dokumentace" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Version" -msgstr "Verze" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -#| msgid "Command name" -msgid "Method name" -msgstr "Název příkazu" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command." -msgstr "" - -#, fuzzy -#| msgid "Topic or Command" -msgid "Search for commands." -msgstr "Téma nebo příkaz" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -#| msgid "Command name" -msgid "CLI name" -msgstr "Název příkazu" - -#, fuzzy -#| msgid "User password" -msgid "Confirm (password)" -msgstr "Uživatelské heslo" - -# auto translated by TM merge from project: ibus-input-pad, version: head, -# DocId: ibus-input-pad -msgid "Default" -msgstr "Výchozí" - -# auto translated by TM merge from project: ibus-input-pad, version: head, -# DocId: ibus-input-pad -#, fuzzy -#| msgid "Default" -msgid "Default from" -msgstr "Výchozí" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -msgid "Label" -msgstr "Název" - -msgid "Convert on server" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -#| msgid "Options" -msgid "Option group" -msgstr "Přepínače" - -msgid "Sensitive" -msgstr "" - -#, fuzzy -#| msgid "Positional arguments" -msgid "Positional argument" -msgstr "Poziční argumenty" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -#| msgid "Service Settings" -msgid "Self Service Permissions" -msgstr "Nastavení služeb" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -#| msgid "Server Roles" -msgid "" -"\n" -"IPA server roles\n" -msgstr "Serverové role" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -#| msgid "Server Roles" -msgid "server role" -msgstr "Serverové role" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -#| msgid "Server Roles" -msgid "server roles" -msgstr "Serverové role" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -#| msgid "Server Roles" -msgid "IPA Server Roles" -msgstr "Serverové role" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -#| msgid "Server Roles" -msgid "IPA Server Role" -msgstr "Serverové role" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "IPA role name" -msgstr "" - msgid "HBAC rule and local members cannot both be set" msgstr "" @@ -17740,1024 +19830,230 @@ msgstr "" msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "" -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide #, fuzzy -#| msgid "Deprecated options" +#| msgid "Servers" msgid "" "\n" -"IPA certificate operations\n" -msgstr "Zastaralé volby" +"IPA servers\n" +msgstr "Servery" msgid "" "\n" -"Implements a set of commands for managing server SSL certificates.\n" +"Get information about installed IPA servers.\n" msgstr "" msgid "" "\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" +" Find all servers:\n" +" ipa server-find\n" msgstr "" msgid "" "\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" msgstr "" -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org #, fuzzy -#| msgid "Unspecified" -msgid " * 0 - unspecified\n" -msgstr "Nespecifikováno" +#| msgid "Server" +msgid "server" +msgstr "Server" -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -# auto translated by TM merge from project: libreport, version: master, DocId: -# libreport -msgid "Subject" -msgstr "Předmět" - -msgid "Subject email address" -msgstr "" - -# auto translated by TM merge from project: libreport, version: master, DocId: -# libreport +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide #, fuzzy -#| msgid "Subject" -msgid "Subject DNS name" -msgstr "Předmět" +#| msgid "Servers" +msgid "servers" +msgstr "Servery" -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -# auto translated by TM merge from project: libreport, version: master, DocId: -# libreport +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide #, fuzzy -#| msgid "Subject" -msgid "Subject URI" -msgstr "Předmět" +#| msgid "Servers" +msgid "IPA Servers" +msgstr "Servery" -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer #, fuzzy -#| msgid "IP Address" -msgid "Subject IP Address" -msgstr "IP adresa" +#| msgid "Location" +msgid "Server location" +msgstr "Umístění" -# auto translated by TM merge from project: libreport, version: master, DocId: -# libreport +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall #, fuzzy -#| msgid "Subject" -msgid "Subject OID" -msgstr "Předmět" +#| msgid "Service Settings" +msgid "Service weight" +msgstr "Nastavení služeb" -# auto translated by TM merge from project: libreport, version: master, DocId: -# libreport +msgid "Weight for server services" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall #, fuzzy -#| msgid "Subject" -msgid "Subject UPN" -msgstr "Předmět" +#| msgid "Service Settings" +msgid "Service relative weight" +msgstr "Nastavení služeb" -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -msgid "Issuer" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" +msgid "Relative weight for server services (counts per location)" msgstr "" # auto translated by TM merge from project: Fedora Websites, version: # getfedora.org, DocId: po/getfedora #, fuzzy -#| msgid "Fingerprint" -msgid "Fingerprint (SHA1)" -msgstr "Otisk" +#| msgid "Server Roles" +msgid "Enabled server roles" +msgstr "Serverové role" -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -#| msgid "Fingerprint" -msgid "Fingerprint (SHA256)" -msgstr "Otisk" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -#| msgid "Serial Number" -msgid "Serial number (hex)" -msgstr "Sériové číslo" - -msgid "Request status" +msgid "List of enabled roles" msgstr "" -msgid "Include certificate chain in output" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" +msgid "Modify information about an IPA server." msgstr "" #, python-format -msgid "krbtgt certs can use only the %s profile" +msgid "Modified IPA server \"%(value)s\"" msgstr "" -msgid "No Common Name was found in subject of request." +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" msgstr "" #, python-format msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" #, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" msgstr "" -msgid "DN commonName does not match user's login" -msgstr "" +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "chyba na serveru '%(server)s': %(error)s" -msgid "DN emailAddress does not match any of user's email addresses" +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" msgstr "" #, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." +msgid "Failed to cleanup server principals/keys: %(err)s" msgstr "" #, python-format -msgid "subject alt name type %s is forbidden for user principals" +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" msgstr "" #, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" +msgid "Forcing removal of %(hostname)s" msgstr "" -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." +msgid "Ignoring topology connectivity errors." msgstr "" -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" +msgid "Server has already been deleted" msgstr "" -msgid "RFC822Name does not match any of user's email addresses" +msgid "Agreements deleted" msgstr "" -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" +msgid "Following segments were not deleted:" msgstr "" -#, python-format -msgid "Subject alt name type %s is forbidden" +msgid "not allowed to perform server connection check" msgstr "" -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -#, fuzzy -#| msgid "Deprecated options" -msgid "'add' option" -msgstr "Zastaralé volby" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgid "Set enabled/hidden state of a server." msgstr "" # auto translated by TM merge from project: selinux (policycoreutils), # version: master, DocId: policycoreutils -msgid "Status" +#, fuzzy +#| msgid "Status" +msgid "State" msgstr "Stav" -msgid "Revoked" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Display information about an ID override." -msgstr "" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide #, fuzzy -#| msgid "User ID" -msgid "User ID override" -msgstr "ID uživatele" +#| msgid "Servers" +msgid "Server state" +msgstr "Servery" -msgid "User ID overrides" +#, python-format +msgid "Changed server state of \"%(value)s\"." msgstr "" -msgid "Base-64 encoded user certificate" +msgid "Cannot hide CA renewal master." msgstr "" -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" +msgid "Cannot hide DNSSec key master." msgstr "" #, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"\n" -"Auto Membership Rule.\n" +msgid "Cannot hide last enabled %(name)s server." msgstr "" msgid "" "\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" +"Session Support for IPA\n" msgstr "" msgid "" @@ -18945,6 +20241,877 @@ msgstr "Povolit" msgid "Enabled CA \"%(value)s\"" msgstr "" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Users" +msgid "User logins" +msgstr "Uživatelé" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "configuration options" +msgstr "Nastavení" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +msgid "Configuration" +msgstr "Nastavení" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "chyba na serveru '%(server)s': %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +msgid "Host" +msgstr "Počítač" + +msgid "Base-64 encoded host certificate" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +msgid "Serial Number" +msgstr "Sériové číslo" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Serial Number" +msgid "Serial Number (hex)" +msgstr "Sériové číslo" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Authentication" +msgid "Authentication Indicators" +msgstr "Autentizace" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + msgid "Internationalization messages" msgstr "" @@ -20187,18 +22354,6 @@ msgstr "" msgid "REVOKED" msgstr "" -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -msgid "Serial Number" -msgstr "Sériové číslo" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -#| msgid "Serial Number" -msgid "Serial Number (hex)" -msgstr "Sériové číslo" - # auto translated by TM merge from project: Fedora Websites, version: # getfedora.org, DocId: po/getfedora #, fuzzy @@ -20264,9 +22419,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -msgid "Certificate mapping data" -msgstr "" - # auto translated by TM merge from project: system-config-audit, version: # master, DocId: system-config-audit #, fuzzy @@ -21103,11 +23255,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -msgid "Host" -msgstr "Počítač" - # auto translated by TM merge from project: system-config-firewall, version: # master, DocId: po/system-config-firewall #, fuzzy @@ -21259,13 +23406,6 @@ msgstr "" msgid "Add password policy" msgstr "LDAP heslo" -# auto translated by TM merge from project: python-simpleline, version: -# master, DocId: python-simpleline -#, fuzzy -#| msgid "Password" -msgid "Password Policy" -msgstr "Heslo" - msgid "Remove password policies" msgstr "" @@ -21801,15 +23941,6 @@ msgstr "" msgid "Remove domains" msgstr "" -msgid "Trust direction" -msgstr "" - -msgid "Trust status" -msgstr "" - -msgid "Trust type" -msgstr "" - msgid "Alternative UPN suffixes" msgstr "" @@ -22416,9 +24547,6 @@ msgstr "" msgid "Topology" msgstr "" -msgid "Trusts" -msgstr "" - msgid "True" msgstr "" @@ -22530,1513 +24658,6 @@ msgstr "" msgid "Unsupported value" msgstr "" -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Role" -msgstr "Role" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -#| msgid "Servers" -msgid "" -"\n" -"IPA servers\n" -msgstr "Servery" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -#, fuzzy -#| msgid "Server" -msgid "server" -msgstr "Server" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -#| msgid "Servers" -msgid "servers" -msgstr "Servery" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -#| msgid "Servers" -msgid "IPA Servers" -msgstr "Servery" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -#| msgid "Location" -msgid "Server location" -msgstr "Umístění" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -#| msgid "Service Settings" -msgid "Service weight" -msgstr "Nastavení služeb" - -msgid "Weight for server services" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -#| msgid "Service Settings" -msgid "Service relative weight" -msgstr "Nastavení služeb" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -#| msgid "Server Roles" -msgid "Enabled server roles" -msgstr "Serverové role" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "error on server '%(server)s': %(error)s" -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "chyba na serveru '%(server)s': %(error)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -#| msgid "Status" -msgid "State" -msgstr "Stav" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -#| msgid "Servers" -msgid "Server state" -msgstr "Servery" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy, python-format -#| msgid "Members" -msgid "member %s" -msgstr "Členové" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -#| msgid "Service Settings" -msgid "service delegation rules" -msgstr "Nastavení služeb" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -#| msgid "Service Settings" -msgid "Service delegation rules" -msgstr "Nastavení služeb" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -#| msgid "Service Settings" -msgid "Service delegation rule" -msgstr "Nastavení služeb" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "service delegation target" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -#| msgid "Service Settings" -msgid "service delegation targets" -msgstr "Nastavení služeb" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -#| msgid "Service Settings" -msgid "Service delegation targets" -msgstr "Nastavení služeb" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -#| msgid "Service Settings" -msgid "Service delegation target" -msgstr "Nastavení služeb" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -# auto translated by TM merge from project: authconfig, version: master, -# DocId: po/authconfig -msgid "Invalid LDAP URI." -msgstr "Neplatné URI pro LDAP." - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -#| msgid "Authentication" -msgid "Authentication Indicators" -msgstr "Autentizace" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -#| msgid "password" -msgid "password policy" -msgstr "heslo" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -#| msgid "password" -msgid "password policies" -msgstr "heslo" - -# auto translated by TM merge from project: python-simpleline, version: -# master, DocId: python-simpleline -#, fuzzy -#| msgid "Password" -msgid "Password Policies" -msgstr "Heslo" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: dnf -#, fuzzy -#| msgid "User name" -msgid "User check" -msgstr "Uživatelské jméno" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -#| msgid "Configuration" -msgid "trust configuration" -msgstr "Nastavení" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -#| msgid "Configuration" -msgid "Global Trust Configuration" -msgstr "Nastavení" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -# auto translated by TM merge from project: Cockpit, version: master, DocId: -# cockpit -#, fuzzy -#| msgid "Disabled" -msgid "Domain enabled" -msgstr "Zakázáno" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -#| msgid "Users" -msgid "User logins" -msgstr "Uživatelé" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -24209,658 +24830,41 @@ msgstr "" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "" -msgid "delegation" +msgid "self service permission" msgstr "" -msgid "delegations" +msgid "self service permissions" msgstr "" +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall #, fuzzy -#| msgid "Deprecated options" -msgid "Delegations" -msgstr "Zastaralé volby" +#| msgid "Service Settings" +msgid "Self Service Permissions" +msgstr "Nastavení služeb" -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -#| msgid "Delete" -msgid "Delegation" -msgstr "Smazat" - -#, python-format -msgid "Added delegation \"%(value)s\"" +msgid "Self Service Permission" msgstr "" #, python-format -msgid "Deleted delegation \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "Modified delegation \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" msgstr[0] "" msgstr[1] "" msgstr[2] "" -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -#, fuzzy -#| msgid "Rules" -msgid "HBAC Rules" -msgstr "Pravidla" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -#, fuzzy -#| msgid "Entry" -msgid "entry" -msgstr "Položka" - -msgid "entries" -msgstr "" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -msgid "Entry" -msgstr "Položka" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -# auto translated by TM merge from project: libguestfs, version: master, -# DocId: po/libguestfs -#, python-format -msgid "%s" -msgstr "%s" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#, fuzzy -#| msgid "User password" -msgid "User password expiration" -msgstr "Uživatelské heslo" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -#| msgid "Authentication" -msgid "Last failed authentication" -msgstr "Autentizace" - -# auto translated by TM merge from project: Pulseaudio, version: 6.0, DocId: -# pulseaudio.pot -#, fuzzy -#| msgid "Timeout" -msgid "Time now" -msgstr "Časový limit" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - #, python-format msgid "all masters must have %(role)s role enabled" msgstr "" @@ -25042,25 +25046,6 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - msgid "Request must be a dict" msgstr "" @@ -25082,6 +25067,25 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #, python-format msgid "must equal %r" msgstr "" diff --git a/po/de.po b/po/de.po index 805049de1..88738c4c6 100644 --- a/po/de.po +++ b/po/de.po @@ -9,7 +9,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2021-01-27 07:52+0000\n" "Last-Translator: Alexander Bokovoy \n" "Language-Team: German to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "Gruppen" + +msgid "User Group" +msgstr "Benutzergruppe" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Gruppe »%(value)s« hinzugefügt" + +#, fuzzy +#| msgid "Change to external group" +msgid "gid cannot be set for external group" +msgstr "In externe Gruppe umwandeln" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Gruppe »%(value)s« gelöscht" + +#, fuzzy +#| msgid "No private group" +msgid "privileged group" +msgstr "Keine private Gruppe" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Gruppe »%(value)s« geändert" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d passende Gruppe" +msgstr[1] "%(count)d passende Gruppen" + +#, fuzzy +#| msgid "" +#| "Cannot perform the selected command without Samba 4 support installed. " +#| "Make sure you have installed server-trust-ad sub-package of IPA." +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Kann den ausgewählten Befehl nicht ohne Samba 4 Unterstützung ausführen. " +"Stellen Sie sicher, dass das server-trust-ad Paket von IPA installiert ist." + +#, fuzzy +#| msgid "" +#| "Cannot perform the selected command without Samba 4 instance configured " +#| "on this machine. Make sure you have run ipa-adtrust-install on this " +#| "server." +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " +"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " +"auf dieser Maschine ausgeführt wurde." + +#, fuzzy, python-format +#| msgid "Deleted stage user \"%(value)s\"" +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" gelöscht" + +msgid "not allowed to modify user entries" +msgstr "Es ist nicht erlaubt, Benutzereinträge zu ändern." + +msgid "not allowed to modify group entries" +msgstr "Es ist nicht erlaubt, Gruppeneinträge zu ändern." + +msgid "Not a managed group" +msgstr "Keine verwaltete Gruppe" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this group." +msgstr "Nutzer hinzufügen die diesen Token verwalten können" + +#, fuzzy +#| msgid "Remove users that can manage this token." +msgid "Remove users that can manage members of this group." +msgstr "Nutzer entfernen die diesen Token verwalten können" + +#, fuzzy +#| msgid "RADIUS proxy configuration" +msgid "" +"\n" +"DNS server configuration\n" +msgstr "RADIUS-Proxy Konfiguration" + +#, fuzzy +#| msgid "Inherited from server configuration" +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "Vererbt von Serverkonfiguration" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +#, fuzzy +#| msgid "server" +msgid "DNS server" +msgstr "Server" + +#, fuzzy +#| msgid "servers" +msgid "DNS servers" +msgstr "Server" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "DNS Servers" +msgstr "Radius Server" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "DNS Server" +msgstr "Radius Server" + +#, fuzzy +#| msgid "Server name" +msgid "DNS Server name" +msgstr "Servername" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "DNS is not configured" +msgstr "DNS ist nicht konfiguriert" + +#, fuzzy +#| msgid "Inherited from server configuration" +msgid "Modify DNS server configuration" +msgstr "Vererbt von Serverkonfiguration" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified DNS server \"%(value)s\"" +msgstr "Dienst »%(value)s« geändert" + +#, fuzzy +#| msgid "Search for DNS resources." +msgid "Search for DNS servers." +msgstr "Nach DNS-Ressourcen suchen." + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA DNS Server is not installed" +msgstr "Zu verwendender IPA-Server" + +#, fuzzy +#| msgid "Display information about an IPA service." +msgid "Display configuration of a DNS server." +msgstr "Informationen zu einem IPA-Dienst anzeigen." + +#, fuzzy +#| msgid "Add a new user." +msgid "Add a new DNS server." +msgstr "Einen neuen Benutzer hinzufügen." + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" + +#, fuzzy +#| msgid "Delete a user" +msgid "Delete a DNS server" +msgstr "Einen Benutzer löschen" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +#, fuzzy +#| msgid "Simulate use of Host-based access controls" +msgid "Host-based access control commands" +msgstr "HBAC Nutzung simulieren" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "HBAC-Dienste" + +msgid "HBAC Services" +msgstr "HBAC-Dienste" + +msgid "HBAC Service" +msgstr "HBAC-Dienst" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "HBAC Dienst \"%(value)s\" hinzugefügt" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "HBAC Dienst \"%(value)s\" gelöscht" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "HBAC Dienst \"%(value)s\" geändert" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "%(count)d HBAC-Dienst gefunden" +msgstr[1] "%(count)d HBAC-Dienste gefunden" + +msgid "HBAC service group" +msgstr "HBAC-Dienstgruppe" + +msgid "HBAC service groups" +msgstr "HBAC-Dienstgruppen" + +msgid "HBAC Service Groups" +msgstr "HBAC-Dienstgruppen" + +msgid "HBAC Service Group" +msgstr "HBAC-Dienstgruppe" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« hinzugefügt" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« gelöscht" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« geändert" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "%(count)d HBAC-Dienstgruppe gefunden" +msgstr[1] "%(count)d HBAC-Dienstgruppen gefunden" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "muss TRUE oder FALSE sein" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +#, fuzzy +#| msgid "Principal name" +msgid "Principal alias" +msgstr "Principal-Name" + +#, fuzzy +#| msgid "Password expiration" +msgid "User password expiration" +msgstr "Passwortablauf" + +msgid "SSH public key fingerprint" +msgstr "Fingerabdruck des öffentlichen SSH-Schlüssels" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Base-64 encoded user certificate" +msgstr "Base-64-kodiertes Serverzertifikat" + +#, fuzzy +#| msgid "Certificate Type" +msgid "Certificate mapping data" +msgstr "Zertifikattyp" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +#, fuzzy +#| msgid "Home directory" +msgid "SMB Home Directory" +msgstr "Home-Verzeichnis" + +#, fuzzy +#| msgid "Home directory base" +msgid "SMB Home Directory Drive" +msgstr "Basis für Home-Verzeichnisse" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "Ungültiges E-Mail-Format: %(email)s" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "Manager %(manager)s nicht gefunden" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "darf höchstens %(len)d Zeichen lang sein" + +msgid "Issuer" +msgstr "Ausgabestelle" + +#, fuzzy +#| msgid "File to store the certificate in." +msgid "Issuer of the certificate" +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +msgid "Subject" +msgstr "Betreff" + +#, fuzzy +#| msgid "File to store the certificate in." +msgid "Subject of the certificate" +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +#, fuzzy +#| msgid "Remove a manager to the user entry" +msgid "Add one or more certificate mappings to the user entry." +msgstr "Manager vom Benutzer entfernen" + +#, fuzzy, python-format +#| msgid "Activate a stage user \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." + +#, fuzzy +#| msgid "Remove a manager to the user entry" +msgid "Remove one or more certificate mappings from the user entry." +msgstr "Manager vom Benutzer entfernen" + +#, fuzzy, python-format +#| msgid "Removed condition(s) from \"%(value)s\"" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "realm not found\n" +msgid "{role}: role not found" +msgstr "Realm nicht gefunden\n" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "{attr}: no such attribute" msgstr "" -"Domain Level kann nicht auf {0} erhöht werden, Server {1} unterstützt das " -"nicht." + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +#, fuzzy +#| msgid "Segment details" +msgid "segments" +msgstr "Segment Details" + +#, fuzzy +#| msgid "Topology" +msgid "Topology Segments" +msgstr "Topologie" + +#, fuzzy +#| msgid "Topology" +msgid "Topology Segment" +msgstr "Topologie" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "%(count)d Host gefunden" +msgstr[1] "%(count)d Hosts gefunden" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added segment \"%(value)s\"" +msgstr "Host \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted segment \"%(value)s\"" +msgstr "Host \"%(value)s\" gelöscht" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified segment \"%(value)s\"" +msgstr "Host \"%(value)s\" geändert" + +#, fuzzy, python-format +#| msgid "Found '%(value)s'" +msgid "%(value)s" +msgstr "»%(value)s« gefunden" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, fuzzy +#| msgid "UPN suffixes" +msgid "suffixes" +msgstr "UPN Suffixe" + +#, fuzzy +#| msgid "Topology" +msgid "Topology suffixes" +msgstr "Topologie" + +#, fuzzy +#| msgid "Topology" +msgid "Topology suffix" +msgstr "Topologie" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "%(count)d Host gefunden" +msgstr[1] "%(count)d Hosts gefunden" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Host \"%(value)s\" gelöscht" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "Host \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Host \"%(value)s\" geändert" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(port)s is not a valid port" +msgid "%(user)s is not a POSIX user" +msgstr "%(port)s kein gültiger Port" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +#, fuzzy +#| msgid "LDAP URI" +msgid "Invalid LDAP URI." +msgstr "LDAP-URI" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +#, fuzzy +#| msgid "Default group for new users" +msgid "Default group for new users not found" +msgstr "Vorgegebene Gruppe für neue Benutzer" + +#, fuzzy +#| msgid "groups" +msgid "netgroups" +msgstr "Gruppen" + +#, fuzzy +#| msgid "groups" +msgid "Netgroups" +msgstr "Gruppen" + +#, fuzzy +#| msgid "group" +msgid "Netgroup" +msgstr "Gruppe" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added netgroup \"%(value)s\"" +msgstr "Gruppe »%(value)s« hinzugefügt" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Gruppe »%(value)s« gelöscht" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified netgroup \"%(value)s\"" +msgstr "Gruppe »%(value)s« geändert" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "%(count)d passende Gruppe" +msgstr[1] "%(count)d passende Gruppen" + +msgid "One time password commands" +msgstr "Einmalpasswort Befehle" + +msgid "OTP configuration options" +msgstr "OTP-Konfigurationsoptionen" + +msgid "OTP Configuration" +msgstr "OTP Konfiguration" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Passwort für \"%(value)s\" geändert" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "PKINIT" + +#, fuzzy +#| msgid "PKINIT" +msgid "PKINIT status" +msgstr "PKINIT" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "Whether PKINIT is enabled or disabled" +msgstr "Dieser Eintrag kann nicht aktiviert oder deaktiviert werden" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "Radius Server" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "Radius Server" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +#, fuzzy +#| msgid "%s is not a valid attribute." +msgid "invalid attribute name" +msgstr "%s ist kein gültiges Attribut" + +#, fuzzy +#| msgid "Serial number" +msgid "invalid port number" +msgstr "Seriennummer" + +#, fuzzy +#| msgid "RADIUS proxy username" +msgid "RADIUS proxy server" +msgstr "RADIUS-Proxy Benutzername" + +#, fuzzy +#| msgid "RADIUS proxy username" +msgid "RADIUS proxy servers" +msgstr "RADIUS-Proxy Benutzername" + +msgid "RADIUS Servers" +msgstr "Radius Server" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "RADIUS Server" +msgstr "Radius Server" + +#, fuzzy, python-format +#| msgid "Added HBAC service \"%(value)s\"" +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "HBAC Dienst \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted HBAC service \"%(value)s\"" +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "HBAC Dienst \"%(value)s\" gelöscht" + +#, fuzzy, python-format +#| msgid "Modified HBAC service \"%(value)s\"" +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "HBAC Dienst \"%(value)s\" geändert" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC service matched" +#| msgid_plural "%(count)d HBAC services matched" +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "%(count)d HBAC-Dienst gefunden" +msgstr[1] "%(count)d HBAC-Dienste gefunden" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added role \"%(value)s\"" +msgid "Added privilege \"%(value)s\"" +msgstr "Rolle \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted role \"%(value)s\"" +msgid "Deleted privilege \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, fuzzy, python-format +#| msgid "Modified role \"%(value)s\"" +msgid "Modified privilege \"%(value)s\"" +msgstr "Rolle \"%(value)s\" geändert" + +#, fuzzy, python-format +#| msgid "%(count)d role matched" +#| msgid_plural "%(count)d roles matched" +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Delete an IPA service." +msgid "Delete Class of Service entry" +msgstr "Einen IPA-Dienst entfernen." + +#, fuzzy +#| msgid "Modify an HBAC service group." +msgid "Modify Class of Service entry" +msgstr "HBAC-Dienstgruppe bearbeiten" + +msgid "Display Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Search for an HBAC service group." +msgid "Search for Class of Service entry" +msgstr "Suche nach HBAC Dienstgruppe" + +msgid "password policy" +msgstr "Passwortregel" + +msgid "password policies" +msgstr "Passwortregeln" + +msgid "Password Policies" +msgstr "Passwortregeln" + +msgid "Password Policy" +msgstr "Passwort-Regeln" + +msgid "Max repeat" +msgstr "" + +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of same consecutive characters" +msgstr "Maximale Anzahl der zurückgegebenen Einträge" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "Benutzername" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "Maximale Lebensdauer muss größer als das Minimum sein." + +msgid "cannot delete global password policy" +msgstr "Die Globale Passwortregel kann nicht gelöscht werden" + +msgid "priority cannot be set on global policy" +msgstr "Priorität der globalen Regel kann nicht gesetzt werden" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +#, fuzzy +#| msgid "Realm name" +msgid "Realm domains" +msgstr "Realm-Name" + +#, fuzzy +#| msgid "Domain" +msgid "Realm Domains" +msgstr "Domain" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +#, fuzzy +#| msgid "Zone record '%s' cannot be deleted" +msgid "IPA server domain cannot be deleted" +msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Member principals" +msgstr "Kerberos-Principal" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "Mitglied %s" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove member from a named service delegation." +msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." + +#, fuzzy +#| msgid "Add services to an HBAC rule." +msgid "service delegation rule" +msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." + +#, fuzzy +#| msgid "delegations" +msgid "service delegation rules" +msgstr "Delegationen" + +#, fuzzy +#| msgid "Service Settings" +msgid "Service delegation rules" +msgstr "Diensteinstellungen" + +#, fuzzy +#| msgid "Service Settings" +msgid "Service delegation rule" +msgstr "Diensteinstellungen" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +msgid "privileged service delegation rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, fuzzy +#| msgid "Delegation name" +msgid "service delegation target" +msgstr "Delegationsname" + +#, fuzzy +#| msgid "Service Settings" +msgid "service delegation targets" +msgstr "Diensteinstellungen" + +#, fuzzy +#| msgid "Service Settings" +msgid "Service delegation targets" +msgstr "Diensteinstellungen" + +#, fuzzy +#| msgid "Service Settings" +msgid "Service delegation target" +msgstr "Diensteinstellungen" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +msgid "privileged service delegation target" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "Vorbereitete Benutzer" + +msgid "Stage User" +msgstr "Vorbereiteter Benutzer" + +msgid "stage user" +msgstr "Vorbereiteter Benutzer" + +msgid "stage users" +msgstr "Vorbereitete Benutzer" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" + +msgid "givenname is required" +msgstr "givenname wird benötigt" + +msgid "sn is required" +msgstr "sn wird benötigt" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" gelöscht" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« geändert" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d passender Benutzer" +msgstr[1] "%(count)d passende Benutzer" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "Aktiver Benutzer mit Name \"%(user)s\" existiert bereits" + +#, python-format +msgid "Stage user %s activated" +msgstr "Vorbereiteten Benutzer %s aktiviert" + +#, fuzzy +#| msgid "Add a manager to the stage user entry" +msgid "Add one or more certificates to the stageuser entry" +msgstr "Manager zum vorbereiteten Benutzer hinzufügen" + +#, fuzzy, python-format +#| msgid "Activate a stage user \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." + +#, fuzzy +#| msgid "Remove a manager to the user entry" +msgid "Remove one or more certificates to the stageuser entry" +msgstr "Manager vom Benutzer entfernen" + +#, fuzzy, python-format +#| msgid "Activate a stage user \"%(value)s\"" +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." + +#, fuzzy +#| msgid "Add a manager to the stage user entry" +msgid "Add new principal alias to the stageuser entry" +msgstr "Manager zum vorbereiteten Benutzer hinzufügen" + +#, fuzzy, python-format +#| msgid "Added stage user \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" + +#, fuzzy +#| msgid "Remove a manager to the user entry" +msgid "Remove principal alias from the stageuser entry" +msgstr "Manager vom Benutzer entfernen" + +#, fuzzy, python-format +#| msgid "Modified stage user \"%(value)s\"" +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« geändert" + +#, fuzzy +#| msgid "Add a manager to the stage user entry" +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "Manager zum vorbereiteten Benutzer hinzufügen" + +#, fuzzy +#| msgid "Remove a manager to the user entry" +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "Manager vom Benutzer entfernen" + +#, fuzzy +#| msgid "Empty domain is not allowed" +msgid "pyhbac is not installed." +msgstr "Eine leere Domäne ist nicht zulässig" + +#, fuzzy +#| msgid "Deprecated options" +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "Veraltete Optionen" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +#, fuzzy +#| msgid "Retrieve an existing certificate." +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "Ein existierendes Zertifikat holen." + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +#, fuzzy +#| msgid "Check the status of a certificate signing request." +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "Den Status der Signaturanfrage des Zertifikats überprüfen." + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Unspecified" +msgid " * 0 - unspecified\n" +msgstr "Nicht angegeben" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "CA ist nicht konfiguriert" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Host '%(host)s' not found" +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "Host »%(host)s« nicht gefunden" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Base-64 encoded certificate." +msgstr "Base-64-kodiertes Serverzertifikat" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate chain" +msgstr "Zertifikat" + +msgid "X.509 certificate chain" +msgstr "" + +#, fuzzy +#| msgid "Email address" +msgid "Subject email address" +msgstr "Email-Adresse" + +#, fuzzy +#| msgid "must be DNS name" +msgid "Subject DNS name" +msgstr "muss ein DNS-Name sein" + +#, fuzzy +#| msgid "Street address" +msgid "Subject X.400 address" +msgstr "Straße" + +#, fuzzy +#| msgid "Home directory base" +msgid "Subject directory name" +msgstr "Basis für Home-Verzeichnisse" + +msgid "Subject EDI Party name" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject URI" +msgstr "Betreff" + +#, fuzzy +#| msgid "IP Address" +msgid "Subject IP Address" +msgstr "IP-Adresse" + +#, fuzzy +#| msgid "Subject" +msgid "Subject OID" +msgstr "Betreff" + +#, fuzzy +#| msgid "Subject" +msgid "Subject UPN" +msgstr "Betreff" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Subject Kerberos principal name" +msgstr "Kerberos-Principal" + +#, fuzzy +#| msgid "Server Name" +msgid "Subject Other Name" +msgstr "Servername" + +#, fuzzy +#| msgid "Issuer" +msgid "Issuer DN" +msgstr "Ausgabestelle" + +msgid "Not Before" +msgstr "Nicht vor" + +msgid "Not After" +msgstr "Nicht nach" + +msgid "Fingerprint (SHA1)" +msgstr "Fingerabdruck (SHA1)" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "Fingerprint (SHA256)" +msgstr "Fingerabdruck (SHA1)" + +msgid "Serial number (hex)" +msgstr "Seriennummer (hex)" + +msgid "Request status" +msgstr "Anfragestatus" + +msgid "Include certificate chain in output" +msgstr "" + +#, fuzzy +#| msgid "automatically add the principal if it doesn't exist" +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "Den Principal automatisch hinzufügen, falls dieser nicht existiert" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, fuzzy, python-format +#| msgid "The principal for this request doesn't exist." +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "Der Principal für diese Anfrage existiert nicht" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +#, fuzzy +#| msgid "Sudo Option" +msgid "'add' option" +msgstr "Sudo-Option" + +msgid "The principal for this request doesn't exist." +msgstr "Der Principal für diese Anfrage existiert nicht" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "Status" + +msgid "Revoked" +msgstr "Widerrufen" + +msgid "Revocation reason" +msgstr "Grund des Widerrufs" + +#, fuzzy +#| msgid "Reason for revoking the certificate (0-10)" +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "Grund für den Widerruf des Zertifikats (0-10)" + +#, fuzzy, python-format +#| msgid "Owner" +msgid "Owner %s" +msgstr "Eigentümer" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "7 ist kein gültiger Grund für einen Widerruf." + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, fuzzy, python-format +#| msgid "Search for stage users." +msgid "Search for certificates without these owner %s." +msgstr "Nach vorbereiteten Benutzern suchen." + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "Sudo-Befehl" + +msgid "sudo commands" +msgstr "Sudo-Befehle" + +msgid "Sudo Commands" +msgstr "Sudo-Befehle" + +#, fuzzy, python-format +#| msgid "Added CA ACL \"%(value)s\"" +msgid "Added Sudo Command \"%(value)s\"" +msgstr "CA ACL \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "ACI gelöscht \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "ACI geändert \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d ACI matched" +#| msgid_plural "%(count)d ACIs matched" +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "%(count)d ACI gefunden" +msgstr[1] "%(count)d ACIs gefunden" + +#, fuzzy +#| msgid "Sudo Rules" +msgid "" +"\n" +"Sudo Rules\n" +msgstr "Sudo-Regeln" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "Diese Option ist veraltet." + +msgid "sudo rules" +msgstr "Sudo-Regeln" + +msgid "Sudo Rules" +msgstr "Sudo-Regeln" + +msgid "Sudo Rule" +msgstr "Sudo-Regel" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added role \"%(value)s\"" +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Rolle \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted role \"%(value)s\"" +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, fuzzy, python-format +#| msgid "Modified role \"%(value)s\"" +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Rolle \"%(value)s\" geändert" + +#, fuzzy, python-format +#| msgid "user category cannot be set to 'all' while there are allowed users" +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" +"Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " +"Benutzer gibt" + +msgid "users" +msgstr "Benutzer" + +#, fuzzy +#| msgid "Commands" +msgid "command" +msgstr "Befehle" + +#, fuzzy +#| msgid "Commands" +msgid "commands" +msgstr "Befehle" + +#, fuzzy +#| msgid "stage user" +msgid "runAs user" +msgstr "Vorbereiteter Benutzer" + +#, fuzzy +#| msgid "stage users" +msgid "runAs users" +msgstr "Vorbereitete Benutzer" + +#, fuzzy +#| msgid "groups" +msgid "group runAs" +msgstr "Gruppen" + +#, fuzzy +#| msgid "host groups" +msgid "runAs groups" +msgstr "Hostgruppen" + +#, fuzzy, python-format +#| msgid "%(count)d role matched" +#| msgid_plural "%(count)d roles matched" +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +#, fuzzy +#| msgid "users cannot be set when type is 'hostgroup'" +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "users kann nicht gesetzt sein wenn Typ 'hostgroup' ist" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, fuzzy, python-format +#| msgid "not allowed to modify group entries" +msgid "not allowed to perform operation: %s" +msgstr "Es ist nicht erlaubt, Gruppeneinträge zu ändern." + +msgid "No such virtual command" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "Befehle zum Steuern der sudo-Konfiguration" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "Sudo-Befehlsgruppe" + +msgid "sudo command groups" +msgstr "Sudo-Befehlsgruppen" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Gruppe »%(value)s« hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Gruppe »%(value)s« gelöscht" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Gruppe »%(value)s« geändert" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "%(count)d passende Gruppe" +msgstr[1] "%(count)d passende Gruppen" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" +"Alternativ sind folgende Server in der Lage den Befehl auszuführen: " +"%(masters)s" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" +"Kann den ausgewählten Befehl nicht ohne Samba 4 Unterstützung ausführen. " +"Stellen Sie sicher, dass das server-trust-ad Paket von IPA installiert ist." + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" +"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " +"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " +"auf dieser Maschine ausgeführt wurde." + +#, fuzzy +#| msgid "" +#| "Cannot perform the selected command without Samba 4 instance configured " +#| "on this machine. Make sure you have run ipa-adtrust-install on this " +#| "server." +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " +"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " +"auf dieser Maschine ausgeführt wurde." + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "Vertrauensstellung" + +msgid "trusts" +msgstr "Vertrauensstellungen" + +#, fuzzy +#| msgid "Trust" +msgid "Trusts" +msgstr "Vertrauensstellung" + +msgid "Trust" +msgstr "Vertrauensstellung" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +#, fuzzy +#| msgid "Redirection" +msgid "Trust direction" +msgstr "Umleitung" + +#, fuzzy +#| msgid "trust type" +msgid "Trust type" +msgstr "Vertrauensstellungstyp" + +#, fuzzy +#| msgid "Request status" +msgid "Trust status" +msgstr "Anfragestatus" + +msgid "UPN suffixes" +msgstr "UPN Suffixe" + +#, fuzzy, python-brace-format +#| msgid "invalid DN (%s)" +msgid "invalid SID: {SID}" +msgstr "ungültiger DN (%s)" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "Externe Vertrauensstellung" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added automember rule \"%(value)s\"" +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted automount location \"%(value)s\"" +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Automount-Ort \"%(value)s\" gelöscht" + +msgid "missing base_id" +msgstr "fehlende base_id" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "Vertrauensstellungstyp" + +msgid "only \"ad\" is supported" +msgstr "nur \"ad\" ist unterstützt" + +#, fuzzy +#| msgid "Domain" +msgid "domain" +msgstr "Domain" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" +"Zum Aufbau einer Vertrauensstellung mit einem Active Directory müssen " +"Domänenname und Realm des IPA Servers übereinstimmen" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted trust \"%(value)s\"" +msgstr "Host \"%(value)s\" gelöscht" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d Host gefunden" +msgstr[1] "%(count)d Hosts gefunden" + +#, fuzzy +#| msgid "Configuration" +msgid "trust configuration" +msgstr "Konfiguration" + +#, fuzzy +#| msgid "OTP Configuration" +msgid "Global Trust Configuration" +msgstr "OTP Konfiguration" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "nicht unterstützte Vetrauensstellung" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified \"%(value)s\" trust configuration" +msgstr "ACI geändert \"%(value)s\"" + +#, fuzzy +#| msgid "Host Name" +msgid "Name" +msgstr "Host-Name" + +msgid "SID" +msgstr "SID" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" +"Dieser Befehl erfordert die Existenz der \"editors\" Gruppe, diese wurde " +"jedoch nicht gefunden." + +msgid "trust domain" +msgstr "" + +#, fuzzy +#| msgid "trusts" +msgid "trust domains" +msgstr "Vertrauensstellungen" + +#, fuzzy +#| msgid "Trust Settings" +msgid "Trusted domains" +msgstr "Vertrauenseinstellungen" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "Domäne aktiviert" + +#, fuzzy, python-format +#| msgid "Server has no information about domain '%(domain)s'" +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "Der Server hat keine Informationen über die Domäne '%(domain)s'" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, fuzzy, python-format +#| msgid "must be '%(value)s'" +msgid "must be \"%s\"" +msgstr "muss '%(value)s' sein" + +#, fuzzy +#| msgid "not allowed to modify user entries" +msgid "not allowed to remotely add agent" +msgstr "Es ist nicht erlaubt, Benutzereinträge zu ändern." + +#, fuzzy, python-format +#| msgid "Enabled user account \"%(value)s\"" +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Benutzerkonto »%(value)s« wurde aktiviert" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +#| msgid "Disabled host \"%(value)s\"" +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Host \"%(value)s\" deaktiviert" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA servers\n" +msgid "" +"\n" +"IPA server roles\n" +msgstr "" +"\n" +"IPA-Server\n" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#, fuzzy +#| msgid "server" +msgid "server role" +msgstr "Server" + +#, fuzzy +#| msgid "servers" +msgid "server roles" +msgstr "Server" + +#, fuzzy +#| msgid "IPA Servers" +msgid "IPA Server Roles" +msgstr "IPA-Server" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA Server Role" +msgstr "Zu verwendender IPA-Server" + +#, fuzzy +#| msgid "IPA server hostname" +msgid "IPA server role name" +msgstr "IPA-Server Hostname" + +#, fuzzy +#| msgid "Rule status" +msgid "Role status" +msgstr "Regelstatus" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d role matched" +#| msgid_plural "%(count)d roles matched" +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "Rollen" + +#, fuzzy +#| msgid "Role name" +msgid "IPA role name" +msgstr "Rollenname" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Manage OTP tokens.\n" +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" +"\n" +"OTP-Tokens bearbeiten.\n" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +#, fuzzy +#| msgid "only \"ad\" is supported" +msgid "Host is not supported" +msgstr "nur \"ad\" ist unterstützt" + +msgid "KRA service is not enabled" +msgstr "" + +#, fuzzy +#| msgid "Delete an automount location." +msgid "Deleted vault container" +msgstr "Automount-Ort löschen." + +#, fuzzy, python-format +#| msgid "Owner" +msgid "owner %s" +msgstr "Eigentümer" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Add an automember rule.\n" +#| " " +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" +"\n" +" Auto-Mitgliedschaftsregel hinzufügen.\n" +" " + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "Host \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "Host \"%(value)s\" gelöscht" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "%(count)d Host gefunden" +msgstr[1] "%(count)d Hosts gefunden" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "Host \"%(value)s\" geändert" + +#, fuzzy +#| msgid "Configuration" +msgid "Vault configuration" +msgstr "Konfiguration" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA servers\n" +msgid "IPA KRA servers" +msgstr "" +"\n" +"IPA-Server\n" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, fuzzy, python-format +#| msgid "Activate a stage user \"%(value)s\"" +msgid "Archived data into vault \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." + +msgid "Retrieve data from a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Removed condition(s) from \"%(value)s\"" +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Profile ID" +msgid "invalid Profile ID" +msgstr "Profil-ID" + +#, fuzzy +#| msgid "Certificate Profile to use" +msgid "Certificate Profile" +msgstr "Benutze Zertifikatsprofil" + +#, fuzzy +#| msgid "Certificate Profile to use" +msgid "Certificate Profiles" +msgstr "Benutze Zertifikatsprofil" + +#, fuzzy +#| msgid "OTP Configuration" +msgid "Profile configuration" +msgstr "OTP Konfiguration" + +#, fuzzy, python-format +#| msgid "%(count)d role matched" +#| msgid_plural "%(count)d roles matched" +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" + +#, fuzzy, python-format +#| msgid "Deleted role \"%(value)s\"" +msgid "Imported profile \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted role \"%(value)s\"" +msgid "Deleted profile \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, fuzzy, python-format +#| msgid "Zone record '%s' cannot be deleted" +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" + +#, fuzzy, python-format +#| msgid "Modified role \"%(value)s\"" +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Rolle \"%(value)s\" geändert" + +#, fuzzy +#| msgid "Certificate Profile to use" +msgid "Certificate profiles cannot be renamed" +msgstr "Benutze Zertifikatsprofil" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "Hostgruppen" + +msgid "Host Group" +msgstr "Hostgruppe" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Hostgruppe \"%(value)s\" hinzugefügt" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Hostgruppe \"%(value)s\" gelöscht" + +#, fuzzy +#| msgid "host group" +msgid "hostgroup" +msgstr "Hostgruppe" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "privileged hostgroup" +msgstr "Hostgruppe löschen." + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Hostgruppe \"%(value)s\" geändert" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "%(count)d Hostgruppe gefunden" +msgstr[1] "%(count)d Hostgruppen gefunden" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this hostgroup." +msgstr "Nutzer hinzufügen die diesen Token verwalten können" + +#, fuzzy +#| msgid "Remove users that can manage this token." +msgid "Remove users that can manage members of this hostgroup." +msgstr "Nutzer entfernen die diesen Token verwalten können" + +#, fuzzy +#| msgid "Kerberos Ticket Policy" +msgid "kerberos ticket policy settings" +msgstr "Kerberos-Ticket Richtlinien" + +msgid "Kerberos Ticket Policy" +msgstr "Kerberos-Ticket Richtlinien" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +#, fuzzy +#| msgid "RADIUS proxy username" +msgid "RADIUS max renew" +msgstr "RADIUS-Proxy Benutzername" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +#, fuzzy +#| msgid "Actions" +msgid "" +"\n" +"IPA locations\n" +msgstr "Aktionen" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "location" +msgstr "Ort" + +#, fuzzy +#| msgid "Location" +msgid "locations" +msgstr "Ort" + +#, fuzzy +#| msgid "Location" +msgid "IPA Locations" +msgstr "Ort" + +#, fuzzy +#| msgid "Location" +msgid "IPA Location" +msgstr "Ort" + +#, fuzzy +#| msgid "Location" +msgid "Location name" +msgstr "Ort" + +#, fuzzy +#| msgid "Automount location name." +msgid "IPA location name" +msgstr "Automount-Ort" + +#, fuzzy +#| msgid "Group description" +msgid "IPA Location description" +msgstr "Gruppenbeschreibung" + +#, fuzzy +#| msgid "Server" +msgid "Servers" +msgstr "Server" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +#, fuzzy +#| msgid "Add a new OTP token." +msgid "Add a new IPA location." +msgstr "Neuen OTP-Token hinzufügen" + +#, fuzzy, python-format +#| msgid "Added automount location \"%(value)s\"" +msgid "Added IPA location \"%(value)s\"" +msgstr "Automount Ort \"%(value)s\" hinzugefügt" + +#, fuzzy +#| msgid "Delete an automount location." +msgid "Delete an IPA location." +msgstr "Automount-Ort löschen." + +#, fuzzy, python-format +#| msgid "Deleted automount location \"%(value)s\"" +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Automount-Ort \"%(value)s\" gelöscht" + +msgid "IPA Server" +msgstr "IPA-Server" + +#, fuzzy +#| msgid "Modify information about a host." +msgid "Modify information about an IPA location." +msgstr "Hostinformationen ändern." + +#, fuzzy, python-format +#| msgid "Modified OTP token \"%(value)s\"" +msgid "Modified IPA location \"%(value)s\"" +msgstr "OTP Token \"%(value)s\" geändert" + +#, fuzzy +#| msgid "Search for OTP token." +msgid "Search for IPA locations." +msgstr "OTP Token suchen." + +#, fuzzy, python-format +#| msgid "%(count)d automount location matched" +#| msgid_plural "%(count)d automount locations matched" +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "%(count)d Automount-Ort gefunden" +msgstr[1] "%(count)d Automount-Orte gefunden" + +#, fuzzy +#| msgid "Display information about an OTP token." +msgid "Display information about an IPA location." +msgstr "Informationen über OTP Token anzeigen." + +#, fuzzy +#| msgid "Server name" +msgid "Servers in location" +msgstr "Servername" + +msgid "Role" +msgstr "Rolle" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "Rolle \"%(value)s\" hinzugefügt" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "Rolle \"%(value)s\" geändert" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Benutzer »%(value)s« hinzugefügt" + +#, fuzzy +#| msgid "Default group for new users" +msgid "Default group for new users is not POSIX" +msgstr "Vorgegebene Gruppe für neue Benutzer" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Benutzer »%(value)s« gelöscht" + +#, python-format +msgid "%s: user is already preserved" +msgstr "%s: Benutzer ist bereits aufbewahrt" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Benutzer »%(value)s« geändert" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "Benutzerkonto \"%(value)s\" wiederhergestellt" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "Benutzer \"%s\" ist bereits aktiv" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "Vorbereitetes Benutzerkonto \"%(value)s\"" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "Benutzerkonto »%(value)s« wurde deaktiviert" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "Benutzerkonto »%(value)s« wurde aktiviert" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "Konto »%(value)s« wurde entsperrt" + +msgid "Failed logins" +msgstr "Fehlgeschlagene Logins" + +msgid "Last successful authentication" +msgstr "Letzte erfolgreiche Authentifizierung" + +msgid "Last failed authentication" +msgstr "Letzte fehlgeschlagene Authentifizierung" + +msgid "Time now" +msgstr "Aktuelle Zeit" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "fork() failed\n" +msgid "%(host)s failed" +msgstr "fork() fehlgeschlagen\n" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "Konto deaktiviert: %(disabled)s" + +#, fuzzy, python-format +#| msgid "Added stage user \"%(value)s\"" +msgid "Added certificates to user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" + +#, fuzzy, python-format +#| msgid "Removed condition(s) from \"%(value)s\"" +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +#, fuzzy +#| msgid "Add a manager to the user entry" +msgid "Add new principal alias to the user entry" +msgstr "Manager zum Benutzer hinzufügen" + +#, fuzzy, python-format +#| msgid "Added stage user \"%(value)s\"" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" + +#, fuzzy +#| msgid "Remove a manager to the user entry" +msgid "Remove principal alias from the user entry" +msgstr "Manager vom Benutzer entfernen" + +#, fuzzy, python-format +#| msgid "Removed condition(s) from \"%(value)s\"" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" +"\n" +"OTP Tokens\n" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"OTP-Tokens bearbeiten.\n" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "OTP Token" + +msgid "OTP tokens" +msgstr "OTP Tokens" + +msgid "OTP Tokens" +msgstr "OTP Token" + +msgid "OTP Token" +msgstr "OTP Token" + +msgid "URI" +msgstr "URI" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "OTP token \"%(value)s\" hinzugefügt" + +#, fuzzy +#| msgid "May not be empty" +msgid "cannot be empty" +msgstr "Darf nicht leer sein" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "OTP token \"%(value)s\" gelöscht" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "OTP Token \"%(value)s\" geändert" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d OTP Token gefunden" +msgstr[1] "%(count)d OTP Tokens gefunden" + +msgid "A list of ACI values" +msgstr "Liste von ACI-Werten" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" +"»type«, »filter«, »subtree« und »targetgroup« schließen sich gegenseitig aus." + +msgid "ACI prefix is required" +msgstr "ACI-Präfix ist erforderlich" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"mindestens eines von »type«, »filter«, »subtree«, »targetgroup«, »attrs« " +"oder »memberof« wird benötigt" + +msgid "filter and memberof are mutually exclusive" +msgstr "»filter« und »memberof« schließen sich gegenseitig aus" + +msgid "group, permission and self are mutually exclusive" +msgstr "»group«, »permission« und »self« schließen sich gegenseitig aus" + +msgid "One of group, permission or self is required" +msgstr "Eines von »group«, »permission« oder »self« wird benötigt" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "Gruppe »%s« existiert nicht" + +msgid "empty filter" +msgstr "Filter ist leer" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Syntaxfehler: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "ungültiger DN (%s)" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "ACI mit dem Namen »%s« nicht gefunden" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "ACIs" + +msgid "ACI" +msgstr "ACI" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "ACI erstellt \"%(value)s\"" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "ACI gelöscht \"%(value)s\"" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "ACI geändert \"%(value)s\"" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d ACI gefunden" +msgstr[1] "%(count)d ACIs gefunden" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "ACI umbenannt zu \"%(value)s\"" msgid "" "\n" @@ -15053,9 +19573,6 @@ msgstr "Der Host '%(hostname)s' besitzt keinen zugehörigen DNS A/AAAA Record" msgid "Managedby permission" msgstr "Berechtigung" -msgid "DNS is not configured" -msgstr "DNS ist nicht konfiguriert" - #, fuzzy #| msgid "hosts cannot be set when type is 'group'" msgid "cannot be used when a zone is specified" @@ -15323,1523 +19840,605 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" -#, fuzzy -#| msgid "RADIUS proxy configuration" +#, fuzzy, python-brace-format +#| msgid "" +#| "Domain Level cannot be raised to {0}, server {1} does not support it." msgid "" -"\n" -"DNS server configuration\n" -msgstr "RADIUS-Proxy Konfiguration" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" +"Domain Level kann nicht auf {0} erhöht werden, Server {1} unterstützt das " +"nicht." -#, fuzzy -#| msgid "Inherited from server configuration" -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "Vererbt von Serverkonfiguration" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" +msgid "Server does not support domain level functionality" msgstr "" -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#, fuzzy -#| msgid "server" -msgid "DNS server" -msgstr "Server" - -#, fuzzy -#| msgid "servers" -msgid "DNS servers" -msgstr "Server" - -#, fuzzy -#| msgid "RADIUS Servers" -msgid "DNS Servers" -msgstr "Radius Server" - -#, fuzzy -#| msgid "RADIUS Servers" -msgid "DNS Server" -msgstr "Radius Server" - -#, fuzzy -#| msgid "Server name" -msgid "DNS Server name" -msgstr "Servername" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -#, fuzzy -#| msgid "Inherited from server configuration" -msgid "Modify DNS server configuration" -msgstr "Vererbt von Serverkonfiguration" - -#, fuzzy, python-format -#| msgid "Modified service \"%(value)s\"" -msgid "Modified DNS server \"%(value)s\"" -msgstr "Dienst »%(value)s« geändert" - -#, fuzzy -#| msgid "Search for DNS resources." -msgid "Search for DNS servers." -msgstr "Nach DNS-Ressourcen suchen." - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA DNS Server is not installed" -msgstr "Zu verwendender IPA-Server" - -#, fuzzy -#| msgid "Display information about an IPA service." -msgid "Display configuration of a DNS server." -msgstr "Informationen zu einem IPA-Dienst anzeigen." - -#, fuzzy -#| msgid "Add a new user." -msgid "Add a new DNS server." -msgstr "Einen neuen Benutzer hinzufügen." - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added new DNS server \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" - -#, fuzzy -#| msgid "Delete a user" -msgid "Delete a DNS server" -msgstr "Einen Benutzer löschen" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -#, fuzzy -#| msgid "Simulate use of Host-based access controls" -msgid "Host-based access control commands" -msgstr "HBAC Nutzung simulieren" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "HBAC-Dienste" - -msgid "HBAC Services" -msgstr "HBAC-Dienste" - -msgid "HBAC Service" -msgstr "HBAC-Dienst" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" hinzugefügt" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" gelöscht" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" geändert" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "%(count)d HBAC-Dienst gefunden" -msgstr[1] "%(count)d HBAC-Dienste gefunden" - -msgid "HBAC service group" -msgstr "HBAC-Dienstgruppe" - -msgid "HBAC service groups" -msgstr "HBAC-Dienstgruppen" - -msgid "HBAC Service Groups" -msgstr "HBAC-Dienstgruppen" - -msgid "HBAC Service Group" -msgstr "HBAC-Dienstgruppe" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« hinzugefügt" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« gelöscht" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« geändert" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "%(count)d HBAC-Dienstgruppe gefunden" -msgstr[1] "%(count)d HBAC-Dienstgruppen gefunden" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "Vorbereitete Benutzer" - -msgid "Stage User" -msgstr "Vorbereiteter Benutzer" - -msgid "stage user" -msgstr "Vorbereiteter Benutzer" - -msgid "stage users" -msgstr "Vorbereitete Benutzer" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" - -msgid "givenname is required" -msgstr "givenname wird benötigt" - -msgid "sn is required" -msgstr "sn wird benötigt" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "darf höchstens %(len)d Zeichen lang sein" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" gelöscht" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« geändert" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d passender Benutzer" -msgstr[1] "%(count)d passende Benutzer" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "Aktiver Benutzer mit Name \"%(user)s\" existiert bereits" - -#, python-format -msgid "Stage user %s activated" -msgstr "Vorbereiteten Benutzer %s aktiviert" - -#, fuzzy -#| msgid "Add a manager to the stage user entry" -msgid "Add one or more certificates to the stageuser entry" -msgstr "Manager zum vorbereiteten Benutzer hinzufügen" - -#, fuzzy, python-format -#| msgid "Activate a stage user \"%(value)s\"" -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." - -#, fuzzy -#| msgid "Remove a manager to the user entry" -msgid "Remove one or more certificates to the stageuser entry" -msgstr "Manager vom Benutzer entfernen" - -#, fuzzy, python-format -#| msgid "Activate a stage user \"%(value)s\"" -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." - -#, fuzzy -#| msgid "Add a manager to the stage user entry" -msgid "Add new principal alias to the stageuser entry" -msgstr "Manager zum vorbereiteten Benutzer hinzufügen" - -#, fuzzy, python-format -#| msgid "Added stage user \"%(value)s\"" -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" - -#, fuzzy -#| msgid "Remove a manager to the user entry" -msgid "Remove principal alias from the stageuser entry" -msgstr "Manager vom Benutzer entfernen" - -#, fuzzy, python-format -#| msgid "Modified stage user \"%(value)s\"" -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« geändert" - -#, fuzzy -#| msgid "Add a manager to the stage user entry" -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "Manager zum vorbereiteten Benutzer hinzufügen" - -#, fuzzy -#| msgid "Remove a manager to the user entry" -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "Manager vom Benutzer entfernen" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" +msgid "Domain Level cannot be lowered." +msgstr "Domain Level kann nicht gesenkt werden." #, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." msgstr "" +"Domain Level kann nicht auf {0} erhöht werden, Server {1} unterstützt das " +"nicht." #, fuzzy -#| msgid "Segment details" -msgid "segments" -msgstr "Segment Details" - -#, fuzzy -#| msgid "Topology" -msgid "Topology Segments" -msgstr "Topologie" - -#, fuzzy -#| msgid "Topology" -msgid "Topology Segment" -msgstr "Topologie" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d host matched" -#| msgid_plural "%(count)d hosts matched" -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "%(count)d Host gefunden" -msgstr[1] "%(count)d Hosts gefunden" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added segment \"%(value)s\"" -msgstr "Host \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted segment \"%(value)s\"" -msgstr "Host \"%(value)s\" gelöscht" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified segment \"%(value)s\"" -msgstr "Host \"%(value)s\" geändert" - -#, fuzzy, python-format -#| msgid "Found '%(value)s'" -msgid "%(value)s" -msgstr "»%(value)s« gefunden" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, fuzzy -#| msgid "UPN suffixes" -msgid "suffixes" -msgstr "UPN Suffixe" - -#, fuzzy -#| msgid "Topology" -msgid "Topology suffixes" -msgstr "Topologie" - -#, fuzzy -#| msgid "Topology" -msgid "Topology suffix" -msgstr "Topologie" - -#, fuzzy, python-format -#| msgid "%(count)d host matched" -#| msgid_plural "%(count)d hosts matched" -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "%(count)d Host gefunden" -msgstr[1] "%(count)d Hosts gefunden" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Host \"%(value)s\" gelöscht" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added topology suffix \"%(value)s\"" -msgstr "Host \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Host \"%(value)s\" geändert" +#| msgid "LDAP schema" +msgid "" +"\n" +"API Schema\n" +msgstr "LDAP-Schema" msgid "" "\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." +"Provides API introspection capabilities.\n" msgstr "" msgid "" "\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" +" Show user-find details:\n" +" ipa command-show user-find\n" msgstr "" -msgid "host groups" -msgstr "Hostgruppen" - -msgid "Host Group" -msgstr "Hostgruppe" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Hostgruppe \"%(value)s\" hinzugefügt" - -#, python-format msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" msgstr "" +#, fuzzy +#| msgid "Authentication" +msgid "Documentation" +msgstr "Authentifizierung" + +msgid "Exclude from" +msgstr "" + +#, fuzzy +#| msgid "Include Enabled" +msgid "Include in" +msgstr "Aktivierte einschließen" + #, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Hostgruppe \"%(value)s\" gelöscht" +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Version" +msgstr "Berechtigung" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "Record name" +msgid "Method name" +msgstr "Datensatzname" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s: %(oname)s nicht gefunden" + +#, fuzzy +#| msgid "Display information about a host." +msgid "Display information about a command." +msgstr "Informationen über Host anzeigen." + +#, fuzzy +#| msgid "Search for Sudo Commands." +msgid "Search for commands." +msgstr "Nach Sudo-Befehlen suchen." + +#, fuzzy +#| msgid "Run Commands" +msgid "Return command defaults" +msgstr "Befehle ausführen" + +#, fuzzy +#| msgid "Display information about a host." +msgid "Display information about a class." +msgstr "Informationen über Host anzeigen." + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for classes." +msgstr "Nach Rollen suchen." + +#, fuzzy +#| msgid "Display information about a host." +msgid "Display information about a help topic." +msgstr "Informationen über Host anzeigen." + +#, fuzzy +#| msgid "Search for hostgroups." +msgid "Search for help topics." +msgstr "Nach Hostgruppen suchen." + +#, fuzzy +#| msgid "Request id" +msgid "Required" +msgstr "Anfrage-ID" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "CLI name" +msgstr "ACI-Name" + +#, fuzzy +#| msgid "Change password" +msgid "Confirm (password)" +msgstr "Passwort ändern" + +#, fuzzy +#| msgid "Default shell" +msgid "Default" +msgstr "Vorgabe-Shell" + +#, fuzzy +#| msgid "Default host group" +msgid "Default from" +msgstr "Standard Hostgruppe" + +msgid "Label" +msgstr "" + +#, fuzzy +#| msgid "Hostname of this server" +msgid "Convert on server" +msgstr "Hostname dieses Servers" #, fuzzy #| msgid "host group" -msgid "hostgroup" +msgid "Option group" msgstr "Hostgruppe" +msgid "Sensitive" +msgstr "" + #, fuzzy -#| msgid "Delete a hostgroup." -msgid "privileged hostgroup" -msgstr "Hostgruppe löschen." +#| msgid "Positional arguments" +msgid "Positional argument" +msgstr "Positionale Argumente" + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s nicht gefunden" + +#, fuzzy +#| msgid "Display information about a named group." +msgid "Display information about a command parameter." +msgstr "Informationen zu einer genannten Gruppe anzeigen." + +#, fuzzy +#| msgid "Search for stage users." +msgid "Search command parameters." +msgstr "Nach vorbereiteten Benutzern suchen." + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s nicht gefunden" + +#, fuzzy +#| msgid "Display information about a named group." +msgid "Display information about a command output." +msgstr "Informationen zu einer genannten Gruppe anzeigen." + +#, fuzzy +#| msgid "Search for Sudo Commands." +msgid "Search for command outputs." +msgstr "Nach Sudo-Befehlen suchen." + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "Member service groups" +msgstr "Mitglieds-Dienstgruppen" + +msgid "Member HBAC service groups" +msgstr "Mitglieds-HBAC-Servicegruppen" + +#, fuzzy +#| msgid "Member services" +msgid "Member ID user overrides" +msgstr "Mitglieds-Dienste" + +#, fuzzy +#| msgid "Indirect Member users" +msgid "Indirect Member ID user overrides" +msgstr "Indirekte Mitglieds-Benutzer" + +msgid "Indirect Member permissions" +msgstr "Indirekte Mitglieds-Berechtigungen" + +msgid "Indirect Member HBAC service" +msgstr "Indirekte Mitgli" + +msgid "Indirect Member HBAC service group" +msgstr "Indirekte Mitglieds-HBAC-Servicegruppe" + +msgid "Invalid format. Should be name=value" +msgstr "Ungültiges Format. Sollte name=wert sein." + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Ein IPA Masterhost kann nicht deaktiviert oder gelöscht werden" + +msgid "entry" +msgstr "Eintrag" + +msgid "entries" +msgstr "Einträge" + +msgid "Entry" +msgstr "Eintrag" #, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Hostgruppe \"%(value)s\" geändert" +msgid "container entry (%(container)s) not found" +msgstr "Container-Eintrag (%(container)s) nicht gefunden" #, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "%(count)d Hostgruppe gefunden" -msgstr[1] "%(count)d Hostgruppen gefunden" +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s nicht gefunden" -#, fuzzy -#| msgid "Add users that can manage this token." -msgid "Add users that can manage members of this hostgroup." -msgstr "Nutzer hinzufügen die diesen Token verwalten können" +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "%(oname)s mit dem Namen »%(pkey)s« existiert bereits" -#, fuzzy -#| msgid "Remove users that can manage this token." -msgid "Remove users that can manage members of this hostgroup." -msgstr "Nutzer entfernen die diesen Token verwalten können" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| "Manage OTP tokens.\n" -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" -"\n" -"OTP-Tokens bearbeiten.\n" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -#, fuzzy -#| msgid "only \"ad\" is supported" -msgid "Host is not supported" -msgstr "nur \"ad\" ist unterstützt" - -msgid "KRA service is not enabled" -msgstr "" - -#, fuzzy -#| msgid "Delete an automount location." -msgid "Deleted vault container" -msgstr "Automount-Ort löschen." +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "Attribut \"%(attribute)s\" ist nicht erlaubt" #, fuzzy, python-format -#| msgid "Owner" -msgid "owner %s" -msgstr "Eigentümer" +#| msgid "attribute \"%s\" not allowed" +msgid "these attributes are not allowed: %(attrs)s" +msgstr "Attribut \"%s\" ist nicht erlaubt" -#, fuzzy -#| msgid "" -#| "\n" -#| " Add an automember rule.\n" -#| " " +msgid "attribute is not configurable" +msgstr "Attribut ist nicht konfigurierbar" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" + +msgid "the entry was deleted while being modified" +msgstr "Der Eintrag wurde während der Änderung entfernt." + +#, python-format +msgid "%s" +msgstr "%s" + +#, python-format +msgid "%s to add" +msgstr "%s zum hinzufügen" + +#, python-format +msgid "%s to remove" +msgstr "%s zum entfernen" + +#, python-format msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel hinzufügen.\n" -" " - -msgid "vault" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." msgstr "" -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." msgstr "" #, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added vault \"%(value)s\"" -msgstr "Host \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted vault \"%(value)s\"" -msgstr "Host \"%(value)s\" gelöscht" - -#, fuzzy, python-format -#| msgid "%(count)d host matched" -#| msgid_plural "%(count)d hosts matched" -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d Host gefunden" -msgstr[1] "%(count)d Hosts gefunden" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified vault \"%(value)s\"" -msgstr "Host \"%(value)s\" geändert" - -#, fuzzy -#| msgid "Configuration" -msgid "Vault configuration" -msgstr "Konfiguration" - -#, fuzzy -#| msgid "" -#| "\n" -#| "IPA servers\n" -msgid "IPA KRA servers" -msgstr "" -"\n" -"IPA-Server\n" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#, fuzzy, python-format -#| msgid "Activate a stage user \"%(value)s\"" -msgid "Archived data into vault \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." - -msgid "Retrieve data from a vault." -msgstr "" +#| msgid "Added automount location \"%(value)s\"" +msgid "added attribute value to entry %(value)s" +msgstr "Automount Ort \"%(value)s\" hinzugefügt" #, fuzzy, python-format #| msgid "Removed condition(s) from \"%(value)s\"" -msgid "Retrieved data from vault \"%(value)s\"" +msgid "removed attribute values from entry %(value)s" msgstr "Bedingung(en) von \"%(value)s\" entfernt" -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" +msgid "one or more values to remove" msgstr "" #, fuzzy -#| msgid "groups" -msgid "netgroups" -msgstr "Gruppen" +#| msgid "this option has been deprecated." +msgid "The deny type has been deprecated." +msgstr "Diese Option ist veraltet." -#, fuzzy -#| msgid "groups" -msgid "Netgroups" -msgstr "Gruppen" +msgid "HBAC rules" +msgstr "HBAC-Regeln" -#, fuzzy -#| msgid "group" -msgid "Netgroup" -msgstr "Gruppe" - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added netgroup \"%(value)s\"" -msgstr "Gruppe »%(value)s« hinzugefügt" +msgid "HBAC Rules" +msgstr "HBAC-Regeln" #, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Gruppe »%(value)s« gelöscht" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified netgroup \"%(value)s\"" -msgstr "Gruppe »%(value)s« geändert" - -#, fuzzy, python-format -#| msgid "%(count)d group matched" -#| msgid_plural "%(count)d groups matched" -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d passende Gruppe" -msgstr[1] "%(count)d passende Gruppen" - -msgid "One time password commands" -msgstr "Einmalpasswort Befehle" - -msgid "OTP configuration options" -msgstr "OTP-Konfigurationsoptionen" - -msgid "OTP Configuration" -msgstr "OTP Konfiguration" +msgid "Added HBAC rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" hinzugefügt" #, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Passwort für \"%(value)s\" geändert" +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" gelöscht" -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" geändert" -msgid "pkinit" -msgstr "" +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "%(count)d HBAC-Regel gefunden" +msgstr[1] "%(count)d HBAC-Regeln gefunden" -msgid "PKINIT" -msgstr "PKINIT" +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" aktiviert" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" deaktiviert" + +msgid "Access time" +msgstr "Zugriffszeit" #, fuzzy -#| msgid "PKINIT" -msgid "PKINIT status" -msgstr "PKINIT" - -#, fuzzy -#| msgid "This entry cannot be enabled or disabled" -msgid "Whether PKINIT is enabled or disabled" -msgstr "Dieser Eintrag kann nicht aktiviert oder deaktiviert werden" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, fuzzy -#| msgid "RADIUS Servers" -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "Radius Server" - -#, fuzzy -#| msgid "RADIUS Servers" -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "Radius Server" +#| msgid "Add target hosts and hostgroups to an HBAC rule." +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." msgid "" "\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" +"Simulate use of Host-based access controls\n" "\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" "\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" "\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -#, fuzzy -#| msgid "%s is not a valid attribute." -msgid "invalid attribute name" -msgstr "%s ist kein gültiges Attribut" - -#, fuzzy -#| msgid "Serial number" -msgid "invalid port number" -msgstr "Seriennummer" - -#, fuzzy -#| msgid "RADIUS proxy username" -msgid "RADIUS proxy server" -msgstr "RADIUS-Proxy Benutzername" - -#, fuzzy -#| msgid "RADIUS proxy username" -msgid "RADIUS proxy servers" -msgstr "RADIUS-Proxy Benutzername" - -msgid "RADIUS Servers" -msgstr "Radius Server" - -#, fuzzy -#| msgid "RADIUS Servers" -msgid "RADIUS Server" -msgstr "Radius Server" - -#, fuzzy, python-format -#| msgid "Added HBAC service \"%(value)s\"" -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -#| msgid "Deleted HBAC service \"%(value)s\"" -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" gelöscht" - -#, fuzzy, python-format -#| msgid "Modified HBAC service \"%(value)s\"" -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" geändert" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC service matched" -#| msgid_plural "%(count)d HBAC services matched" -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "%(count)d HBAC-Dienst gefunden" -msgstr[1] "%(count)d HBAC-Dienste gefunden" - -msgid "A list of ACI values" -msgstr "Liste von ACI-Werten" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" -"»type«, »filter«, »subtree« und »targetgroup« schließen sich gegenseitig aus." - -msgid "ACI prefix is required" -msgstr "ACI-Präfix ist erforderlich" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" -"mindestens eines von »type«, »filter«, »subtree«, »targetgroup«, »attrs« " -"oder »memberof« wird benötigt" - -msgid "filter and memberof are mutually exclusive" -msgstr "»filter« und »memberof« schließen sich gegenseitig aus" - -msgid "group, permission and self are mutually exclusive" -msgstr "»group«, »permission« und »self« schließen sich gegenseitig aus" - -msgid "One of group, permission or self is required" -msgstr "Eines von »group«, »permission« oder »self« wird benötigt" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "Gruppe »%s« existiert nicht" - -msgid "empty filter" -msgstr "Filter ist leer" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Syntaxfehler: %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "ungültiger DN (%s)" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "ACI mit dem Namen »%s« nicht gefunden" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "ACIs" - -msgid "ACI" -msgstr "ACI" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "ACI erstellt \"%(value)s\"" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "ACI gelöscht \"%(value)s\"" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "ACI geändert \"%(value)s\"" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d ACI gefunden" -msgstr[1] "%(count)d ACIs gefunden" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "ACI umbenannt zu \"%(value)s\"" - -msgid "" +" --user, --host, and --service are mandatory, others are optional.\n" "\n" -"Server configuration\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" "\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" "\n" -"NOTES:\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" "\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" "\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" "\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "Zugriff gewährt: %s" + +#, fuzzy +#| msgid "View" +msgid "ID View" +msgstr "Ansicht" + +msgid "system ID View" msgstr "" #, fuzzy -#| msgid "must be at least %(minvalue)d" -msgid "must be at least 10" -msgstr "muss mindestens %(minvalue)d sein" - -msgid "configuration options" -msgstr "Konfigurationsoptionen" - -msgid "Configuration" -msgstr "Konfiguration" +#| msgid "View" +msgid "ID Views" +msgstr "Ansicht" #, fuzzy -#| msgid "Maximum username length" -msgid "Maximum hostname length" -msgstr "Maximale Länge des Benutzernamens" +#| msgid "User to override" +msgid "User object overrides" +msgstr "Benutzer zum Überschreiben" #, fuzzy -#| msgid "" -#| "\n" -#| "IPA servers\n" -msgid "IPA masters" -msgstr "" -"\n" -"IPA-Server\n" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "IPA Master mit Fähigkeit für PKINIT " - -msgid "IPA master which can process PKINIT requests" -msgstr "IPA Master, der PKINIT Anfragen bearbeiten kann" +#| msgid "Group to override" +msgid "Group object overrides" +msgstr "Gruppe zum Überschreiben" #, fuzzy -#| msgid "" -#| "\n" -#| "IPA servers\n" -msgid "IPA CA servers" -msgstr "" -"\n" -"IPA-Server\n" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| "IPA servers\n" -msgid "Hidden IPA CA servers" -msgstr "" -"\n" -"IPA-Server\n" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| "IPA servers\n" -msgid "Hidden IPA KRA servers" -msgstr "" -"\n" -"IPA-Server\n" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" +#| msgid "Host category the rule applies to" +msgid "Hosts the view applies to" +msgstr "Host-Kategorie, auf welche die Regel angewendet werden soll" msgid "Domain resolution order" msgstr "" @@ -16847,256 +20446,226 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -msgid "IPA servers configured as domain name server" -msgstr "" - -#, fuzzy -#| msgid "IPA Servers" -msgid "Hidden IPA DNS servers" -msgstr "IPA-Server" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -#, fuzzy -#| msgid "New: key set" -msgid "DNSec key master" -msgstr "Neu: Schlüssel gesetzt" - -msgid "Empty domain is not allowed" -msgstr "Eine leere Domäne ist nicht zulässig" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "Ungültiger Domänenname '%(domain)s': %(e)s" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "Der Server hat keine Informationen über die Domäne '%(domain)s'" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "Deaktivierte Domäne '%(domain)s' ist nicht zulässig" - -msgid "The group doesn't exist" -msgstr "Die Gruppe existiert nicht" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "Attribut \"%s\" ist nicht erlaubt" - -msgid "May not be empty" -msgstr "Darf nicht leer sein" +#, fuzzy, python-format +#| msgid "Added role \"%(value)s\"" +msgid "Added ID View \"%(value)s\"" +msgstr "Rolle \"%(value)s\" hinzugefügt" #, fuzzy, python-format -#| msgid "attribute \"%(attribute)s\" not allowed" -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "Attribut \"%(attribute)s\" ist nicht erlaubt" +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted ID View \"%(value)s\"" +msgstr "ACI gelöscht \"%(value)s\"" -msgid "A list of SELinux users delimited by $ expected" -msgstr "$-getrennte Liste von SELinux Benutzern erwartet" +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified an ID View \"%(value)s\"" +msgstr "ACI geändert \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d ACI matched" +#| msgid_plural "%(count)d ACIs matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "%(count)d ACI gefunden" +msgstr[1] "%(count)d ACIs gefunden" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +#, fuzzy +#| msgid "realm not found\n" +msgid "not found" +msgstr "Realm nicht gefunden\n" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" #, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "SELinux Benutzer '%(user)s' ist ungültig: %(error)s" +msgid "ID View applied to %i host." +msgstr "" -msgid "SELinux user map default user not in order list" +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." msgstr "" msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" -msgid "groups" -msgstr "Gruppen" +msgid "IPA object" +msgstr "" -msgid "User Group" -msgstr "Benutzergruppe" +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" -#, python-format -msgid "Added group \"%(value)s\"" +#, fuzzy, python-format +#| msgid "Conditions that could not be removed" +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "Bedingungen, die nicht entfernt werden konnten" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new ID override." +msgstr "Einen neuen HBAC-Dienst hinzufügen." + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" + +#, fuzzy +#| msgid "Delete an IPA service." +msgid "Delete an ID override." +msgstr "Einen IPA-Dienst entfernen." + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +#, fuzzy +#| msgid "Modify an HBAC service." +msgid "Modify an ID override." +msgstr "HBAC Dienst ändern" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified an ID override \"%(value)s\"" +msgstr "Dienst »%(value)s« geändert" + +#, fuzzy +#| msgid "User to override" +msgid "ID override" +msgstr "Benutzer zum Überschreiben" + +#, fuzzy +#| msgid "Zone record '%s' cannot be deleted" +msgid "ID overrides cannot be renamed" +msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" + +#, fuzzy +#| msgid "Search for IPA services." +msgid "Search for an ID override." +msgstr "Nach IPA-Diensten suchen." + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, fuzzy +#| msgid "Display information about an IPA service." +msgid "Display information about an ID override." +msgstr "Informationen zu einem IPA-Dienst anzeigen." + +#, fuzzy +#| msgid "User to override" +msgid "User ID override" +msgstr "Benutzer zum Überschreiben" + +#, fuzzy +#| msgid "User to override" +msgid "User ID overrides" +msgstr "Benutzer zum Überschreiben" + +#, fuzzy +#| msgid "Group to override" +msgid "Group ID override" +msgstr "Gruppe zum Überschreiben" + +#, fuzzy +#| msgid "Group to override" +msgid "Group ID overrides" +msgstr "Gruppe zum Überschreiben" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added stage user \"%(value)s\"" +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" + +#, fuzzy +#| msgid "Remove a manager to the user entry" +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "Manager vom Benutzer entfernen" + +#, fuzzy, python-format +#| msgid "Removed condition(s) from \"%(value)s\"" +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Dienst »%(value)s« geändert" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" msgstr "Gruppe »%(value)s« hinzugefügt" -#, fuzzy -#| msgid "Change to external group" -msgid "gid cannot be set for external group" -msgstr "In externe Gruppe umwandeln" - -#, python-format -msgid "Deleted group \"%(value)s\"" +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" msgstr "Gruppe »%(value)s« gelöscht" -#, fuzzy -#| msgid "No private group" -msgid "privileged group" -msgstr "Keine private Gruppe" - -#, python-format -msgid "Modified group \"%(value)s\"" +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified an Group ID override \"%(value)s\"" msgstr "Gruppe »%(value)s« geändert" -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" msgstr[0] "%(count)d passende Gruppe" msgstr[1] "%(count)d passende Gruppen" -#, fuzzy -#| msgid "" -#| "Cannot perform the selected command without Samba 4 support installed. " -#| "Make sure you have installed server-trust-ad sub-package of IPA." -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"Kann den ausgewählten Befehl nicht ohne Samba 4 Unterstützung ausführen. " -"Stellen Sie sicher, dass das server-trust-ad Paket von IPA installiert ist." - -#, fuzzy -#| msgid "" -#| "Cannot perform the selected command without Samba 4 instance configured " -#| "on this machine. Make sure you have run ipa-adtrust-install on this " -#| "server." -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " -"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " -"auf dieser Maschine ausgeführt wurde." - -#, fuzzy, python-format -#| msgid "Deleted stage user \"%(value)s\"" -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" gelöscht" - -msgid "not allowed to modify user entries" -msgstr "Es ist nicht erlaubt, Benutzereinträge zu ändern." - -msgid "not allowed to modify group entries" -msgstr "Es ist nicht erlaubt, Gruppeneinträge zu ändern." - -msgid "Not a managed group" -msgstr "Keine verwaltete Gruppe" - -#, fuzzy -#| msgid "Add users that can manage this token." -msgid "Add users that can manage members of this group." -msgstr "Nutzer hinzufügen die diesen Token verwalten können" - -#, fuzzy -#| msgid "Remove users that can manage this token." -msgid "Remove users that can manage members of this group." -msgstr "Nutzer entfernen die diesen Token verwalten können" - #, fuzzy #| msgid "Permissions" msgid "" @@ -17348,1413 +20917,41 @@ msgid_plural "%(count)d permissions matched" msgstr[0] "%(count)d Rolle gefunden" msgstr[1] "%(count)d Rollen gefunden" -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"OTP Tokens\n" +msgid "delegation" +msgstr "Delegation" -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" -"\n" -"OTP-Tokens bearbeiten.\n" +msgid "delegations" +msgstr "Delegationen" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" +msgid "Delegations" +msgstr "Delegationen" -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "OTP Token" - -msgid "OTP tokens" -msgstr "OTP Tokens" - -msgid "OTP Tokens" -msgstr "OTP Token" - -msgid "OTP Token" -msgstr "OTP Token" - -msgid "URI" -msgstr "URI" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "OTP token \"%(value)s\" hinzugefügt" - -#, fuzzy -#| msgid "May not be empty" -msgid "cannot be empty" -msgstr "Darf nicht leer sein" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "OTP token \"%(value)s\" gelöscht" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "OTP Token \"%(value)s\" geändert" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "%(count)d OTP Token gefunden" -msgstr[1] "%(count)d OTP Tokens gefunden" - -#, fuzzy -#| msgid "Sudo Rules" -msgid "" -"\n" -"Sudo Rules\n" -msgstr "Sudo-Regeln" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "Diese Option ist veraltet." - -msgid "sudo rules" -msgstr "Sudo-Regeln" - -msgid "Sudo Rules" -msgstr "Sudo-Regeln" - -msgid "Sudo Rule" -msgstr "Sudo-Regel" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" +msgid "Delegation" +msgstr "Delegation" #, fuzzy, python-format #| msgid "Added role \"%(value)s\"" -msgid "Added Sudo Rule \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" msgstr "Rolle \"%(value)s\" hinzugefügt" #, fuzzy, python-format #| msgid "Deleted role \"%(value)s\"" -msgid "Deleted Sudo Rule \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" msgstr "Rolle \"%(value)s\" gelöscht" #, fuzzy, python-format #| msgid "Modified role \"%(value)s\"" -msgid "Modified Sudo Rule \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" msgstr "Rolle \"%(value)s\" geändert" -#, fuzzy, python-format -#| msgid "user category cannot be set to 'all' while there are allowed users" -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" -"Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " -"Benutzer gibt" - -msgid "users" -msgstr "Benutzer" - -#, fuzzy -#| msgid "Commands" -msgid "command" -msgstr "Befehle" - -#, fuzzy -#| msgid "Commands" -msgid "commands" -msgstr "Befehle" - -#, fuzzy -#| msgid "stage user" -msgid "runAs user" -msgstr "Vorbereiteter Benutzer" - -#, fuzzy -#| msgid "stage users" -msgid "runAs users" -msgstr "Vorbereitete Benutzer" - -#, fuzzy -#| msgid "groups" -msgid "group runAs" -msgstr "Gruppen" - -#, fuzzy -#| msgid "host groups" -msgid "runAs groups" -msgstr "Hostgruppen" - #, fuzzy, python-format #| msgid "%(count)d role matched" #| msgid_plural "%(count)d roles matched" -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "%(count)d Rolle gefunden" msgstr[1] "%(count)d Rollen gefunden" -msgid "commands cannot be added when command category='all'" -msgstr "" - -#, fuzzy -#| msgid "users cannot be set when type is 'hostgroup'" -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "users kann nicht gesetzt sein wenn Typ 'hostgroup' ist" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "Befehle zum Steuern der sudo-Konfiguration" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -msgid "sudo command" -msgstr "Sudo-Befehl" - -msgid "sudo commands" -msgstr "Sudo-Befehle" - -msgid "Sudo Commands" -msgstr "Sudo-Befehle" - -#, fuzzy, python-format -#| msgid "Added CA ACL \"%(value)s\"" -msgid "Added Sudo Command \"%(value)s\"" -msgstr "CA ACL \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -#| msgid "Deleted ACI \"%(value)s\"" -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "ACI gelöscht \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Modified ACI \"%(value)s\"" -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "ACI geändert \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "%(count)d ACI matched" -#| msgid_plural "%(count)d ACIs matched" -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "%(count)d ACI gefunden" -msgstr[1] "%(count)d ACIs gefunden" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "Sudo-Befehlsgruppe" - -msgid "sudo command groups" -msgstr "Sudo-Befehlsgruppen" - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Gruppe »%(value)s« hinzugefügt" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Gruppe »%(value)s« gelöscht" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Gruppe »%(value)s« geändert" - -#, fuzzy, python-format -#| msgid "%(count)d group matched" -#| msgid_plural "%(count)d groups matched" -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "%(count)d passende Gruppe" -msgstr[1] "%(count)d passende Gruppen" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -#, fuzzy -#| msgid "Realm name" -msgid "Realm domains" -msgstr "Realm-Name" - -#, fuzzy -#| msgid "Domain" -msgid "Realm Domains" -msgstr "Domain" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -#, fuzzy -#| msgid "Zone record '%s' cannot be deleted" -msgid "IPA server domain cannot be deleted" -msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -#, fuzzy -#| msgid "Kerberos Ticket Policy" -msgid "kerberos ticket policy settings" -msgstr "Kerberos-Ticket Richtlinien" - -msgid "Kerberos Ticket Policy" -msgstr "Kerberos-Ticket Richtlinien" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -#, fuzzy -#| msgid "RADIUS proxy username" -msgid "RADIUS max renew" -msgstr "RADIUS-Proxy Benutzername" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -#, fuzzy -#| msgid "Actions" -msgid "" -"\n" -"IPA locations\n" -msgstr "Aktionen" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -#, fuzzy -#| msgid "Location" -msgid "location" -msgstr "Ort" - -#, fuzzy -#| msgid "Location" -msgid "locations" -msgstr "Ort" - -#, fuzzy -#| msgid "Location" -msgid "IPA Locations" -msgstr "Ort" - -#, fuzzy -#| msgid "Location" -msgid "IPA Location" -msgstr "Ort" - -#, fuzzy -#| msgid "Location" -msgid "Location name" -msgstr "Ort" - -#, fuzzy -#| msgid "Automount location name." -msgid "IPA location name" -msgstr "Automount-Ort" - -#, fuzzy -#| msgid "Group description" -msgid "IPA Location description" -msgstr "Gruppenbeschreibung" - -#, fuzzy -#| msgid "Server" -msgid "Servers" -msgstr "Server" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -#, fuzzy -#| msgid "Add a new OTP token." -msgid "Add a new IPA location." -msgstr "Neuen OTP-Token hinzufügen" - -#, fuzzy, python-format -#| msgid "Added automount location \"%(value)s\"" -msgid "Added IPA location \"%(value)s\"" -msgstr "Automount Ort \"%(value)s\" hinzugefügt" - -#, fuzzy -#| msgid "Delete an automount location." -msgid "Delete an IPA location." -msgstr "Automount-Ort löschen." - -#, fuzzy, python-format -#| msgid "Deleted automount location \"%(value)s\"" -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Automount-Ort \"%(value)s\" gelöscht" - -msgid "IPA Server" -msgstr "IPA-Server" - -#, fuzzy -#| msgid "Modify information about a host." -msgid "Modify information about an IPA location." -msgstr "Hostinformationen ändern." - -#, fuzzy, python-format -#| msgid "Modified OTP token \"%(value)s\"" -msgid "Modified IPA location \"%(value)s\"" -msgstr "OTP Token \"%(value)s\" geändert" - -#, fuzzy -#| msgid "Search for OTP token." -msgid "Search for IPA locations." -msgstr "OTP Token suchen." - -#, fuzzy, python-format -#| msgid "%(count)d automount location matched" -#| msgid_plural "%(count)d automount locations matched" -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "%(count)d Automount-Ort gefunden" -msgstr[1] "%(count)d Automount-Orte gefunden" - -#, fuzzy -#| msgid "Display information about an OTP token." -msgid "Display information about an IPA location." -msgstr "Informationen über OTP Token anzeigen." - -#, fuzzy -#| msgid "Server name" -msgid "Servers in location" -msgstr "Servername" - -#, fuzzy -#| msgid "LDAP schema" -msgid "" -"\n" -"API Schema\n" -msgstr "LDAP-Schema" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -#, fuzzy -#| msgid "Host Name" -msgid "Name" -msgstr "Host-Name" - -#, fuzzy -#| msgid "Authentication" -msgid "Documentation" -msgstr "Authentifizierung" - -msgid "Exclude from" -msgstr "" - -#, fuzzy -#| msgid "Include Enabled" -msgid "Include in" -msgstr "Aktivierte einschließen" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -#| msgid "Permission" -msgid "Version" -msgstr "Berechtigung" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -#| msgid "Record name" -msgid "Method name" -msgstr "Datensatzname" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s: %(oname)s nicht gefunden" - -#, fuzzy -#| msgid "Display information about a host." -msgid "Display information about a command." -msgstr "Informationen über Host anzeigen." - -#, fuzzy -#| msgid "Search for Sudo Commands." -msgid "Search for commands." -msgstr "Nach Sudo-Befehlen suchen." - -#, fuzzy -#| msgid "Run Commands" -msgid "Return command defaults" -msgstr "Befehle ausführen" - -#, fuzzy -#| msgid "Display information about a host." -msgid "Display information about a class." -msgstr "Informationen über Host anzeigen." - -#, fuzzy -#| msgid "Search for roles." -msgid "Search for classes." -msgstr "Nach Rollen suchen." - -#, fuzzy -#| msgid "Display information about a host." -msgid "Display information about a help topic." -msgstr "Informationen über Host anzeigen." - -#, fuzzy -#| msgid "Search for hostgroups." -msgid "Search for help topics." -msgstr "Nach Hostgruppen suchen." - -#, fuzzy -#| msgid "Request id" -msgid "Required" -msgstr "Anfrage-ID" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -#| msgid "ACI name" -msgid "CLI name" -msgstr "ACI-Name" - -#, fuzzy -#| msgid "Change password" -msgid "Confirm (password)" -msgstr "Passwort ändern" - -#, fuzzy -#| msgid "Default shell" -msgid "Default" -msgstr "Vorgabe-Shell" - -#, fuzzy -#| msgid "Default host group" -msgid "Default from" -msgstr "Standard Hostgruppe" - -msgid "Label" -msgstr "" - -#, fuzzy -#| msgid "Hostname of this server" -msgid "Convert on server" -msgstr "Hostname dieses Servers" - -#, fuzzy -#| msgid "host group" -msgid "Option group" -msgstr "Hostgruppe" - -msgid "Sensitive" -msgstr "" - -#, fuzzy -#| msgid "Positional arguments" -msgid "Positional argument" -msgstr "Positionale Argumente" - -#, fuzzy, python-format -#| msgid "%(parent)s: %(oname)s not found" -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s nicht gefunden" - -#, fuzzy -#| msgid "Display information about a named group." -msgid "Display information about a command parameter." -msgstr "Informationen zu einer genannten Gruppe anzeigen." - -#, fuzzy -#| msgid "Search for stage users." -msgid "Search command parameters." -msgstr "Nach vorbereiteten Benutzern suchen." - -#, fuzzy, python-format -#| msgid "%(parent)s: %(oname)s not found" -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s nicht gefunden" - -#, fuzzy -#| msgid "Display information about a named group." -msgid "Display information about a command output." -msgstr "Informationen zu einer genannten Gruppe anzeigen." - -#, fuzzy -#| msgid "Search for Sudo Commands." -msgid "Search for command outputs." -msgstr "Nach Sudo-Befehlen suchen." - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -#, fuzzy -#| msgid "" -#| "Cannot perform the selected command without Samba 4 support installed. " -#| "Make sure you have installed server-trust-ad sub-package of IPA." -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"Kann den ausgewählten Befehl nicht ohne Samba 4 Unterstützung ausführen. " -"Stellen Sie sicher, dass das server-trust-ad Paket von IPA installiert ist." - -#, fuzzy -#| msgid "" -#| "Cannot perform the selected command without Samba 4 instance configured " -#| "on this machine. Make sure you have run ipa-adtrust-install on this " -#| "server." -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" -"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " -"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " -"auf dieser Maschine ausgeführt wurde." - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added role \"%(value)s\"" -msgid "Added ID range \"%(value)s\"" -msgstr "Rolle \"%(value)s\" hinzugefügt" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted role \"%(value)s\"" -msgid "Deleted ID range \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" - -#, fuzzy, python-format -#| msgid "%(count)d role matched" -#| msgid_plural "%(count)d roles matched" -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" - -#, fuzzy -#| msgid "Modify a role." -msgid "" -"Modify ID range.\n" -"\n" -msgstr "Rolle ändern." - -#, fuzzy, python-format -#| msgid "Modified role \"%(value)s\"" -msgid "Modified ID range \"%(value)s\"" -msgstr "Rolle \"%(value)s\" geändert" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, fuzzy -#| msgid "HBAC service description" -msgid "self service permission" -msgstr "Beschreibung des HBAC-Dienstes" - -#, fuzzy -#| msgid "permissions" -msgid "self service permissions" -msgstr "Berechtigungen" - -#, fuzzy -#| msgid "Permissions" -msgid "Self Service Permissions" -msgstr "Berechtigungen" - -#, fuzzy -#| msgid "Permission" -msgid "Self Service Permission" -msgstr "Berechtigung" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added selfservice \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -#, fuzzy, python-format -#| msgid "Modified service \"%(value)s\"" -msgid "Modified selfservice \"%(value)s\"" -msgstr "Dienst »%(value)s« geändert" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, fuzzy -#| msgid "" -#| "\n" -#| "IPA servers\n" -msgid "" -"\n" -"IPA server roles\n" -msgstr "" -"\n" -"IPA-Server\n" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#, fuzzy -#| msgid "server" -msgid "server role" -msgstr "Server" - -#, fuzzy -#| msgid "servers" -msgid "server roles" -msgstr "Server" - -#, fuzzy -#| msgid "IPA Servers" -msgid "IPA Server Roles" -msgstr "IPA-Server" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA Server Role" -msgstr "Zu verwendender IPA-Server" - -#, fuzzy -#| msgid "IPA server hostname" -msgid "IPA server role name" -msgstr "IPA-Server Hostname" - -#, fuzzy -#| msgid "Rule status" -msgid "Role status" -msgstr "Regelstatus" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d role matched" -#| msgid_plural "%(count)d roles matched" -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "Rollen" - -#, fuzzy -#| msgid "Role name" -msgid "IPA role name" -msgstr "Rollenname" - #, fuzzy #| msgid "users and hosts cannot both be set" msgid "HBAC rule and local members cannot both be set" @@ -18831,1137 +21028,221 @@ msgstr "Benutzerkonto »%(value)s« wurde aktiviert" msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "Benutzerkonto »%(value)s« wurde deaktiviert" -#, fuzzy, python-brace-format -#| msgid "realm not found\n" -msgid "{role}: role not found" -msgstr "Realm nicht gefunden\n" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -#, fuzzy -#| msgid "Empty domain is not allowed" -msgid "pyhbac is not installed." -msgstr "Eine leere Domäne ist nicht zulässig" - -#, fuzzy -#| msgid "Deprecated options" msgid "" "\n" -"IPA certificate operations\n" -msgstr "Veraltete Optionen" - -msgid "" +"IPA servers\n" +msgstr "" "\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -#, fuzzy -#| msgid "Retrieve an existing certificate." -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "Ein existierendes Zertifikat holen." - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -#, fuzzy -#| msgid "Check the status of a certificate signing request." -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "Den Status der Signaturanfrage des Zertifikats überprüfen." - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -#, fuzzy -#| msgid "Unspecified" -msgid " * 0 - unspecified\n" -msgstr "Nicht angegeben" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Host '%(host)s' not found" -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "Host »%(host)s« nicht gefunden" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -#, fuzzy -#| msgid "Base-64 encoded server certificate" -msgid "Base-64 encoded certificate." -msgstr "Base-64-kodiertes Serverzertifikat" - -#, fuzzy -#| msgid "Certificate" -msgid "Certificate chain" -msgstr "Zertifikat" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "Subject" -msgstr "Betreff" - -#, fuzzy -#| msgid "Email address" -msgid "Subject email address" -msgstr "Email-Adresse" - -#, fuzzy -#| msgid "must be DNS name" -msgid "Subject DNS name" -msgstr "muss ein DNS-Name sein" - -#, fuzzy -#| msgid "Street address" -msgid "Subject X.400 address" -msgstr "Straße" - -#, fuzzy -#| msgid "Home directory base" -msgid "Subject directory name" -msgstr "Basis für Home-Verzeichnisse" - -msgid "Subject EDI Party name" -msgstr "" - -#, fuzzy -#| msgid "Subject" -msgid "Subject URI" -msgstr "Betreff" - -#, fuzzy -#| msgid "IP Address" -msgid "Subject IP Address" -msgstr "IP-Adresse" - -#, fuzzy -#| msgid "Subject" -msgid "Subject OID" -msgstr "Betreff" - -#, fuzzy -#| msgid "Subject" -msgid "Subject UPN" -msgstr "Betreff" - -#, fuzzy -#| msgid "Kerberos principal" -msgid "Subject Kerberos principal name" -msgstr "Kerberos-Principal" - -#, fuzzy -#| msgid "Server Name" -msgid "Subject Other Name" -msgstr "Servername" - -msgid "Issuer" -msgstr "Ausgabestelle" - -#, fuzzy -#| msgid "Issuer" -msgid "Issuer DN" -msgstr "Ausgabestelle" - -msgid "Not Before" -msgstr "Nicht vor" - -msgid "Not After" -msgstr "Nicht nach" - -msgid "Fingerprint (SHA1)" -msgstr "Fingerabdruck (SHA1)" - -#, fuzzy -#| msgid "Fingerprint (SHA1)" -msgid "Fingerprint (SHA256)" -msgstr "Fingerabdruck (SHA1)" - -msgid "Serial number (hex)" -msgstr "Seriennummer (hex)" - -msgid "Request status" -msgstr "Anfragestatus" - -msgid "Include certificate chain in output" -msgstr "" - -#, fuzzy -#| msgid "automatically add the principal if it doesn't exist" -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "Den Principal automatisch hinzufügen, falls dieser nicht existiert" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, fuzzy, python-format -#| msgid "The principal for this request doesn't exist." -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "Der Principal für diese Anfrage existiert nicht" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -#, fuzzy -#| msgid "Sudo Option" -msgid "'add' option" -msgstr "Sudo-Option" - -msgid "The principal for this request doesn't exist." -msgstr "Der Principal für diese Anfrage existiert nicht" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Status" -msgstr "Status" - -msgid "Revoked" -msgstr "Widerrufen" - -msgid "Revocation reason" -msgstr "Grund des Widerrufs" - -#, fuzzy -#| msgid "Reason for revoking the certificate (0-10)" -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "Grund für den Widerruf des Zertifikats (0-10)" - -#, fuzzy, python-format -#| msgid "Owner" -msgid "Owner %s" -msgstr "Eigentümer" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "7 ist kein gültiger Grund für einen Widerruf." - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, fuzzy, python-format -#| msgid "Search for stage users." -msgid "Search for certificates without these owner %s." -msgstr "Nach vorbereiteten Benutzern suchen." - -#, fuzzy -#| msgid "View" -msgid "ID View" -msgstr "Ansicht" - -msgid "system ID View" -msgstr "" - -#, fuzzy -#| msgid "View" -msgid "ID Views" -msgstr "Ansicht" - -#, fuzzy -#| msgid "User to override" -msgid "User object overrides" -msgstr "Benutzer zum Überschreiben" - -#, fuzzy -#| msgid "Group to override" -msgid "Group object overrides" -msgstr "Gruppe zum Überschreiben" - -#, fuzzy -#| msgid "Host category the rule applies to" -msgid "Hosts the view applies to" -msgstr "Host-Kategorie, auf welche die Regel angewendet werden soll" - -#, fuzzy, python-format -#| msgid "Added role \"%(value)s\"" -msgid "Added ID View \"%(value)s\"" -msgstr "Rolle \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -#| msgid "Deleted ACI \"%(value)s\"" -msgid "Deleted ID View \"%(value)s\"" -msgstr "ACI gelöscht \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Modified ACI \"%(value)s\"" -msgid "Modified an ID View \"%(value)s\"" -msgstr "ACI geändert \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "%(count)d ACI matched" -#| msgid_plural "%(count)d ACIs matched" -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "%(count)d ACI gefunden" -msgstr[1] "%(count)d ACIs gefunden" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -#, fuzzy -#| msgid "realm not found\n" -msgid "not found" -msgstr "Realm nicht gefunden\n" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, fuzzy, python-format -#| msgid "Conditions that could not be removed" -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "Bedingungen, die nicht entfernt werden konnten" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -#, fuzzy -#| msgid "Add a new HBAC service." -msgid "Add a new ID override." -msgstr "Einen neuen HBAC-Dienst hinzufügen." - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added ID override \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" - -#, fuzzy -#| msgid "Delete an IPA service." -msgid "Delete an ID override." -msgstr "Einen IPA-Dienst entfernen." - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted ID override \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -#, fuzzy -#| msgid "Modify an HBAC service." -msgid "Modify an ID override." -msgstr "HBAC Dienst ändern" - -#, fuzzy, python-format -#| msgid "Modified service \"%(value)s\"" -msgid "Modified an ID override \"%(value)s\"" -msgstr "Dienst »%(value)s« geändert" - -#, fuzzy -#| msgid "User to override" -msgid "ID override" -msgstr "Benutzer zum Überschreiben" - -#, fuzzy -#| msgid "Zone record '%s' cannot be deleted" -msgid "ID overrides cannot be renamed" -msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" - -#, fuzzy -#| msgid "Search for IPA services." -msgid "Search for an ID override." -msgstr "Nach IPA-Diensten suchen." - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" +"IPA-Server\n" #, fuzzy #| msgid "Display information about an IPA service." -msgid "Display information about an ID override." +msgid "" +"\n" +"Get information about installed IPA servers.\n" msgstr "Informationen zu einem IPA-Dienst anzeigen." -#, fuzzy -#| msgid "User to override" -msgid "User ID override" -msgstr "Benutzer zum Überschreiben" - -#, fuzzy -#| msgid "User to override" -msgid "User ID overrides" -msgstr "Benutzer zum Überschreiben" - -#, fuzzy -#| msgid "Base-64 encoded server certificate" -msgid "Base-64 encoded user certificate" -msgstr "Base-64-kodiertes Serverzertifikat" - -#, fuzzy -#| msgid "Group to override" -msgid "Group ID override" -msgstr "Gruppe zum Überschreiben" - -#, fuzzy -#| msgid "Group to override" -msgid "Group ID overrides" -msgstr "Gruppe zum Überschreiben" - -msgid "Add one or more certificates to the idoverrideuser entry" +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" msgstr "" -#, fuzzy, python-format -#| msgid "Added stage user \"%(value)s\"" -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "server" +msgstr "Server" + +msgid "servers" +msgstr "Server" + +msgid "IPA Servers" +msgstr "IPA-Server" #, fuzzy -#| msgid "Remove a manager to the user entry" -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "Manager vom Benutzer entfernen" +#| msgid "Service category" +msgid "Server location" +msgstr "Dienstkategorie" -#, fuzzy, python-format -#| msgid "Removed condition(s) from \"%(value)s\"" -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" +#, fuzzy +#| msgid "Service Settings" +msgid "Service weight" +msgstr "Diensteinstellungen" -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added User ID override \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" +#, fuzzy +#| msgid "Search for IPA services." +msgid "Weight for server services" +msgstr "Nach IPA-Diensten suchen." -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" +#, fuzzy +#| msgid "Service Settings" +msgid "Service relative weight" +msgstr "Diensteinstellungen" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +#, fuzzy +#| msgid "Disabled service \"%(value)s\"" +msgid "Enabled server roles" +msgstr "Dienst »%(value)s« deaktiviert" + +msgid "List of enabled roles" +msgstr "" + +#, fuzzy +#| msgid "Display information about an IPA service." +msgid "Modify information about an IPA server." +msgstr "Informationen zu einem IPA-Dienst anzeigen." #, fuzzy, python-format #| msgid "Modified service \"%(value)s\"" -msgid "Modified an User ID override \"%(value)s\"" +msgid "Modified IPA server \"%(value)s\"" msgstr "Dienst »%(value)s« geändert" #, fuzzy, python-format #| msgid "%(count)d service matched" #| msgid_plural "%(count)d services matched" -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" msgstr[0] "%(count)d passender Dienst" msgstr[1] "%(count)d passende Dienste" #, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added Group ID override \"%(value)s\"" -msgstr "Gruppe »%(value)s« hinzugefügt" +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Gruppe »%(value)s« gelöscht" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Gruppe »%(value)s« geändert" - -#, fuzzy, python-format -#| msgid "%(count)d group matched" -#| msgid_plural "%(count)d groups matched" -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "%(count)d passende Gruppe" -msgstr[1] "%(count)d passende Gruppen" - -msgid "" -"\n" -"Auto Membership Rule.\n" +msgid "Ignore topology errors" msgstr "" -"\n" -"Regel für Auto-Mitgliedschaft\n" -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" msgstr "" msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." msgstr "" msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." msgstr "" msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." msgstr "" -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Modify an automember rule.\n" -#| " " -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel bearbeiten. " - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -#, fuzzy -#| msgid "Rebuild membership for all members of a grouping" -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" -"Auto-Mitgliedschaft für alle Mitglieder einer Gruppierung neu erstellen" - -#, fuzzy -#| msgid "Rebuild membership for all members of a grouping" -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" -"Auto-Mitgliedschaft für alle Mitglieder einer Gruppierung neu erstellen" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "Regel für Auto-Mitgliedschaft" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(otype)s \"%(oname)s\" nicht gefunden" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "%s ist kein gültiges Attribut" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel hinzufügen.\n" -" " - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" hinzugefügt" - -msgid "Auto Membership is not configured" -msgstr "Auto-Mitgliedschaft ist nicht konfiguriert" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" -"\n" -" Bedigungen zu einer Auto-Mitgliedschaftsregel hinzufügen.\n" -" " - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Bedingung(en) zu \"%(value)s\" hinzugefügt" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "Auto-Mitgliedschaftsregel: %s nicht gefunden!" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" -"\n" -" Bedingungen von einer einer Auto-Mitglieschaftsregel entfernen. " - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel bearbeiten. " - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" bearbeitet" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel löschen.\n" -" " - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" gelöscht" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" -"\n" -" Suche nach Auto-Mitgliedschaftsregeln.\n" -" " - -#, fuzzy, python-format -#| msgid "%(count)d role matched" -#| msgid_plural "%(count)d roles matched" -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" -"\n" -" Informationen über Auto-Mitgliedschaftsregel anzeigen.\n" -" " - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " +msgid "Ignoring these warnings and proceeding with removal" msgstr "" #, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" msgstr "" #, fuzzy, python-format -#| msgid "Removed condition(s) from \"%(value)s\"" -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -#, fuzzy -#| msgid "Default (fallback) Group" -msgid "No default (fallback) group set" -msgstr "Standard (Rückfall) Gruppe" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Display information about an automember rule.\n" -#| " " -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" -"\n" -" Informationen über Auto-Mitgliedschaftsregel anzeigen.\n" -" " - -msgid "Task DN" -msgstr "Aufgaben DN" - -msgid "DN of the started task" -msgstr "DN der gestarteten Aufgabe" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "Mindestens eine der Optionen: type, users, hosts muss gesetzt sein" - -msgid "users and hosts cannot both be set" -msgstr "Benutzer und Host können nicht gleichzeitig gesetzt sein." - -msgid "hosts cannot be set when type is 'group'" -msgstr "hosts kann nicht gesetzt sein wenn Typ 'group' ist" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "users kann nicht gesetzt sein wenn Typ 'hostgroup' ist" - -msgid "Automember rebuild membership task started" -msgstr "Aufgabe für die Neuerstellung der Auto-Mitgliedschaft gestartet" - -msgid "Automember rebuild membership task completed" -msgstr "Aufgabe für die Neuerstellung der Auto-Mitgliedschaft abgeschlossen" +#| msgid "error on server '%(server)s': %(error)s" +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "Fehler auf Server '%(server)s': %(error)s" #, python-format -msgid "Task DN = '%s'" -msgstr "Aufgaben DN = '%s'" +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" -msgid "Automember" -msgstr "Auto-Mitgliedschaft" +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." msgstr "" #, fuzzy -#| msgid "" -#| "\n" -#| " Remove conditions from an automember rule.\n" -#| " " -msgid "Remove orphan automember rules" +#| msgid "This entry is already enabled" +msgid "Server has already been deleted" +msgstr "Dieser Eintrag ist bereits aktiviert" + +msgid "Agreements deleted" msgstr "" + +#, fuzzy +#| msgid "Some entries were not deleted" +msgid "Following segments were not deleted:" +msgstr "Einige Einträge wurden nicht gelöscht" + +#, fuzzy +#| msgid "not allowed to modify user entries" +msgid "not allowed to perform server connection check" +msgstr "Es ist nicht erlaubt, Benutzereinträge zu ändern." + +msgid "Set enabled/hidden state of a server." +msgstr "" + +#, fuzzy +#| msgid "Status" +msgid "State" +msgstr "Status" + +#, fuzzy +#| msgid "Server Name" +msgid "Server state" +msgstr "Servername" + +#, fuzzy, python-format +#| msgid "Changed password for \"%(value)s\"" +msgid "Changed server state of \"%(value)s\"." +msgstr "Passwort für \"%(value)s\" geändert" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" "\n" -" Bedingungen von einer einer Auto-Mitglieschaftsregel entfernen. " +"Session Support for IPA\n" +msgstr "" msgid "" "\n" @@ -20164,6 +21445,951 @@ msgstr "HBAC-Regel aktivieren." msgid "Enabled CA \"%(value)s\"" msgstr "HBAC-Regel \"%(value)s\" aktiviert" +#, fuzzy +#| msgid "Certificate Type" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "Zertifikattyp" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +#, fuzzy +#| msgid "Modify configuration options." +msgid "Certificate Identity Mapping configuration options" +msgstr "Konfigurationsoptionen bearbeiten." + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +#, fuzzy +#| msgid "Prompt to set the user password" +msgid "Prompt for the username" +msgstr "Zum Setzen des Passworts auffordern" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +#, fuzzy +#| msgid "Show the current configuration." +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "Die aktuelle Konfiguration anzeigen." + +#, fuzzy +#| msgid "Certificate Type" +msgid "Certificate Identity Mapping Rules" +msgstr "Zertifikattyp" + +#, fuzzy +#| msgid "Certificate Type" +msgid "Certificate Identity Mapping Rule" +msgstr "Zertifikattyp" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +#, fuzzy +#| msgid "File to store the certificate in." +msgid "Rule used to map the certificate with a user entry" +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +#, fuzzy +#| msgid "Matched rules" +msgid "Matching rule" +msgstr "Zutreffende Regeln" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +#, fuzzy +#| msgid "Priority of the policy (higher number means lower priority" +msgid "Priority of the rule (higher number means lower priority" +msgstr "Priorität der Regel (höhere Zahl meint niedrigere Priorität)" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added HBAC service group \"%(value)s\"" +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« hinzugefügt" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified HBAC service group \"%(value)s\"" +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« geändert" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC service group matched" +#| msgid_plural "%(count)d HBAC service groups matched" +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "%(count)d HBAC-Dienstgruppe gefunden" +msgstr[1] "%(count)d HBAC-Dienstgruppen gefunden" + +#, fuzzy +#| msgid "Display information about a stage user." +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "Informationen zu einem vorbereiteten Benutzer anzeigen." + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted HBAC service group \"%(value)s\"" +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« gelöscht" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Enabled HBAC rule \"%(value)s\"" +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" aktiviert" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Disabled service \"%(value)s\"" +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Dienst »%(value)s« deaktiviert" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "User login" +msgid "User logins" +msgstr "Anmeldename" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "%(count)d passender Benutzer" +msgstr[1] "%(count)d passende Benutzer" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 10" +msgstr "muss mindestens %(minvalue)d sein" + +msgid "configuration options" +msgstr "Konfigurationsoptionen" + +msgid "Configuration" +msgstr "Konfiguration" + +#, fuzzy +#| msgid "Maximum username length" +msgid "Maximum hostname length" +msgstr "Maximale Länge des Benutzernamens" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA servers\n" +msgid "IPA masters" +msgstr "" +"\n" +"IPA-Server\n" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "IPA Master mit Fähigkeit für PKINIT " + +msgid "IPA master which can process PKINIT requests" +msgstr "IPA Master, der PKINIT Anfragen bearbeiten kann" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA servers\n" +msgid "IPA CA servers" +msgstr "" +"\n" +"IPA-Server\n" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA servers\n" +msgid "Hidden IPA CA servers" +msgstr "" +"\n" +"IPA-Server\n" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA servers\n" +msgid "Hidden IPA KRA servers" +msgstr "" +"\n" +"IPA-Server\n" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +#, fuzzy +#| msgid "IPA Servers" +msgid "Hidden IPA DNS servers" +msgstr "IPA-Server" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +#, fuzzy +#| msgid "New: key set" +msgid "DNSec key master" +msgstr "Neu: Schlüssel gesetzt" + +msgid "Empty domain is not allowed" +msgstr "Eine leere Domäne ist nicht zulässig" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "Ungültiger Domänenname '%(domain)s': %(e)s" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "Der Server hat keine Informationen über die Domäne '%(domain)s'" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "Deaktivierte Domäne '%(domain)s' ist nicht zulässig" + +msgid "The group doesn't exist" +msgstr "Die Gruppe existiert nicht" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "Attribut \"%s\" ist nicht erlaubt" + +msgid "May not be empty" +msgstr "Darf nicht leer sein" + +#, fuzzy, python-format +#| msgid "attribute \"%(attribute)s\" not allowed" +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "Attribut \"%(attribute)s\" ist nicht erlaubt" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "$-getrennte Liste von SELinux Benutzern erwartet" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "SELinux Benutzer '%(user)s' ist ungültig: %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "Disable the Kerberos key, SSL certificate and all services of a host." +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" +"Kerberos-Schlüssel, SSL-Zertifikat und alle Dienste des Hosts deaktivieren." + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "Host" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Base-64 encoded host certificate" +msgstr "Base-64-kodiertes Serverzertifikat" + +msgid "Serial Number" +msgstr "Seriennummer" + +msgid "Serial Number (hex)" +msgstr "Seriennummer (hex)" + +#, fuzzy +#| msgid "Authentication" +msgid "Authentication Indicators" +msgstr "Authentifizierung" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "Host \"%(value)s\" hinzugefügt" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Host \"%(value)s\" gelöscht" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Host \"%(value)s\" geändert" + +#, fuzzy +#| msgid "priority cannot be set on global policy" +msgid "Password cannot be set on enrolled host." +msgstr "Priorität der globalen Regel kann nicht gesetzt werden" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d Host gefunden" +msgstr[1] "%(count)d Hosts gefunden" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "Host \"%(value)s\" deaktiviert" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added certificates to host \"%(value)s\"" +msgstr "Host \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Removed condition(s) from \"%(value)s\"" +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Host \"%(value)s\" hinzugefügt" + +#, fuzzy +#| msgid "Remove privileges from a role." +msgid "Remove principal alias from a host entry" +msgstr "Berechtigungen von Rolle entfernen." + +#, fuzzy, python-format +#| msgid "Removed condition(s) from \"%(value)s\"" +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +#, fuzzy +#| msgid "" +#| "Cannot perform the selected command without Samba 4 support installed. " +#| "Make sure you have installed server-trust-ad sub-package of IPA." +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Kann den ausgewählten Befehl nicht ohne Samba 4 Unterstützung ausführen. " +"Stellen Sie sicher, dass das server-trust-ad Paket von IPA installiert ist." + +#, fuzzy +#| msgid "" +#| "Cannot perform the selected command without Samba 4 instance configured " +#| "on this machine. Make sure you have run ipa-adtrust-install on this " +#| "server." +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" +"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " +"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " +"auf dieser Maschine ausgeführt wurde." + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added role \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" +msgstr "Rolle \"%(value)s\" hinzugefügt" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted role \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, fuzzy, python-format +#| msgid "%(count)d role matched" +#| msgid_plural "%(count)d roles matched" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" + +#, fuzzy +#| msgid "Modify a role." +msgid "" +"Modify ID range.\n" +"\n" +msgstr "Rolle ändern." + +#, fuzzy, python-format +#| msgid "Modified role \"%(value)s\"" +msgid "Modified ID range \"%(value)s\"" +msgstr "Rolle \"%(value)s\" geändert" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + msgid "Internationalization messages" msgstr "" @@ -21438,12 +23664,6 @@ msgstr "Zertifikattyp" msgid "REVOKED" msgstr "" -msgid "Serial Number" -msgstr "Seriennummer" - -msgid "Serial Number (hex)" -msgstr "Seriennummer (hex)" - msgid "SHA1 Fingerprint" msgstr "SHA1-Fingerabdruck" @@ -21517,11 +23737,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -#, fuzzy -#| msgid "Certificate Type" -msgid "Certificate mapping data" -msgstr "Zertifikattyp" - #, fuzzy #| msgid "Configuration" msgid "Configuration string" @@ -22385,9 +24600,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "Host" - #, fuzzy #| msgid "Group Settings" msgid "Netgroup Settings" @@ -22531,9 +24743,6 @@ msgstr "Neu: Schlüssel gesetzt" msgid "Add password policy" msgstr "Passwortregel" -msgid "Password Policy" -msgstr "Passwort-Regeln" - #, fuzzy #| msgid "password policies" msgid "Remove password policies" @@ -23069,21 +25278,6 @@ msgstr "Vertrauensstellungen" msgid "Remove domains" msgstr "" -#, fuzzy -#| msgid "Redirection" -msgid "Trust direction" -msgstr "Umleitung" - -#, fuzzy -#| msgid "Request status" -msgid "Trust status" -msgstr "Anfragestatus" - -#, fuzzy -#| msgid "trust type" -msgid "Trust type" -msgstr "Vertrauensstellungstyp" - #, fuzzy #| msgid "UPN suffixes" msgid "Alternative UPN suffixes" @@ -23648,11 +25842,6 @@ msgstr "Sudo" msgid "Topology" msgstr "Topologie" -#, fuzzy -#| msgid "Trust" -msgid "Trusts" -msgstr "Vertrauensstellung" - msgid "True" msgstr "Wahr" @@ -23770,1568 +25959,6 @@ msgstr "Anfrage-ID" msgid "Unsupported value" msgstr "nicht unterstützte Vetrauensstellung" -msgid "Role" -msgstr "Rolle" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "Rolle \"%(value)s\" hinzugefügt" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Rolle \"%(value)s\" geändert" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" -"\n" -"IPA-Server\n" - -#, fuzzy -#| msgid "Display information about an IPA service." -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "Informationen zu einem IPA-Dienst anzeigen." - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "Server" - -msgid "servers" -msgstr "Server" - -msgid "IPA Servers" -msgstr "IPA-Server" - -#, fuzzy -#| msgid "Service category" -msgid "Server location" -msgstr "Dienstkategorie" - -#, fuzzy -#| msgid "Service Settings" -msgid "Service weight" -msgstr "Diensteinstellungen" - -#, fuzzy -#| msgid "Search for IPA services." -msgid "Weight for server services" -msgstr "Nach IPA-Diensten suchen." - -#, fuzzy -#| msgid "Service Settings" -msgid "Service relative weight" -msgstr "Diensteinstellungen" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -#, fuzzy -#| msgid "Disabled service \"%(value)s\"" -msgid "Enabled server roles" -msgstr "Dienst »%(value)s« deaktiviert" - -msgid "List of enabled roles" -msgstr "" - -#, fuzzy -#| msgid "Display information about an IPA service." -msgid "Modify information about an IPA server." -msgstr "Informationen zu einem IPA-Dienst anzeigen." - -#, fuzzy, python-format -#| msgid "Modified service \"%(value)s\"" -msgid "Modified IPA server \"%(value)s\"" -msgstr "Dienst »%(value)s« geändert" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "error on server '%(server)s': %(error)s" -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "Fehler auf Server '%(server)s': %(error)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, fuzzy -#| msgid "This entry is already enabled" -msgid "Server has already been deleted" -msgstr "Dieser Eintrag ist bereits aktiviert" - -msgid "Agreements deleted" -msgstr "" - -#, fuzzy -#| msgid "Some entries were not deleted" -msgid "Following segments were not deleted:" -msgstr "Einige Einträge wurden nicht gelöscht" - -#, fuzzy, python-format -#| msgid "must be '%(value)s'" -msgid "must be \"%s\"" -msgstr "muss '%(value)s' sein" - -#, fuzzy -#| msgid "not allowed to modify user entries" -msgid "not allowed to perform server connection check" -msgstr "Es ist nicht erlaubt, Benutzereinträge zu ändern." - -msgid "Set enabled/hidden state of a server." -msgstr "" - -#, fuzzy -#| msgid "Status" -msgid "State" -msgstr "Status" - -#, fuzzy -#| msgid "Server Name" -msgid "Server state" -msgstr "Servername" - -#, fuzzy, python-format -#| msgid "Changed password for \"%(value)s\"" -msgid "Changed server state of \"%(value)s\"." -msgstr "Passwort für \"%(value)s\" geändert" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -#, fuzzy -#| msgid "Kerberos principal" -msgid "Member principals" -msgstr "Kerberos-Principal" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "Mitglied %s" - -#, fuzzy -#| msgid "Remove members from an HBAC service group." -msgid "Remove member from a named service delegation." -msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." - -#, fuzzy -#| msgid "Add services to an HBAC rule." -msgid "service delegation rule" -msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." - -#, fuzzy -#| msgid "delegations" -msgid "service delegation rules" -msgstr "Delegationen" - -#, fuzzy -#| msgid "Service Settings" -msgid "Service delegation rules" -msgstr "Diensteinstellungen" - -#, fuzzy -#| msgid "Service Settings" -msgid "Service delegation rule" -msgstr "Diensteinstellungen" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -msgid "privileged service delegation rule" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, fuzzy -#| msgid "Delegation name" -msgid "service delegation target" -msgstr "Delegationsname" - -#, fuzzy -#| msgid "Service Settings" -msgid "service delegation targets" -msgstr "Diensteinstellungen" - -#, fuzzy -#| msgid "Service Settings" -msgid "Service delegation targets" -msgstr "Diensteinstellungen" - -#, fuzzy -#| msgid "Service Settings" -msgid "Service delegation target" -msgstr "Diensteinstellungen" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added service delegation target \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -msgid "privileged service delegation target" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(port)s is not a valid port" -msgid "%(user)s is not a POSIX user" -msgstr "%(port)s kein gültiger Port" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -#, fuzzy -#| msgid "LDAP URI" -msgid "Invalid LDAP URI." -msgstr "LDAP-URI" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -#, fuzzy -#| msgid "Default group for new users" -msgid "Default group for new users not found" -msgstr "Vorgegebene Gruppe für neue Benutzer" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "Disable the Kerberos key, SSL certificate and all services of a host." -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" -"Kerberos-Schlüssel, SSL-Zertifikat und alle Dienste des Hosts deaktivieren." - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#, fuzzy -#| msgid "Base-64 encoded server certificate" -msgid "Base-64 encoded host certificate" -msgstr "Base-64-kodiertes Serverzertifikat" - -#, fuzzy -#| msgid "Principal name" -msgid "Principal alias" -msgstr "Principal-Name" - -msgid "SSH public key fingerprint" -msgstr "Fingerabdruck des öffentlichen SSH-Schlüssels" - -#, fuzzy -#| msgid "Authentication" -msgid "Authentication Indicators" -msgstr "Authentifizierung" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Host \"%(value)s\" hinzugefügt" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Host \"%(value)s\" gelöscht" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Host \"%(value)s\" geändert" - -#, fuzzy -#| msgid "priority cannot be set on global policy" -msgid "Password cannot be set on enrolled host." -msgstr "Priorität der globalen Regel kann nicht gesetzt werden" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "%(count)d Host gefunden" -msgstr[1] "%(count)d Hosts gefunden" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Host \"%(value)s\" deaktiviert" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added certificates to host \"%(value)s\"" -msgstr "Host \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -#| msgid "Removed condition(s) from \"%(value)s\"" -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Host \"%(value)s\" hinzugefügt" - -#, fuzzy -#| msgid "Remove privileges from a role." -msgid "Remove principal alias from a host entry" -msgstr "Berechtigungen von Rolle entfernen." - -#, fuzzy, python-format -#| msgid "Removed condition(s) from \"%(value)s\"" -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -#, fuzzy -#| msgid "Delete an IPA service." -msgid "Delete Class of Service entry" -msgstr "Einen IPA-Dienst entfernen." - -#, fuzzy -#| msgid "Modify an HBAC service group." -msgid "Modify Class of Service entry" -msgstr "HBAC-Dienstgruppe bearbeiten" - -msgid "Display Class of Service entry" -msgstr "" - -#, fuzzy -#| msgid "Search for an HBAC service group." -msgid "Search for Class of Service entry" -msgstr "Suche nach HBAC Dienstgruppe" - -msgid "password policy" -msgstr "Passwortregel" - -msgid "password policies" -msgstr "Passwortregeln" - -msgid "Password Policies" -msgstr "Passwortregeln" - -msgid "Max repeat" -msgstr "" - -#, fuzzy -#| msgid "Maximum number of entries returned" -msgid "Maximum number of same consecutive characters" -msgstr "Maximale Anzahl der zurückgegebenen Einträge" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -#| msgid "User name" -msgid "User check" -msgstr "Benutzername" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "Maximale Lebensdauer muss größer als das Minimum sein." - -msgid "cannot delete global password policy" -msgstr "Die Globale Passwortregel kann nicht gelöscht werden" - -msgid "priority cannot be set on global policy" -msgstr "Priorität der globalen Regel kann nicht gesetzt werden" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" -"Alternativ sind folgende Server in der Lage den Befehl auszuführen: " -"%(masters)s" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" -"Kann den ausgewählten Befehl nicht ohne Samba 4 Unterstützung ausführen. " -"Stellen Sie sicher, dass das server-trust-ad Paket von IPA installiert ist." - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" -"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " -"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " -"auf dieser Maschine ausgeführt wurde." - -#, fuzzy -#| msgid "" -#| "Cannot perform the selected command without Samba 4 instance configured " -#| "on this machine. Make sure you have run ipa-adtrust-install on this " -#| "server." -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " -"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " -"auf dieser Maschine ausgeführt wurde." - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "Vertrauensstellung" - -msgid "trusts" -msgstr "Vertrauensstellungen" - -msgid "Trust" -msgstr "Vertrauensstellung" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "UPN Suffixe" - -#, fuzzy, python-brace-format -#| msgid "invalid DN (%s)" -msgid "invalid SID: {SID}" -msgstr "ungültiger DN (%s)" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "Externe Vertrauensstellung" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added automember rule \"%(value)s\"" -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -#| msgid "Deleted automount location \"%(value)s\"" -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Automount-Ort \"%(value)s\" gelöscht" - -msgid "missing base_id" -msgstr "fehlende base_id" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "Vertrauensstellungstyp" - -msgid "only \"ad\" is supported" -msgstr "nur \"ad\" ist unterstützt" - -#, fuzzy -#| msgid "Domain" -msgid "domain" -msgstr "Domain" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" -"Zum Aufbau einer Vertrauensstellung mit einem Active Directory müssen " -"Domänenname und Realm des IPA Servers übereinstimmen" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted trust \"%(value)s\"" -msgstr "Host \"%(value)s\" gelöscht" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d host matched" -#| msgid_plural "%(count)d hosts matched" -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d Host gefunden" -msgstr[1] "%(count)d Hosts gefunden" - -#, fuzzy -#| msgid "Configuration" -msgid "trust configuration" -msgstr "Konfiguration" - -#, fuzzy -#| msgid "OTP Configuration" -msgid "Global Trust Configuration" -msgstr "OTP Konfiguration" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "nicht unterstützte Vetrauensstellung" - -#, fuzzy, python-format -#| msgid "Modified ACI \"%(value)s\"" -msgid "Modified \"%(value)s\" trust configuration" -msgstr "ACI geändert \"%(value)s\"" - -msgid "SID" -msgstr "SID" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" -"Dieser Befehl erfordert die Existenz der \"editors\" Gruppe, diese wurde " -"jedoch nicht gefunden." - -msgid "trust domain" -msgstr "" - -#, fuzzy -#| msgid "trusts" -msgid "trust domains" -msgstr "Vertrauensstellungen" - -#, fuzzy -#| msgid "Trust Settings" -msgid "Trusted domains" -msgstr "Vertrauenseinstellungen" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "Domäne aktiviert" - -#, fuzzy, python-format -#| msgid "Server has no information about domain '%(domain)s'" -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "Der Server hat keine Informationen über die Domäne '%(domain)s'" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, fuzzy -#| msgid "not allowed to modify user entries" -msgid "not allowed to remotely add agent" -msgstr "Es ist nicht erlaubt, Benutzereinträge zu ändern." - -#, fuzzy, python-format -#| msgid "Enabled user account \"%(value)s\"" -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Benutzerkonto »%(value)s« wurde aktiviert" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -#| msgid "Disabled host \"%(value)s\"" -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Host \"%(value)s\" deaktiviert" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -#, fuzzy -#| msgid "Certificate Type" -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "Zertifikattyp" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -#, fuzzy -#| msgid "Modify configuration options." -msgid "Certificate Identity Mapping configuration options" -msgstr "Konfigurationsoptionen bearbeiten." - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -#, fuzzy -#| msgid "Prompt to set the user password" -msgid "Prompt for the username" -msgstr "Zum Setzen des Passworts auffordern" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -#, fuzzy -#| msgid "Show the current configuration." -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "Die aktuelle Konfiguration anzeigen." - -#, fuzzy -#| msgid "Certificate Type" -msgid "Certificate Identity Mapping Rules" -msgstr "Zertifikattyp" - -#, fuzzy -#| msgid "Certificate Type" -msgid "Certificate Identity Mapping Rule" -msgstr "Zertifikattyp" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -#, fuzzy -#| msgid "File to store the certificate in." -msgid "Rule used to map the certificate with a user entry" -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -#, fuzzy -#| msgid "Matched rules" -msgid "Matching rule" -msgstr "Zutreffende Regeln" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -#, fuzzy -#| msgid "Priority of the policy (higher number means lower priority" -msgid "Priority of the rule (higher number means lower priority" -msgstr "Priorität der Regel (höhere Zahl meint niedrigere Priorität)" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added HBAC service group \"%(value)s\"" -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« hinzugefügt" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified HBAC service group \"%(value)s\"" -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« geändert" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC service group matched" -#| msgid_plural "%(count)d HBAC service groups matched" -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "%(count)d HBAC-Dienstgruppe gefunden" -msgstr[1] "%(count)d HBAC-Dienstgruppen gefunden" - -#, fuzzy -#| msgid "Display information about a stage user." -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "Informationen zu einem vorbereiteten Benutzer anzeigen." - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted HBAC service group \"%(value)s\"" -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« gelöscht" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Enabled HBAC rule \"%(value)s\"" -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" aktiviert" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Disabled service \"%(value)s\"" -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Dienst »%(value)s« deaktiviert" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#, fuzzy -#| msgid "User login" -msgid "User logins" -msgstr "Anmeldename" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d user matched" -#| msgid_plural "%(count)d users matched" -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "%(count)d passender Benutzer" -msgstr[1] "%(count)d passende Benutzer" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added role \"%(value)s\"" -msgid "Added privilege \"%(value)s\"" -msgstr "Rolle \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -#| msgid "Deleted role \"%(value)s\"" -msgid "Deleted privilege \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" - -#, fuzzy, python-format -#| msgid "Modified role \"%(value)s\"" -msgid "Modified privilege \"%(value)s\"" -msgstr "Rolle \"%(value)s\" geändert" - -#, fuzzy, python-format -#| msgid "%(count)d role matched" -#| msgid_plural "%(count)d roles matched" -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -25517,671 +26144,48 @@ msgstr "Berechtigungen von Rolle entfernen." msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "Dienst »%(value)s« gelöscht" -msgid "delegation" -msgstr "Delegation" - -msgid "delegations" -msgstr "Delegationen" - -msgid "Delegations" -msgstr "Delegationen" - -msgid "Delegation" -msgstr "Delegation" - -#, fuzzy, python-format -#| msgid "Added role \"%(value)s\"" -msgid "Added delegation \"%(value)s\"" -msgstr "Rolle \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -#| msgid "Deleted role \"%(value)s\"" -msgid "Deleted delegation \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" - -#, fuzzy, python-format -#| msgid "Modified role \"%(value)s\"" -msgid "Modified delegation \"%(value)s\"" -msgstr "Rolle \"%(value)s\" geändert" - -#, fuzzy, python-format -#| msgid "%(count)d role matched" -#| msgid_plural "%(count)d roles matched" -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" +#, fuzzy +#| msgid "HBAC service description" +msgid "self service permission" +msgstr "Beschreibung des HBAC-Dienstes" #, fuzzy -#| msgid "this option has been deprecated." -msgid "The deny type has been deprecated." -msgstr "Diese Option ist veraltet." - -msgid "HBAC rules" -msgstr "HBAC-Regeln" - -msgid "HBAC Rules" -msgstr "HBAC-Regeln" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" hinzugefügt" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" gelöscht" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" geändert" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "%(count)d HBAC-Regel gefunden" -msgstr[1] "%(count)d HBAC-Regeln gefunden" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" aktiviert" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" deaktiviert" - -msgid "Access time" -msgstr "Zugriffszeit" +#| msgid "permissions" +msgid "self service permissions" +msgstr "Berechtigungen" #, fuzzy -#| msgid "Add target hosts and hostgroups to an HBAC rule." -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." +#| msgid "Permissions" +msgid "Self Service Permissions" +msgstr "Berechtigungen" -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "Zugriff gewährt: %s" - -msgid "operation not defined" -msgstr "" +#, fuzzy +#| msgid "Permission" +msgid "Self Service Permission" +msgstr "Berechtigung" #, fuzzy, python-format -#| msgid "not allowed to modify group entries" -msgid "not allowed to perform operation: %s" -msgstr "Es ist nicht erlaubt, Gruppeneinträge zu ändern." - -msgid "No such virtual command" -msgstr "" - -msgid "Member service groups" -msgstr "Mitglieds-Dienstgruppen" - -msgid "Member HBAC service groups" -msgstr "Mitglieds-HBAC-Servicegruppen" - -#, fuzzy -#| msgid "Member services" -msgid "Member ID user overrides" -msgstr "Mitglieds-Dienste" - -#, fuzzy -#| msgid "Indirect Member users" -msgid "Indirect Member ID user overrides" -msgstr "Indirekte Mitglieds-Benutzer" - -msgid "Indirect Member permissions" -msgstr "Indirekte Mitglieds-Berechtigungen" - -msgid "Indirect Member HBAC service" -msgstr "Indirekte Mitgli" - -msgid "Indirect Member HBAC service group" -msgstr "Indirekte Mitglieds-HBAC-Servicegruppe" - -msgid "Invalid format. Should be name=value" -msgstr "Ungültiges Format. Sollte name=wert sein." - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Ein IPA Masterhost kann nicht deaktiviert oder gelöscht werden" - -msgid "entry" -msgstr "Eintrag" - -msgid "entries" -msgstr "Einträge" - -msgid "Entry" -msgstr "Eintrag" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "Container-Eintrag (%(container)s) nicht gefunden" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s nicht gefunden" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "%(oname)s mit dem Namen »%(pkey)s« existiert bereits" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "Attribut \"%(attribute)s\" ist nicht erlaubt" +#| msgid "Added service \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" #, fuzzy, python-format -#| msgid "attribute \"%s\" not allowed" -msgid "these attributes are not allowed: %(attrs)s" -msgstr "Attribut \"%s\" ist nicht erlaubt" - -msgid "attribute is not configurable" -msgstr "Attribut ist nicht konfigurierbar" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" - -msgid "the entry was deleted while being modified" -msgstr "Der Eintrag wurde während der Änderung entfernt." - -#, python-format -msgid "%s" -msgstr "%s" - -#, python-format -msgid "%s to add" -msgstr "%s zum hinzufügen" - -#, python-format -msgid "%s to remove" -msgstr "%s zum entfernen" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" #, fuzzy, python-format -#| msgid "Added automount location \"%(value)s\"" -msgid "added attribute value to entry %(value)s" -msgstr "Automount Ort \"%(value)s\" hinzugefügt" +#| msgid "Modified service \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" +msgstr "Dienst »%(value)s« geändert" #, fuzzy, python-format -#| msgid "Removed condition(s) from \"%(value)s\"" -msgid "removed attribute values from entry %(value)s" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "muss TRUE oder FALSE sein" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#, fuzzy -#| msgid "Password expiration" -msgid "User password expiration" -msgstr "Passwortablauf" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -#, fuzzy -#| msgid "Home directory" -msgid "SMB Home Directory" -msgstr "Home-Verzeichnis" - -#, fuzzy -#| msgid "Home directory base" -msgid "SMB Home Directory Drive" -msgstr "Basis für Home-Verzeichnisse" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "Ungültiges E-Mail-Format: %(email)s" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "Manager %(manager)s nicht gefunden" - -#, fuzzy -#| msgid "File to store the certificate in." -msgid "Issuer of the certificate" -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -#, fuzzy -#| msgid "File to store the certificate in." -msgid "Subject of the certificate" -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#, fuzzy -#| msgid "Remove a manager to the user entry" -msgid "Add one or more certificate mappings to the user entry." -msgstr "Manager vom Benutzer entfernen" - -#, fuzzy, python-format -#| msgid "Activate a stage user \"%(value)s\"" -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." - -#, fuzzy -#| msgid "Remove a manager to the user entry" -msgid "Remove one or more certificate mappings from the user entry." -msgstr "Manager vom Benutzer entfernen" - -#, fuzzy, python-format -#| msgid "Removed condition(s) from \"%(value)s\"" -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Benutzer »%(value)s« hinzugefügt" - -#, fuzzy -#| msgid "Default group for new users" -msgid "Default group for new users is not POSIX" -msgstr "Vorgegebene Gruppe für neue Benutzer" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Benutzer »%(value)s« gelöscht" - -#, python-format -msgid "%s: user is already preserved" -msgstr "%s: Benutzer ist bereits aufbewahrt" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Benutzer »%(value)s« geändert" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Benutzerkonto \"%(value)s\" wiederhergestellt" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "Benutzer \"%s\" ist bereits aktiv" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Vorbereitetes Benutzerkonto \"%(value)s\"" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Benutzerkonto »%(value)s« wurde deaktiviert" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "Benutzerkonto »%(value)s« wurde aktiviert" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Konto »%(value)s« wurde entsperrt" - -msgid "Failed logins" -msgstr "Fehlgeschlagene Logins" - -msgid "Last successful authentication" -msgstr "Letzte erfolgreiche Authentifizierung" - -msgid "Last failed authentication" -msgstr "Letzte fehlgeschlagene Authentifizierung" - -msgid "Time now" -msgstr "Aktuelle Zeit" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "fork() failed\n" -msgid "%(host)s failed" -msgstr "fork() fehlgeschlagen\n" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Konto deaktiviert: %(disabled)s" - -#, fuzzy, python-format -#| msgid "Added stage user \"%(value)s\"" -msgid "Added certificates to user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" - -#, fuzzy, python-format -#| msgid "Removed condition(s) from \"%(value)s\"" -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -#, fuzzy -#| msgid "Add a manager to the user entry" -msgid "Add new principal alias to the user entry" -msgstr "Manager zum Benutzer hinzufügen" - -#, fuzzy, python-format -#| msgid "Added stage user \"%(value)s\"" -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" - -#, fuzzy -#| msgid "Remove a manager to the user entry" -msgid "Remove principal alias from the user entry" -msgstr "Manager vom Benutzer entfernen" - -#, fuzzy, python-format -#| msgid "Removed condition(s) from \"%(value)s\"" -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" #, python-format msgid "all masters must have %(role)s role enabled" @@ -26384,25 +26388,6 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - #, fuzzy #| msgid "Request status" msgid "Request must be a dict" @@ -26428,6 +26413,25 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #, python-format msgid "must equal %r" msgstr "" diff --git a/po/en_GB.po b/po/en_GB.po index 0df72fea3..a0edb2c78 100644 --- a/po/en_GB.po +++ b/po/en_GB.po @@ -4,7 +4,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: English (United Kingdom)\n" @@ -15,6 +15,100 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "objectclass %s not found" +msgid "realm not found\n" +msgstr "objectclass %s not found" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + #, c-format msgid "Out of memory!\n" msgstr "" @@ -267,100 +361,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -#| msgid "objectclass %s not found" -msgid "realm not found\n" -msgstr "objectclass %s not found" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - #, c-format msgid "cannot open configuration file %s\n" msgstr "" @@ -8932,6 +8932,101 @@ msgid "" "Establish bi-directional trust. By default trust is inbound one-way only." msgstr "" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "" "\n" "ID ranges\n" @@ -9144,101 +9239,6 @@ msgid "" " " msgstr "" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - msgid "Remove users that can manage this token." msgstr "" @@ -11459,161 +11459,20 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "Additional instructions:" +msgid "Results are truncated, try a more specific search" msgstr "" #, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" +msgid "Unknown option: %(option)s" msgstr "" -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." +msgid "Client version. Used to determine if server will accept request." msgstr "" -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" +msgid "any of the configured servers" msgstr "" -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." +msgid "Exceeded number of tries to forward a request." msgstr "" #, python-format @@ -11668,6 +11527,136 @@ msgstr "" msgid "No file to read" msgstr "" +msgid "incorrect type" +msgstr "" + +msgid "Only one value is allowed" +msgstr "" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +msgid "must be an integer" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +msgid "must be a certificate" +msgstr "" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, python-format +msgid "must be '%(value)s'" +msgstr "" + +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +msgid "must be datetime value" +msgstr "" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +msgid "must be DNS name" +msgstr "" + +msgid "must be absolute" +msgstr "" + +msgid "must be relative" +msgstr "" + +msgid "must be dictionary" +msgstr "" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + msgid "A dictionary representing an LDAP entry" msgstr "" @@ -11677,16 +11666,6 @@ msgstr "" msgid "All commands should at least have a result" msgstr "" -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" @@ -12044,148 +12023,161 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" -msgid "incorrect type" -msgstr "" - -msgid "Only one value is allowed" -msgstr "" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)s" +msgid "Additional instructions:" msgstr "" #, python-format msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." msgstr "" #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" msgstr "" #, python-format -msgid "must be at least %(minlength)d bytes" +msgid "'%(option)s' option is deprecated. %(additional_info)s" msgstr "" #, python-format -msgid "can be at most %(maxlength)d bytes" +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" msgstr "" #, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -msgid "must be a certificate" -msgstr "" - -msgid "must be a certificate signing request" +msgid "DNS server %(server)s: %(error)s." msgstr "" #, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "must be at least %(minlength)d characters" +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." msgstr "" #, python-format -msgid "can be at most %(maxlength)d characters" +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "must be exactly %(length)d characters" +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." msgstr "" #, python-format -msgid "The character %(char)r is not allowed." +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" msgstr "" #, python-format -msgid "must be '%(value)s'" +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." msgstr "" #, python-format -msgid "must be one of %(values)s" -msgstr "" - -msgid "must be datetime value" -msgstr "" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -msgid "must be relative" -msgstr "" - -msgid "must be dictionary" -msgstr "" - -msgid "must be Kerberos principal" +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." msgstr "" #, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" +msgid "'%(command)s' is deprecated. %(additional_info)s" msgstr "" #, python-format -msgid "%(filename)s: file not found" -msgstr "%(filename)s: file not found" - -#, python-brace-format -msgid "Unable to parse option {item}" +msgid "%(line)s" msgstr "" -msgid "any of the configured servers" +#, python-format +msgid "Search result has been truncated: %(reason)s" msgstr "" -msgid "Exceeded number of tries to forward a request." +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." msgstr "" msgid "Filename is empty" @@ -12287,6 +12279,18 @@ msgstr "" msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" +#, python-format +msgid "%(filename)s: file not found" +msgstr "%(filename)s: file not found" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "objectclass %s not found" + #, python-format msgid "Retrieving CA cert chain failed: %s" msgstr "Retrieving CA cert chain failed: %s" @@ -12303,10 +12307,6 @@ msgstr "Retrieving CA status failed: %s" msgid "Retrieving CA status failed with status %d" msgstr "Retrieving CA status failed with status %d" -#, python-format -msgid "objectclass %s not found" -msgstr "objectclass %s not found" - #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" @@ -12434,114 +12434,10 @@ msgid_plural "%(count)d automount keys matched" msgstr[0] "" msgstr[1] "" +#, python-format msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "" @@ -12765,20 +12661,4140 @@ msgstr "" msgid "%i CAs removed." msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(filename)s: file not found" +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(filename)s: file not found" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "objectclass %s not found" +msgid "Auto member rule: %s not found!" +msgstr "objectclass %s not found" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "" + +msgid "User Group" +msgstr "" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject" +msgstr "" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "%(filename)s: file not found" +msgid "{role}: role not found" +msgstr "%(filename)s: file not found" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Password Policy" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject email address" +msgstr "" + +msgid "Subject DNS name" +msgstr "" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +msgid "Subject IP Address" +msgstr "" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +msgid "Serial number (hex)" +msgstr "" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "" + +msgid "command" +msgstr "" + +msgid "commands" +msgstr "" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust type" +msgstr "" + +msgid "Trust status" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " msgstr "" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +msgid "Vault configuration" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "" + +msgid "Host Group" +msgstr "" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +msgid "hostgroup" +msgstr "" + +msgid "privileged hostgroup" +msgstr "" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +msgid "Location name" +msgstr "" + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +msgid "Servers" +msgstr "" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +msgid "IPA Server" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "A list of ACI values" +msgstr "" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" msgstr "" msgid "" @@ -13325,9 +17341,6 @@ msgstr "" msgid "Managedby permission" msgstr "" -msgid "DNS is not configured" -msgstr "" - msgid "cannot be used when a zone is specified" msgstr "" @@ -13547,1345 +17560,531 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, python-brace-format msgid "" -"\n" -"DNS server configuration\n" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." msgstr "" -msgid "" -"\n" -"Manipulate DNS server configuration\n" +msgid "Server does not support domain level functionality" msgstr "" -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" +msgid "Domain Level cannot be lowered." msgstr "" #, python-brace-format -msgid "Topology management requires minimum domain level {0} " +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." msgstr "" -msgid "segment" +msgid "" +"\n" +"API Schema\n" msgstr "" -msgid "segments" +msgid "" +"\n" +"Provides API introspection capabilities.\n" msgstr "" -msgid "Topology Segments" +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" msgstr "" -msgid "Topology Segment" +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" msgstr "" #, python-format -msgid "left node is not a topology node: %(leftnode)s" +msgid "Results should contain primary key attribute only (\"%s\")" msgstr "" -#, python-format -msgid "right node is not a topology node: %(rightnode)s" +msgid "Help topic" msgstr "" -msgid "left node and right node must not be the same" +msgid "Version" msgstr "" -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" +msgid "Parameters" msgstr "" -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" +msgid "Method of" msgstr "" -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "" - -msgid "Host Group" -msgstr "" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -msgid "hostgroup" -msgstr "" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" +msgid "Method name" msgstr "" #, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" +#| msgid "%(filename)s: file not found" +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(filename)s: file not found" -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgid "Display information about a command." msgstr "" -#, python-format -msgid "Modified vault \"%(value)s\"" +msgid "Search for commands." msgstr "" -msgid "Vault configuration" +msgid "Return command defaults" msgstr "" -msgid "IPA KRA servers" +msgid "Display information about a class." msgstr "" -msgid "IPA servers configured as key recovery agents" +msgid "Search for classes." msgstr "" -#, python-format -msgid "Archived data into vault \"%(value)s\"" +msgid "Display information about a help topic." msgstr "" -msgid "Retrieve data from a vault." +msgid "Search for help topics." msgstr "" -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" +msgid "Required" msgstr "" -msgid "No archived data." +msgid "Multi-value" msgstr "" -msgid "Checks if any of the servers has the KRA service enabled" +msgid "Always ask" msgstr "" -msgid "netgroups" +msgid "CLI metavar" msgstr "" -msgid "Netgroups" +msgid "CLI name" msgstr "" -msgid "Netgroup" +msgid "Confirm (password)" msgstr "" -#, python-format -msgid "Added netgroup \"%(value)s\"" +msgid "Default" msgstr "" -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" +msgid "Default from" msgstr "" -#, python-format -msgid "Deleted netgroup \"%(value)s\"" +msgid "Label" msgstr "" -#, python-format -msgid "Modified netgroup \"%(value)s\"" +msgid "Convert on server" msgstr "" -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "One time password commands" +msgid "Option group" msgstr "" -msgid "OTP configuration options" +msgid "Sensitive" msgstr "" -msgid "OTP Configuration" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" +msgid "Positional argument" msgstr "" #, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" +#| msgid "objectclass %s not found" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "objectclass %s not found" -msgid "" -"\n" -"RADIUS Proxy Servers\n" +msgid "Display information about a command parameter." msgstr "" -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" +msgid "Search command parameters." msgstr "" #, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" +#| msgid "%(filename)s: file not found" +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(filename)s: file not found" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" #, python-format -msgid "Renamed ACI to \"%(value)s\"" +msgid "container entry (%(container)s) not found" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(filename)s: file not found" +msgid "%(parent)s: %(oname)s not found" +msgstr "%(filename)s: file not found" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." msgstr "" msgid "" "\n" -"Server configuration\n" +"Simulate use of Host-based access controls\n" "\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"NOTES:\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" "\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" "\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" +" --user, --host, and --service are mandatory, others are optional.\n" "\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" "\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" -msgid "must be at least 10" +msgid "Unresolved rules in --rules" msgstr "" -msgid "configuration options" +#, python-format +msgid "Access granted: %s" msgstr "" -msgid "Configuration" +msgid "ID View" msgstr "" -msgid "Maximum hostname length" +msgid "system ID View" msgstr "" -msgid "IPA masters" +msgid "ID Views" msgstr "" -msgid "List of all IPA masters" +msgid "User object overrides" msgstr "" -msgid "Hidden IPA masters" +msgid "Group object overrides" msgstr "" -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" +msgid "Hosts the view applies to" msgstr "" msgid "Domain resolution order" @@ -14894,229 +18093,178 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Empty domain is not allowed" +#, python-format +msgid "Added ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" +msgid "Deleted ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Server has no information about domain '%(domain)s'" +msgid "Modified an ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Disabled domain '%(domain)s' is not allowed" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" msgstr "" -msgid "The group doesn't exist" +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" msgstr "" #, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" +msgid "ID View applied to %i host." msgstr "" #, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" +msgid "ID View applied to %i hosts." msgstr "" #, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgid "ID View cleared from %i host." msgstr "" -msgid "SELinux user map default user not in order list" +#, python-format +msgid "ID View cleared from %i hosts." msgstr "" msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" -msgid "groups" +msgid "IPA object" msgstr "" -msgid "User Group" +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" msgstr "" #, python-format -msgid "Added group \"%(value)s\"" +msgid "Anchor '%(anchor)s' could not be resolved." msgstr "" -msgid "gid cannot be set for external group" +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." msgstr "" #, python-format -msgid "Deleted group \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" msgstr "" -msgid "privileged group" +msgid "Delete an ID override." msgstr "" #, python-format -msgid "Modified group \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." msgstr "" #, fuzzy, python-format #| msgid "%(count)d variables" -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" msgstr[0] "%(count)d variables" msgstr[1] "%(count)d variables" -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgid "Display information about an ID override." msgstr "" -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" msgstr "" #, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "Added certificates to idoverrideuser \"%(value)s\"" msgstr "" -msgid "not allowed to modify user entries" +msgid "Remove one or more certificates to the idoverrideuser entry" msgstr "" -msgid "not allowed to modify group entries" +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" msgstr "" -msgid "Not a managed group" +#, python-format +msgid "Added User ID override \"%(value)s\"" msgstr "" -msgid "Add users that can manage members of this group." +#, python-format +msgid "Deleted User ID override \"%(value)s\"" msgstr "" -msgid "Remove users that can manage members of this group." +#, python-format +msgid "Modified an User ID override \"%(value)s\"" msgstr "" +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" "Permissions\n" @@ -15337,1224 +18485,36 @@ msgid_plural "%(count)d permissions matched" msgstr[0] "" msgstr[1] "" -msgid "" -"\n" -"OTP Tokens\n" +msgid "delegation" msgstr "" -msgid "" -"\n" -"Manage OTP tokens.\n" +msgid "delegations" msgstr "" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" +msgid "Delegations" msgstr "" -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" +msgid "Delegation" msgstr "" #, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" +msgid "Added delegation \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted OTP token \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" msgstr "" #, python-format -msgid "Modified OTP token \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "" msgstr[1] "" -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -msgid "command" -msgstr "" - -msgid "commands" -msgstr "" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -msgid "Location name" -msgstr "" - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -msgid "Servers" -msgstr "" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -msgid "IPA Server" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Version" -msgstr "" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -msgid "Method name" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(filename)s: file not found" -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(filename)s: file not found" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -msgid "CLI name" -msgstr "" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, fuzzy, python-format -#| msgid "objectclass %s not found" -msgid "%(metaobject)s: %(oname)s not found" -msgstr "objectclass %s not found" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, fuzzy, python-format -#| msgid "%(filename)s: file not found" -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(filename)s: file not found" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "IPA role name" -msgstr "" - msgid "HBAC rule and local members cannot both be set" msgstr "" @@ -16618,975 +18578,188 @@ msgstr "" msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "" -#, fuzzy, python-brace-format -#| msgid "%(filename)s: file not found" -msgid "{role}: role not found" -msgstr "%(filename)s: file not found" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "pyhbac is not installed." +msgid "" +"\n" +"IPA servers\n" msgstr "" msgid "" "\n" -"IPA certificate operations\n" +"Get information about installed IPA servers.\n" msgstr "" msgid "" "\n" -"Implements a set of commands for managing server SSL certificates.\n" +" Find all servers:\n" +" ipa server-find\n" msgstr "" msgid "" "\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" msgstr "" -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" +msgid "server" msgstr "" -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" +msgid "servers" msgstr "" -msgid "" -"\n" -"In order to request a certificate:\n" +msgid "IPA Servers" msgstr "" -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" +msgid "Server location" msgstr "" -msgid "" -"\n" -"SEARCHING:\n" +msgid "Service weight" msgstr "" -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" +msgid "Weight for server services" msgstr "" -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" +msgid "Service relative weight" msgstr "" -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" +msgid "Relative weight for server services (counts per location)" msgstr "" -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" +msgid "Enabled server roles" msgstr "" -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgid "List of enabled roles" msgstr "" -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" +msgid "Modify information about an IPA server." msgstr "" #, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgid "Modified IPA server \"%(value)s\"" msgstr "" #, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "Subject" -msgstr "" - -msgid "Subject email address" -msgstr "" - -msgid "Subject DNS name" -msgstr "" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -msgid "Subject IP Address" -msgstr "" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -msgid "Issuer" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Serial number (hex)" -msgstr "" - -msgid "Request status" -msgstr "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" msgstr[0] "" msgstr[1] "" #, python-format -msgid "Search for certificates with these owner %s." +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" msgstr "" #, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" #, python-format -msgid "Added ID View \"%(value)s\"" +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" msgstr "" #, python-format -msgid "Deleted ID View \"%(value)s\"" +msgid "Failed to remove server %(master)s from server list: %(err)s" msgstr "" #, python-format -msgid "Modified an ID View \"%(value)s\"" +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" msgstr "" #, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" +msgid "Failed to cleanup server principals/keys: %(err)s" msgstr "" #, python-format -msgid "ID View applied to %i host." +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" msgstr "" #, python-format -msgid "ID View applied to %i hosts." +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +msgid "Server state" msgstr "" #, python-format -msgid "ID View cleared from %i host." +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." msgstr "" #, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Auto Membership Rule.\n" +msgid "Cannot hide last enabled %(name)s server." msgstr "" msgid "" "\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(filename)s: file not found" -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(filename)s: file not found" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "objectclass %s not found" -msgid "Auto member rule: %s not found!" -msgstr "objectclass %s not found" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" +"Session Support for IPA\n" msgstr "" msgid "" @@ -17758,6 +18931,851 @@ msgstr "" msgid "Enabled CA \"%(value)s\"" msgstr "" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + msgid "Internationalization messages" msgstr "" @@ -18816,12 +20834,6 @@ msgstr "" msgid "REVOKED" msgstr "" -msgid "Serial Number" -msgstr "" - -msgid "Serial Number (hex)" -msgstr "" - msgid "SHA1 Fingerprint" msgstr "" @@ -18874,9 +20886,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -msgid "Certificate mapping data" -msgstr "" - msgid "Configuration string" msgstr "" @@ -19599,9 +21608,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "" - msgid "Netgroup Settings" msgstr "" @@ -19717,9 +21723,6 @@ msgstr "" msgid "Add password policy" msgstr "" -msgid "Password Policy" -msgstr "" - msgid "Remove password policies" msgstr "" @@ -20171,15 +22174,6 @@ msgstr "" msgid "Remove domains" msgstr "" -msgid "Trust direction" -msgstr "" - -msgid "Trust status" -msgstr "" - -msgid "Trust type" -msgstr "" - msgid "Alternative UPN suffixes" msgstr "" @@ -20710,9 +22704,6 @@ msgstr "" msgid "Topology" msgstr "" -msgid "Trusts" -msgstr "" - msgid "True" msgstr "" @@ -20815,1400 +22806,6 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -msgid "IPA Servers" -msgstr "" - -msgid "Server location" -msgstr "" - -msgid "Service weight" -msgstr "" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -msgid "Server state" -msgstr "" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -msgid "Password Policies" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -22375,629 +22972,36 @@ msgstr "" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "" -msgid "delegation" +msgid "self service permission" msgstr "" -msgid "delegations" +msgid "self service permissions" msgstr "" -msgid "Delegations" +msgid "Self Service Permissions" msgstr "" -msgid "Delegation" +msgid "Self Service Permission" msgstr "" #, python-format -msgid "Added delegation \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted delegation \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "Modified delegation \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" msgstr[0] "" msgstr[1] "" -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(filename)s: file not found" -msgid "%(parent)s: %(oname)s not found" -msgstr "%(filename)s: file not found" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - #, python-format msgid "all masters must have %(role)s role enabled" msgstr "" @@ -23177,25 +23181,6 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - msgid "Request must be a dict" msgstr "" @@ -23217,6 +23202,25 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #, python-format msgid "must equal %r" msgstr "" diff --git a/po/es.po b/po/es.po index 2a628514b..9d0678610 100644 --- a/po/es.po +++ b/po/es.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2020-09-25 15:29+0000\n" "Last-Translator: Emilio Herrera \n" "Language-Team: Spanish to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "grupos" + +msgid "User Group" +msgstr "Grupo Usuario" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Ha sido agregado el grupo \"%(value)s\"" + +msgid "gid cannot be set for external group" +msgstr "gid no puede ser fijado para un grupo externo" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Ha sido eliminado el grupo \"%(value)s\"" + +msgid "privileged group" +msgstr "grupo privilegiado" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Ha sido modificado el grupo \"%(value)s\"" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d grupo coincidente" +msgstr[1] "%(count)d grupos coincidentes" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"No se puede llevar a cabo la validación del miembro externo sin el soporte " +"para Samba 4 instalado. Asegúrese de que tiene instalado el sub-paquete " +"server-trust-ad de IPA en el servidor" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" +"No puede llevar a cabo la operación de unión si el dominio propio " +"configurado. Asegúrese primero que está corriendo ipa-adtrust-install sobre " +"el servidor IPA" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Ha sido desasociado el grupo \"%(value)s\" del usuario \"%(value)s\"" + +msgid "not allowed to modify user entries" +msgstr "no se permite modificar las entradas de los usuarios" + +msgid "not allowed to modify group entries" +msgstr "no se permite modificar las entradas de los grupos" + +msgid "Not a managed group" +msgstr "No es un grupo administrado" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this group." +msgstr "Añadir usuarios que pueden manejar esta ficha." + +#, fuzzy +#| msgid "Remove users that can manage this token." +msgid "Remove users that can manage members of this group." +msgstr "Quitar usuarios que puedan manejar esta ficha." + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" +"\n" +"Configuración del servidor DNS\n" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" +"\n" +"Manipular la configuración del servidor DNS\n" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" +"\n" +" Mostar la configuración de un servidor DNS especifico:\n" +" ipa dnsserver-show\n" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" +"\n" +" Actualizar la configuración de un servidor DNS especifico:\n" +" ipa dnsserver-mod\n" + +msgid "DNS server" +msgstr "Servidor DNS" + +msgid "DNS servers" +msgstr "Servidores DNS" + +#, fuzzy +#| msgid "DNS servers" +msgid "DNS Servers" +msgstr "Servidores DNS" + +#, fuzzy +#| msgid "DNS server" +msgid "DNS Server" +msgstr "Servidor DNS" + +#, fuzzy +#| msgid "Server name" +msgid "DNS Server name" +msgstr "Nombre del servidor" + +msgid "SOA mname override" +msgstr "" + +#, fuzzy +#| msgid "Authoritative nameserver domain name" +msgid "SOA mname (authoritative server) override" +msgstr "Nombre de dominio servidor de nombre autorizado" + +#, fuzzy +#| msgid "Zone forwarders" +msgid "Forwarders" +msgstr "Zona de expedidores" + +#, fuzzy +#| msgid "" +#| "Per-zone forwarders. A custom port can be specified for each forwarder " +#| "using a standard format \"IP_ADDRESS port PORT\"" +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Expedidores por zona. Se puede especificar un puerto personalizado para cada " +"exedidor usando el formato estándar \"IP_ADDRESS port PORT\"" + +#, fuzzy +#| msgid "" +#| "Per-zone conditional forwarding policy. Set to \"none\" to disable " +#| "forwarding to global forwarder for this zone. In that case, conditional " +#| "zone forwarders are disregarded." +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" +"Política de envío condicional por zona. Se establece a \"none\" para " +"deshabilitar el envío a expedidores globales para esta zona. En este caso, " +"la zona condicional de expedidores es ignorada." + +msgid "DNS is not configured" +msgstr "DNS no está configurado" + +#, fuzzy +#| msgid "" +#| "\n" +#| "DNS server configuration\n" +msgid "Modify DNS server configuration" +msgstr "" +"\n" +"Configuración del servidor DNS\n" + +#, fuzzy, python-format +#| msgid "Modified IPA server \"%(value)s\"" +msgid "Modified DNS server \"%(value)s\"" +msgstr "Modificado servidor IPA \"%(value)s\"" + +#, fuzzy +#| msgid "Search for IPA servers." +msgid "Search for DNS servers." +msgstr "Buscar servidores IPA." + +#, fuzzy, python-format +#| msgid "%(count)d IPA server matched" +#| msgid_plural "%(count)d IPA servers matched" +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "%(count)d servidor IPA coincide" +msgstr[1] "%(count)d servidores IPA coinciden" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA DNS Server is not installed" +msgstr "Servidor de IPA a utilizar" + +#, fuzzy +#| msgid "Display information about a RADIUS proxy server." +msgid "Display configuration of a DNS server." +msgstr "Muestra información sobre un servidor proxy RADIUS." + +#, fuzzy +#| msgid "Add a new SMB service." +msgid "Add a new DNS server." +msgstr "Añadir un nuevo servicio SMB." + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "Ha sido agregado el servicio \"%(value)s\"" + +#, fuzzy +#| msgid "Delete IPA server." +msgid "Delete a DNS server" +msgstr "Eliminar servidor IPA." + +#, fuzzy, python-format +#| msgid "Deleted IPA server \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Eliminado servidor IPA \"%(value)s\"" + +msgid "Host-based access control commands" +msgstr "Comandos de control de acceso basado en host" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" +"\n" +"Servicios de HBAC\n" +"\n" +"Los servicios PAM a los que HBAC puede controlar el acceso. El nombre " +"utilizado aquí debe coincidir\n" +"con el nombre del servicio que PAM está evaluando.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Añadir un nuevo servicio:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modificar un servicio de HBAC:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Buscar servicios para HBAC. Este ejemplo retornará dos resultados, el " +"servicio FTP\n" +" y el servicio recién añadido tftp:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Borrar un servicio de HBAC:\n" +" ipa hbacsvc-del tftp\n" +"\n" + +msgid "HBAC services" +msgstr "Servicios HBAC" + +msgid "HBAC Services" +msgstr "Servicios HBAC" + +msgid "HBAC Service" +msgstr "Servicio HBAC" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "Servicio de HBAC \"%(value)s\" añadido" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Suprimido el servicio HBAC \"%(value)s\"" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr " Servicio modificado HBAC \"%(value)s\"" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "Servicio HBAC %(count)d coincidente" +msgstr[1] "Servicios HBAC %(count)d coincidentes" + +msgid "HBAC service group" +msgstr "Grupo de servicio HBAC" + +msgid "HBAC service groups" +msgstr "Grupos de servicio HBAC" + +msgid "HBAC Service Groups" +msgstr "Grupos de Servicios HBAC" + +msgid "HBAC Service Group" +msgstr "Grupo de Servicio HBAC" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Agregado servicio de grupo HBAC \"%(value)s\"" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr " Suprimido el servicio HBAC grupo \"%(value)s\"" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "Servicio modificado HBAC grupo \"%(value)s\"" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "%(count)d grupo de servicio HBAC coincidente" +msgstr[1] "%(count)d grupos de servicio HBAC coincidentes" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be TRUE or FALSE" +msgstr "debe ser True o False" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "Principal alias" +msgstr "Alias principal" + +#, fuzzy +#| msgid "Password expiration" +msgid "User password expiration" +msgstr "Caducidad de la contraseña" + +msgid "SSH public key fingerprint" +msgstr "Huella digital de clave pública SSH" + +msgid "Base-64 encoded user certificate" +msgstr "Certificado de usuario codificado en Base-64" + +#, fuzzy +#| msgid "Certificate chain" +msgid "Certificate mapping data" +msgstr "Cadena de certificado" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +#, fuzzy +#| msgid "Home directory" +msgid "SMB Home Directory" +msgstr "Directorio principal" + +#, fuzzy +#| msgid "Home directory base" +msgid "SMB Home Directory Drive" +msgstr "Base del directorio principal" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "Administrador %(manager)s no encontrado" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "puede ser a lo sumo%(len)d caracteres" + +msgid "Issuer" +msgstr "Emisor" + +#, fuzzy +#| msgid "file to store certificate in" +msgid "Issuer of the certificate" +msgstr "archivo para almacenar" + +msgid "Subject" +msgstr "Asunto" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Subject of the certificate" +msgstr "debe ser un certificado" + +#, fuzzy +#| msgid "cannot be empty" +msgid "cannot have an empty subject" +msgstr "no puede estar vacío" + +#, fuzzy +#| msgid "cannot specify both raw certificate and file" +msgid "cannot specify both subject/issuer and certificate" +msgstr "no puede especificar un certificado RAW y un archivo" + +#, fuzzy +#| msgid "cannot specify both raw certificate and file" +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "no puede especificar un certificado RAW y un archivo" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "Añade uno o más mapeados de certificados a la entrada de usuario." + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "Añadidos certificados al usuario \"%(value)s\"" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "Borra uno o más mapeados de certificados de la entrada de usuario." + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "Certificados borrados del usuario \"%(value)s\"" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "{role}: role not found" +msgstr "{role}: rol no encontrado" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "{attr}: no existe tal atributo" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" msgstr "" +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Find all servers:\n" +#| " ipa server-find\n" +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +" Encuentra todos los servidores:\n" +" ipa server-find\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Find all servers:\n" +#| " ipa server-find\n" +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" +"\n" +" Encuentra todos los servidores:\n" +" ipa server-find\n" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "%(count)d equipo coincidente" +msgstr[1] "%(count)d equipos coincidentes" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added segment \"%(value)s\"" +msgstr "Ha sido agregado el equipo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted segment \"%(value)s\"" +msgstr "Ha sido eliminado el equipo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified segment \"%(value)s\"" +msgstr "Ha sido modificado el equipo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Found '%(value)s'" +msgid "%(value)s" +msgstr "Ha sido encontrado '%(value)s'" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, fuzzy +#| msgid "UPN suffixes" +msgid "suffixes" +msgstr "Sufijos UPN" + +#, fuzzy +#| msgid "UPN suffixes" +msgid "Topology suffixes" +msgstr "Sufijos UPN" + +msgid "Topology suffix" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d profile matched" +#| msgid_plural "%(count)d profiles matched" +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "%(count)d perfil coincidente" +msgstr[1] "%(count)d perfiles coincidentes" + +#, fuzzy, python-format +#| msgid "Deleted profile \"%(value)s\"" +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Perfil borrado \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "Ha sido agregado el equipo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Ha sido modificado el equipo \"%(value)s\"" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" +"\n" +"Migración a IPA\n" +"\n" +"Migrar usuarios y grupos desde un servidor LDAP a IPA.\n" +"\n" +"Esto lleva a cabo una consulta LDAP contra el servidor remoto buscando \n" +"usuarios y grupos en un contenedor. Con el objetivo de migrar las " +"contraseñas\n" +"usted necesita enlazar como un usuario que pueda leer el atributo " +"userPassword\n" +"sobre el servidor remoto. Esto normalmente está restringido a " +"administradores de\n" +"alto nivel como cn=Directory Manager en 389-ds (este es el usuario de enlace " +"por defecto).\n" +"\n" +"El contenedor de usuario por defecto es ou=People.\n" +"\n" +"El contenedor de grupo por defecto es ou=Groups.\n" +"\n" +"Los usuarios y grupos que ya existen en el servidor IPA son saltados.\n" +"\n" +"Dos esquemas LDAP definen como se almacenan los miembros del grupo:\n" +"RFC2307 y RFC2307bis. RFC2307bis usa miembro y miembro único para\n" +"especificar los miembros del grupo. RFC2307 usa memberUid. El esquema por " +"defecto es RFC2307bis.\n" +"\n" +"La característica de compatibilidad de esquema permite a IPA reformatear " +"datos\n" +"para sistemas que no soportan RFC2307bis. Se recomienda deshabilitar esta\n" +"característica durante la migración para reducir la sobrecarga del sistema. " +"Puede\n" +"ser rehabilitado después de la migración. Para migrar con esto habilitado " +"use la opción \"--with-compat\".\n" +"\n" +"Los usuarios migrados no tienen credenciales Kerberos, solo tienen su " +"contraseña\n" +"LDAP. Para completar el proceso de migración los usuarios necesitan ir a\n" +"to http://ipa.example.com/ipa/migration y autenticar usando su contraseña " +"LDAP\n" +" con el objetivo de generar sus credenciales Kerberos.\n" +"\n" +"La migración está deshabilitada por defecto. Use el comando ips config-mod " +"para\n" +" habilitarla:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"Si no se ha suministrado una base DN con –basedn IPA usará en su lugar el " +"valor\n" +"de defaultNamingContext si se ha establecido o el primer valor establecido " +"en\n" +"namingContexts en la raíz el servidor LDAP remoto.\n" +"\n" +"Los usuarios son añadidos como miembros del grupo de usuarios " +"predeterminado.\n" +"Esta puede ser una tarea que consuma mucho tiempo de modo que durante la\n" +"migración se hace por lotes para cada 100 usuarios. Como resultado habrá una " +"ventana en la que los usuarios se añadirán a IPA pero no serán miembros del\n" +"grupo de usuario predeterminado.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" La migración más sencilla, aceptando todo lo predeterminado:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Especificar el contenedor de usuario y grupo. Esto se puede usar para " +"migrar datos\n" +" de usuario y grupo desde un servidor IPA v1:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +"Puesto que el servidor IPA v2 ya contiene grupos predefinidos que pueden " +"chocar\n" +"con los grupos en servidor migrado (IPA v1) (por ejemplo admins, ipausers), " +"los\n" +"usuarios que tengan un grupo que choque con su grupo primario puede suceder\n" +"que pertenezcan a un grupo desconocido sobre el nuevo servidor IPA v2\n" +"Use la opción --group-overwrite-gid para sobreescribir la GID de los grupos " +"ya\n" +"existentes y evitar esta cuestión:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +"Los usuarios o grupos migrados pueden tener objetos clase y atributos\n" +"acompañantes desconocidos por el servidor IPS v2. Estos objetos clase y " +"atributos\n" +"pueden ser dejados fuera durante el proceso de migración:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"REGISTRO\n" +"\n" +"La migración registrará alarmas y errores en el registro de error Apache. " +"Este\n" +"fichero debería ser evaluado después de la migración para corregir o " +"investigar\n" +"cualquier cuestión que se descubra.\n" +"\n" +"Por cada 100 usuarios migrados y mensaje de nivel informativo será mostrado\n" +"dando el progreso actual y l duración para hacer posible rastrear el " +"progreso de la\n" +"migración.\n" +"\n" +"Si el nivel de registro es depuración, bien porque se haya fijado debug = " +"True en\n" +"etcipa/default.conf o etcipa/server.conf, se añadirá una entrada por cada " +"usuario\n" +"añadido más un resumen cuando el grupo de usuario predeterminado se haya\n" +"actualizado.\n" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" +"El principal %s de Kerberos ya existe. Utilice 'ipa user-mod' para definirlo " +"manualmente." + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" +"Incapaz de determinar si el principal Kerberos %s ya existe. Use 'ipa user-" +"mod' para establecerlo manualmente." + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" +"Falló al intenatar agregar al usuario al grupo predeterminado. Utilice 'ipa " +"group-add-member' para agregarlo manualmente. " + +msgid "Migration of LDAP search reference is not supported." +msgstr "Migración de búsqueda de referencia LDAP no está soportada." + +msgid "Malformed DN" +msgstr "DN Malformado" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "%(user)s no es un usuario POSIX" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" +". Comprobar GID del grupo existente. Use la opción --group-overwrite-gid " +"para anular la GID" + +msgid "Invalid LDAP URI." +msgstr " URI LDAP no válida." + +#, python-format +msgid "%s to exclude from migration" +msgstr "%s a excluir desde la migración" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" +"los resultados de la búsqueda de los objetos que se van a migrar se han " +"truncado por el servidor; el proceso de migración puede estar incompleto\n" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" +"%(container)s búsqueda LDAP no devolvió ningún resultado (buscar base: " +"%(search_base)s, objectclass: %(objectclass)s)" + +msgid "Default group for new users not found" +msgstr "Grupo predeterminado para nuevos usuarios no encontrado" + +msgid "netgroups" +msgstr "grupos de red" + +msgid "Netgroups" +msgstr "Grupos de red" + +msgid "Netgroup" +msgstr "Grupo de red" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "\"%(value)s\"netgroup añadido" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"grupo de host con nombre “%s” ya existe. Los grupos de nombres y los grupos " +"de red comparten un espacio de nombre común" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "%(value)s\" de netgroup eliminados" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "netgroup modificado \"%(value)s\"" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "%(count)d autoservicio coincidente" +msgstr[1] "%(count)d autoservicios coincidentes" + +msgid "One time password commands" +msgstr "Comandos de contraseña de una vez" + +msgid "OTP configuration options" +msgstr "Opciones de configuración OTP" + +msgid "OTP Configuration" +msgstr "Configuración OTP" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Cambio de contraseña para \"%(value)s\"" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" +"\n" +"Herramientas de informe de estados de características Kerberos PKINIT.\n" +"\n" +"Informa de los másters IPA sobre los cuales Kerberos PKINIT está habilitado " +"o deshabilitado\n" +"\n" +"EJEMPLOS:\n" +" Lista el estado PKINIT sobre todos los másters:\n" +" ipa pkinit-status\n" +"\n" +" Comprueba el estado PKINIT sobre `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" Lista todos los másters IPA con PKINIT deshabilitado:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"Para más información sobre soporte PKINIT vea:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" + +msgid "pkinit" +msgstr "pkinit" + +msgid "PKINIT" +msgstr "" +" Los certificados de entrada deben estar codificados en DER. \n" +" Tenga en cuenta que no puede ser un normalizador en la Param, ya que " +"solamente las variables de \n" +" Unicode se normalizan.\n" +" " + +msgid "PKINIT status" +msgstr "Estado PKINIT" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "Sí PKINIT está habilitado o deshabilitado" + +msgid "Report PKINIT status on the IPA masters" +msgstr "Informa el estado PKINIT sobre los másters IPA" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)s servidor coincide" +msgstr[1] "%(count)s servidores coinciden" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" +"\n" +"Servidores Proxy RADIUS\n" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" +"\n" +"Gestionar Servidores Proxy RADIUS.\n" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" +"\n" +"IPA soporta el uso de servidores proxy RADIUS externos para autenticaciones " +"krb5\n" +"OTP. Esto permite una gran oferta de flexibilidad cuando se integra con " +"servicios de \n" +"autenticación de tercera parte.\n" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" +"\n" +" Añadir un nuevo servidor:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" +"\n" +" Encontrar todos los servidores cuyas entradas incluyan la cadena \"example." +"com\":\n" +" ipa radiusproxy-find example.com\n" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" +"\n" +" Examinar la configuración:\n" +" ipa radiusproxy-show MyRADIUS\n" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" +"\n" +" Cambiar el secreto:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" +"\n" +" Borrar una configuración:\n" +" ipa radiusproxy-del MyRADIUS\n" + +msgid "invalid attribute name" +msgstr "nombre de atributo no válido" + +msgid "invalid port number" +msgstr "número de puerto no válido" + +msgid "RADIUS proxy server" +msgstr "Servidor proxy RADIUS" + +msgid "RADIUS proxy servers" +msgstr "Servidores proxy RADIUS" + +msgid "RADIUS Servers" +msgstr "Servidores RADIUS" + +msgid "RADIUS Server" +msgstr "Servidor RADIUS" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "Añadido servidor proxy RADIUS \"%(value)s\"" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "Borrado servidor proxy RADIUS \"%(value)s\"" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "Modificado servidor proxy RADIUS \"%(value)s\"" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "%(count)d servidor proxy RADIUS coincidente" +msgstr[1] "%(count)d servidores proxy RADIUS coincidentes" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "Privilegio" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "Privilegio añadido \"%(value)s\"" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "Privilegio eliminado \"%(value)s \"" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "Privilegio modificado \"%(value)s \"" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d privilegio coincidente" +msgstr[1] "%(count)d privilegios coincidentes" + +msgid "Class of Service object used for linking policies with groups" +msgstr "Objeto Class of Service enlazando políticas con grupos" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" +"la prioridad debe ser un valor único (%(prio)d que ya esté siendo utilizado " +"por %(gname)s)" + +msgid "Add Class of Service entry" +msgstr "Añadir entrada Class of Service" + +msgid "Delete Class of Service entry" +msgstr "Borrar entrada Class of Service" + +msgid "Modify Class of Service entry" +msgstr "Modificar entrada Class of Service" + +msgid "Display Class of Service entry" +msgstr "Visualizar entrada Class of Service" + +msgid "Search for Class of Service entry" +msgstr "Búsqueda de entrada Class of Service" + +msgid "password policy" +msgstr "política de contraseña" + +msgid "password policies" +msgstr "políticas de contraseña" + +msgid "Password Policies" +msgstr "Políticas de Contraseña" + +msgid "Password Policy" +msgstr "Directiva de contraseñas" + +#, fuzzy +#| msgid "Max renew" +msgid "Max repeat" +msgstr "Renovación máxima" + +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of same consecutive characters" +msgstr "Cantidad máxima de entradas obtenidas" + +#, fuzzy +#| msgid "Max renew" +msgid "Max sequence" +msgstr "Renovación máxima" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "Nombre de usuario" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "La duración máxima de la contraseña debe ser mayor que la mínima." + +msgid "cannot delete global password policy" +msgstr "no puede borrar la Política global de contraseña" + +msgid "priority cannot be set on global policy" +msgstr "la prioridad no puede ser definida en una plítica global" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" +"\n" +"Dominios de reino\n" +"\n" +"Gestiona la lista de dominios asociados con el reino IPA.\n" +"\n" +"Esta lista es útil para los Controladores de Dominio de otros reinos que " +"tienen\n" +"establecida confianza con este reino IPA. Necesitan la información para " +"saber que \n" +"peticiones deberían ser reenviadas a KDC de este reino IPA.\n" +"\n" +"Gestión automática: se añade un dominio automáticamente a la lista de " +"dominios\n" +"cuando se crea una nueva Zona DNS gestionada por IPA. Lo mismo se aplica " +"para el borrado.\n" +"\n" +"DNS extermanete gestionado: los dominios que no son gestionados en el " +"servidor\n" +"IPA DNA necesitan ser añadidos manualmente a la lista usando el comando ipa " +"realmdomains-mod command.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Muestra la lista actual de dominios reino:\n" +" ipa realmdomains-show\n" +"\n" +" Reemplaza la lista de dominios reino:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Añade un dominio a la lista de dominios reino:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Borra un dominio de la lista de dominios reino:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" + +msgid "Realm domains" +msgstr "Dominios reino" + +msgid "Realm Domains" +msgstr "Dominios Reino" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" +"\n" +" Modificar dominios reino\n" +"\n" +" Comprobación DNS: Cuando añade manualmente un dominio a la lista, por\n" +" defecto se lleva a cabo una comprobación DNS. Asegura que el dominio " +"está\n" +" asociado con el reino IPA, comprobando si el dominio tiene un registro " +"_kerberos\n" +" TXT que contenga el nombre del reino IPA realm name. Esta comprobación " +"se\n" +" puede saltar especificando la opción --force.\n" +"\n" +" Eliminación: cuando un dominio reino que tiene una zona DNS coincidente\n" +" gestionada por IPA se borra, el registro _kerberos TXT correspondiente " +"en la\n" +" es borrado automáticamente también. Los demás registros en la zona o la " +"zona\n" +" no son afectados.\n" +" " + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" +"La zona DNS para cada realmdomain debe contener registros SOA o NS. No se " +"han encontrado registros para: %s" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "Los siguientes dominio no pertenecen a este reino: %(domains)s" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" +"El reino de los siguientes dominios podrían no ser detectados: %(domains)s. " +"Si estos dominios pertenecen a este reino, cree por favor un registro " +"_kerberos TXT que contenga \"%(realm)s\" en cada uno." + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" +"La opción --domain no puede ser usada junto con --add-domain o --del-domain. " +"Use --domain para especificar explícitamente la lista de todo el dominio, " +"para añadir/borrar dominios concretos, use --add-domain/del-domain." + +msgid "IPA server domain cannot be omitted" +msgstr "Servidor de domino IPA no puede ser omitido" + +msgid "IPA server domain cannot be deleted" +msgstr "Servidor de dominio IPA no puede ser borrado" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +#, fuzzy +#| msgid "Allowed to create keytab" +msgid "Allowed to Impersonate" +msgstr "Permitido crear tabla de teclas" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Member principals" +msgstr "Principal kerberos" + +#, fuzzy, python-format +#| msgid "Malformed principal: '%(value)s'" +msgid "Malformed principal: %(error)s" +msgstr "Principal mal construido: '%(value)s'" + +#, fuzzy +#| msgid "Add a new delegation." +msgid "Add target to a named service delegation." +msgstr "Añadir una nueva delegación." + +#, python-format +msgid "member %s" +msgstr "miembro %s" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove member from a named service delegation." +msgstr "Borrar miembros de un grupo de servicio HBAC." + +#, fuzzy +#| msgid "member service delegation target" +msgid "service delegation rule" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "member service delegation target" +msgid "service delegation rules" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "member service delegation target" +msgid "Service delegation rules" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "member service delegation target" +msgid "Service delegation rule" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy, python-format +#| msgid "Added delegation \"%(value)s\"" +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Delegación añadida \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted delegation \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Delegación eliminada \"%(value)s\"" + +#, fuzzy +#| msgid "member service delegation target" +msgid "privileged service delegation rule" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy, python-format +#| msgid "%(count)d delegation matched" +#| msgid_plural "%(count)d delegations matched" +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "%(count)d delegación coincidente" +msgstr[1] "%(count)d delegaciones coincidentes" + +#, fuzzy +#| msgid "member service delegation target" +msgid "service delegation target" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "member service delegation target" +msgid "service delegation targets" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "member service delegation target" +msgid "Service delegation targets" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "member service delegation target" +msgid "Service delegation target" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy, python-format +#| msgid "Added delegation \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "Delegación añadida \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted delegation \"%(value)s\"" +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Delegación eliminada \"%(value)s\"" + +#, fuzzy +#| msgid "member service delegation target" +msgid "privileged service delegation target" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy, python-format +#| msgid "%(count)d delegation matched" +#| msgid_plural "%(count)d delegations matched" +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "%(count)d delegación coincidente" +msgstr[1] "%(count)d delegaciones coincidentes" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" +"\n" +"Escenógrafos\n" +"\n" +"Gestionar las entradas de escenario de usuario.\n" +"\n" +"Las entradas de escenario de usuario están directamente bajo el contenedor.\n" +" \"cn=stage users, cn=accounts, cn=provisioning, SUFFIX\". Los usuarios no " +"se\n" +" pueden autenticar con estas entradas (aunque las entradas contengan\n" +" credenciales). Estas entradas son solo candidatas a llegar a ser entradas " +"Activas.\n" +"\n" +"Las entradas Activas de usuario son usuarios Posix directamente bajo el " +"contenedor. \"cn=accounts, SUFFIX\".\n" +"Los usuario se pueden autenticar con entradas Activas con la condición de " +"que \n" +"tengan credenciales.\n" +"\n" +"Las entradas borradas de usuario son usuaruios Posix directamente bajo el " +"contenedor. \"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Los usuarios no se pueden autenticas con estas entradas, aunque estas " +"entradas contengan credenciales.\n" +"\n" +"El contenedor escenario de usuario contiene entradas:\n" +" - crreadas por comandos 'stageuser-add' que son usuarios Posix,\n" +" - creadas por un sistema externa de aprovisionamiento.\n" +"\n" +"Una entrada de escenario de usuario valida DEBE tener:\n" +" - entrada RDN es 'uid',\n" +" - ipaUniqueID es 'autogenerate'.\n" +"\n" +"IPA soporta un amplia rango de formatos de nombre de usuario, pero usted " +"debe\n" +"estar atento a algunas restricciones que pueden aplicarse a su entorno " +"concreto.\n" +"Por ejemplo, los nombres de usuario que empiezan con un dígito o los nombres " +"de \n" +"usuario que exceden cierta longitud pueden causar problemas en algunos " +"sistemas UNIX.\n" +"Use 'ipa config-mod' para cambiar el formato de nombre de usuario permitido " +"por las herramientas IPA.\n" +"\n" +"\n" +"EJEMPLOS:\n" +"\n" +"Añadir un uevo escenógrafo:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Añadir un escenografo desde un contenedor de usuarios borrados:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" + +msgid "Stage Users" +msgstr "Escenario Usuarios" + +msgid "Stage User" +msgstr "Escenario de Usuario" + +msgid "stage user" +msgstr "escenario usuario" + +msgid "stage users" +msgstr "escenario usuarios" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "Añadido escenario usuario \"%(value)s\"" + +msgid "givenname is required" +msgstr "se requiere nombre" + +msgid "sn is required" +msgstr "se requiere sn" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "Borrado escenario usuario \"%(value)s\"" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "Modificado escenario usuario \"%(value)s\"" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d usuario coincidente" +msgstr[1] "%(count)d usuarios coincidentes" + +#, fuzzy, python-format +#| msgid "Added stage user \"%(value)s\"" +msgid "Activate a stage user \"%(value)s\"" +msgstr "Añadido escenario usuario \"%(value)s\"" + +#, fuzzy +#| msgid "Entry %s not found" +msgid "Entry RDN is not 'uid'" +msgstr "Entrada %s no encontrada" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgid "active user with name \"%(user)s\" already exists" +msgstr " %(oname)s con el nombre \"%(pkey)s\" ya existe" + +#, fuzzy, python-format +#| msgid "Staged user account \"%(value)s\"" +msgid "Stage user %s activated" +msgstr "Cuenta de usuario por etapas \"%(value)s\"" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificates to the stageuser entry" +msgstr "Añade uno o más certificados a la entrada del usuario" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "Añadidos certificados al usuario \"%(value)s\"" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificates to the stageuser entry" +msgstr "Borra uno o más certificados de la entrada de usuario" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "Certificados borrados del usuario \"%(value)s\"" + +#, fuzzy +#| msgid "Add new principal alias to the user entry" +msgid "Add new principal alias to the stageuser entry" +msgstr "Añade un nuevo alias principal a la entrada de usuario" + +#, fuzzy, python-format +#| msgid "Added new aliases to user \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "Añade nuevos alias al usuario \"%(value)s\"" + +#, fuzzy +#| msgid "Remove principal alias from the user entry" +msgid "Remove principal alias from the stageuser entry" +msgstr "Borra el alias principal de la entrada de usuario" + +#, fuzzy, python-format +#| msgid "Removed aliases from user \"%(value)s\"" +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "Borrados alias del usuario \"%(value)s\"" + +#, fuzzy +#| msgid "Add one or more certificate mappings to the user entry." +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "Añade uno o más mapeados de certificados a la entrada de usuario." + +#, fuzzy +#| msgid "Remove one or more certificate mappings from the user entry." +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "Borra uno o más mapeados de certificados de la entrada de usuario." + +msgid "pyhbac is not installed." +msgstr "pyhbac no está instalado." + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" +"\n" +"Operaciones de certificado IPA\n" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" +"\n" +"Implementa un conjunto de comandos para manejar los certificados de servidor " +"SSL.\n" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" +"\n" +"Las peticiones de certificado existen en la forma de una Petición de Firma " +"de\n" +"Certificado (CSR) en formato PEM.\n" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" +"\n" +"La placa de identidad CA usa el valor CN del CSR y fuerza al resto del " +"sujeto a\n" +"valores configurados en el servidor.\n" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" +"\n" +"Se ha almacenado un certificado con un servicio principal y un servicio " +"principal\n" +"necesita un host.\n" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" +"\n" +"Con el objetivo de pedir un certificado:\n" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" +"\n" +"* El host debe existir\n" +"* El servicio debe existir (o debe usar la opción --add para añadirlo " +"automáticamente)\n" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" +"\n" +"BUSCANDO:\n" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" +"\n" +"Los certificados pueden ser buscados por sujeto del certificado, número de " +"serie,\n" +"razón de la revocación, fechas de validez y fecha de envío.\n" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" +"\n" +"Cuando se busca por fechas _from fecha hace un >= search y _to fecha hace\n" +"<= search. Cuando se combina esto hace como un AND.\n" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" +"\n" +"Las fechas se tratan como GMT para coincidir con las fechas de los " +"certificados.\n" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" +"\n" +"El formato de fecha es YYYY-mm-dd.\n" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" +"\n" +" Pide un nuevo certificado y añade el principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" +"\n" +" Recupera un certificado existente:\n" +" ipa cert-show 1032\n" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" +"\n" +" Revocar un certificado (vea RFC 5280 para detalles de la razón):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" +"\n" +" Quita un certificado del estado de cogido para revocación:\n" +" ipa cert-remove-hold 1032\n" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" +"\n" +" Comprueba el estado de una petición de firma:\n" +" ipa cert-status 10\n" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" +"\n" +" Búsqueda de certificados por nombre de host:\n" +" ipa cert-find --subject=ipaserver.example.com\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Search for certificates by hostname:\n" +#| " ipa cert-find --subject=ipaserver.example.com\n" +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" +"\n" +" Búsqueda de certificados por nombre de host:\n" +" ipa cert-find --subject=ipaserver.example.com\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Search for certificates by hostname:\n" +#| " ipa cert-find --subject=ipaserver.example.com\n" +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" +"\n" +" Búsqueda de certificados por nombre de host:\n" +" ipa cert-find --subject=ipaserver.example.com\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Search for certificates by hostname:\n" +#| " ipa cert-find --subject=ipaserver.example.com\n" +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" +"\n" +" Búsqueda de certificados por nombre de host:\n" +" ipa cert-find --subject=ipaserver.example.com\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Search for certificates by hostname:\n" +#| " ipa cert-find --subject=ipaserver.example.com\n" +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" +"\n" +" Búsqueda de certificados por nombre de host:\n" +" ipa cert-find --subject=ipaserver.example.com\n" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Unspecified" +msgid " * 0 - unspecified\n" +msgstr "No especificada" + +#, fuzzy +#| msgid "Key Compromise" +msgid " * 1 - keyCompromise\n" +msgstr "Clave de transacción" + +#, fuzzy +#| msgid "AA Compromise" +msgid " * 2 - cACompromise\n" +msgstr "AA transacción" + +#, fuzzy +#| msgid "Affiliation Changed" +msgid " * 3 - affiliationChanged\n" +msgstr "Afiliación cambiada" + +msgid " * 4 - superseded\n" +msgstr "" + +#, fuzzy +#| msgid "Cessation of Operation" +msgid " * 5 - cessationOfOperation\n" +msgstr "Cese de operaciones" + +#, fuzzy +#| msgid "Certificate Hold" +msgid " * 6 - certificateHold\n" +msgstr "Certificado retenido" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +#, fuzzy +#| msgid "Privilege Withdrawn" +msgid " * 9 - privilegeWithdrawn\n" +msgstr "Retirada de privilegios" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "CA no está configurado" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Host '%(host)s' not found" +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "No ha sido encontrado el equipo anfitrión '%(host)s' " + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "Certificado codificado en Base-64." + +msgid "Certificate chain" +msgstr "Cadena de certificado" + +msgid "X.509 certificate chain" +msgstr "Cadena de certificado X.509" + +#, fuzzy +#| msgid "Email address" +msgid "Subject email address" +msgstr "Dirección de correo electrónico" + +#, fuzzy +#| msgid "Subject DN" +msgid "Subject DNS name" +msgstr "Sujeto DN" + +#, fuzzy +#| msgid "Street address" +msgid "Subject X.400 address" +msgstr "Dirección postal" + +#, fuzzy +#| msgid "Home directory base" +msgid "Subject directory name" +msgstr "Base del directorio principal" + +#, fuzzy +#| msgid "Object class name" +msgid "Subject EDI Party name" +msgstr "Nombre de clase objeto" + +#, fuzzy +#| msgid "Subject" +msgid "Subject URI" +msgstr "Asunto" + +#, fuzzy +#| msgid "IP Address" +msgid "Subject IP Address" +msgstr "Dirección IP" + +#, fuzzy +#| msgid "Subject DN" +msgid "Subject OID" +msgstr "Sujeto DN" + +#, fuzzy +#| msgid "Subject DN" +msgid "Subject UPN" +msgstr "Sujeto DN" + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "Subject Kerberos principal name" +msgstr "debe ser Kerberos principal" + +#, fuzzy +#| msgid "Subject Distinguished Name" +msgid "Subject Other Name" +msgstr "Nombre Distinguido del Sujeto" + +msgid "Issuer DN" +msgstr "Editor DN" + +msgid "Not Before" +msgstr "No antes de" + +msgid "Not After" +msgstr "No luego de" + +msgid "Fingerprint (SHA1)" +msgstr "Huella digital (SHA1)" + +msgid "Fingerprint (SHA256)" +msgstr "Huella digital (SHA256)" + +msgid "Serial number (hex)" +msgstr "N.º de serie (hex.)" + +msgid "Request status" +msgstr "Estado de la petición" + +msgid "Include certificate chain in output" +msgstr "Incluir la cadena del certificado en la salida" + +#, fuzzy +#| msgid "automatically add the principal if it doesn't exist" +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "si no existe, agregar automáticamente el principal" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, fuzzy, python-format +#| msgid "" +#| "Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of " +#| "entry '%s'." +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" +"Privilegio 'write' insuficiente al atributo 'krbLastPwdChange' de la entrada " +"'%s'." + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, fuzzy, python-format +#| msgid "The principal for this request doesn't exist." +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "El principal para esta petición no existe." + +#, fuzzy, python-format +#| msgid "Insufficient privilege to modify a certificate profile." +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "Privilegio insuficiente para modificar un certificado perfil" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +#, fuzzy +#| msgid "Sudo Option" +msgid "'add' option" +msgstr "Opción de sudo" + +msgid "The principal for this request doesn't exist." +msgstr "El principal para esta petición no existe." + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "Estatus" + +msgid "Revoked" +msgstr "Revocado" + +msgid "Revocation reason" +msgstr "Motivo de la revocación" + +#, fuzzy +#| msgid "Reason for revoking the certificate (0-10)" +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "Motivo por el cual el certificado ha sido revocado (0-10)" + +#, fuzzy, python-format +#| msgid "Owner" +msgid "Owner %s" +msgstr "Propietario" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "7 no es una razón válida de revocación" + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"name\")" +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" +"Los resultados deberían contener solo la clave del atributo primario (\"name" +"\")" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "%(count)d servicio coincidente" +msgstr[1] "%(count)d servicios coincidentes\t\t\t" + +#, fuzzy, python-format +#| msgid "Search for services with these managed by hosts." +msgid "Search for certificates with these owner %s." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy, python-format +#| msgid "Search for services without these managed by hosts." +msgid "Search for certificates without these owner %s." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" +"\n" +"Comandos de Sudo\n" +"\n" +"Comandos usados como partes integrantes de sudo\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Crear un comando nuevo\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Eliminar un comando\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "comando sudo" + +msgid "sudo commands" +msgstr "comandos sudo" + +msgid "Sudo Commands" +msgstr "Comandos de sudo" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Añadido Comando Sudo “%(value)s”" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Borrado Comando Sudo “%(value)s”" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Modificado Comando Sudo “%(value)s”" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "%(count)d Comando Sudo emparejado" +msgstr[1] "%(count)d Comandos Sudo emparejados" + +#, fuzzy +#| msgid "Sudo Rules" +msgid "" +"\n" +"Sudo Rules\n" +msgstr "Reglas Sudo" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "esta opción ha quedado obsoleta." + +msgid "sudo rules" +msgstr "reglas sudo" + +msgid "Sudo Rules" +msgstr "Reglas Sudo" + +msgid "Sudo Rule" +msgstr "Regla Sudo" + +#, fuzzy, python-format +#| msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" +"la prioridad debe ser un valor único (%(prio)d que ya esté siendo utilizado " +"por %(gname)s)" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Añadida Regla Sudo “%(value)s”" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Borrada Regla Sudo “%(value)s”" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Regla Sudo Modificada “%(value)s”" + +#, fuzzy, python-format +#| msgid "host category cannot be set to 'all' while there are allowed hosts" +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" +"la categoría de host no puede ser establecida a 'all' mientras hay host " +"permitidos" + +msgid "users" +msgstr "usuarios" + +#, fuzzy +#| msgid "Commands" +msgid "command" +msgstr "Comandos" + +#, fuzzy +#| msgid "Commands" +msgid "commands" +msgstr "Comandos" + +#, fuzzy +#| msgid "RunAs Users" +msgid "runAs user" +msgstr "RunAs Usuarios" + +#, fuzzy +#| msgid "RunAs Users" +msgid "runAs users" +msgstr "RunAs Usuarios" + +#, fuzzy +#| msgid "groups" +msgid "group runAs" +msgstr "grupos" + +#, fuzzy +#| msgid "RunAs Groups" +msgid "runAs groups" +msgstr "Grupos RunAs" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "%(count)d Regla Sudo emparejada" +msgstr[1] "%(count)d Reglas Sudo emparejadas" + +#, fuzzy +#| msgid "hosts cannot be added when host category='all'" +msgid "commands cannot be added when command category='all'" +msgstr "hosts no puede ser añadido con categoría de host='all'" + +#, fuzzy +#| msgid "users cannot be added when user category='all'" +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "no se pueden añadir usuarios cuando la categoría de usuario='all'" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "operation not defined" +msgstr "operación no definida" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "no está permitido llevar a cabo la operación: %s" + +msgid "No such virtual command" +msgstr "Ningún comando virtual" + +msgid "commands for controlling sudo configuration" +msgstr "comandos para controlar la configuración sudo" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Groups of Sudo Commands\n" +#| "\n" +#| "Manage groups of Sudo Commands.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new Sudo Command Group:\n" +#| " ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +#| "\n" +#| " Remove a Sudo Command Group:\n" +#| " ipa sudocmdgroup-del admincmds\n" +#| "\n" +#| " Manage Sudo Command Group membership, commands:\n" +#| " ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +#| "admincmds\n" +#| "\n" +#| " Manage Sudo Command Group membership, commands:\n" +#| " ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +#| "\n" +#| " Show a Sudo Command Group:\n" +#| " ipa group-show localadmins\n" +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" +"\n" +"Grupos de Comandos Sudo\n" +"\n" +"Gestionar grupos de Comandos Sudo.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Añadir un nuevo Grupo de Comandos Sudo:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Borrar un Grupo de Comando Sudo:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Gestionar pertenencia a Grupo de Comando Sudo, comandos:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Gestionar pertenencia a Grupo de Comando Sudo, comandos:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Mostrat un Grupo de Comando Sudo:\n" +" ipa group-show localadmins\n" + +msgid "sudo command group" +msgstr "grupo de comando sudo" + +msgid "sudo command groups" +msgstr "grupos de comando sudo" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Añadido Grupo de Comando Sudo “%(value)s”" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Borrado Grupo de Comando Sudo “%(value)s”" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Modificado Grupo de Comando Sudo “%(value)s”" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "%(count)d Grupo de Comando Sudo emparejado" +msgstr[1] "%(count)d Grupos de Comando Sudo emparejados" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" +"\n" +"Confianza de reino cruzado\n" +"\n" +"Gestionar relaciones de confianza entre los dominios IPA y Active " +"Directory.\n" +"\n" +"Con el objetivo de permitir a los usuarios de un dominio remoto acceder a " +"los\n" +"recursos en el dominio IPA, se necesita establecer relaciones de confianza.\n" +"Actualmente IPA soporta solo confianza entre dominios IPA y Active Directory " +"bajo \n" +"el control de Windows Server 2008 o posterior, con nivel funcional 2008 o " +"posterior.\n" +"\n" +"Por favor advierta que el DNS en ambos lados de los dominios IPA y Active\n" +"Directory deberían ser configurados apropiadamente para descubrir a cada " +"uno.\n" +"Las relaciones de confianza se apoyan en la capacidad de descubrir recursos " +"especiales en el otro dominio por medio de los registros DNS.\n" +"\n" +"Ejemplos:\n" +"\n" +"1. Establecer confianza de reino cruzado con Active Directory usando el \n" +" dministrador de credenciales AD:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. Listar todas las relaciones de confianza existentes:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Mostrar detalles de la relación de confianza específica:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Borrar relaciones de confianza existentes:\n" +"\n" +" ipa trust-del \n" +"\n" +"Una vez que la relación de confianza está establecida, los usuarios remotos\n" +"necesitarán ser mapeados a grupos POSIX locales con el objetivo de usar " +"recursos\n" +"IPA. El mapeado debería ser hecho por medio del uso de la membresía externa " +"de\n" +"grupo no-POSIX y después este grupo debería ser incluido en uno de los " +"grupos locales POSIX.\n" +"\n" +"Ejemplo:\n" +"\n" +"1. Crear un grupo para el mapeo de administrador de dominio de confianza y " +"su\n" +"grupo POSIX local:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Añadir identificador de seguridad de Domain Admins del al " +"grupo\n" +" ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Permitir a los miembros del grupo admins_external ser asociados con el " +"grupo\n" +" POSIX ad-admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Lista de miembros de miembros externos del grupo ad_admins_external para " +"ver\n" +" sus SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"CONFIGURACIÓN GLOBAL DE CONFIANZA\n" +"\n" +"Cuando se instale un subpaquete de confianza IPA AD y está corriendo ipa-" +"adtrust-\n" +"install, se genera una configuración de dominio local (SID, GUID, nombre\n" +"NetBIOS). Estos identificadores se usan entonces cuando se comunica con un\n" +"dominio de confianza de un tipo concreto.\n" +"\n" +"1. Mostrar la configuración de confianza global para el tipo de confianza " +"Active Directory:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modificar la configuración global de todos los confiados de tipo Active " +"Directory y\n" +" establecer un grupo primario de retroceso (el GID del grupo primario de " +"retroceso\n" +" se usa como GID de usuario primario y el usuario autenticando al dominio " +"IPA no\n" +" tiene ningún otro GID primario establecido ya):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Cambiar el grupo primario de retroceso al grupo escondido predeterminado\n" +" (cualquier grupo con un objeto clae posixGroup está permitido):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" +" Alternativamente, los siguientes servidores son capaces de ejecutar este " +"comando: %(masters)s" + +msgid "AD Trust setup" +msgstr "Ajuste de Confianza AD" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" +"No puede llevar a cabo el comando seleccionado sin el soporte de Samba 4 " +"instalad. Asegúrese de tener el instalado el sub-paquete server-trust-ad de " +"IPA." + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" +"No puede llevar a cabo el comando seleccionado sin una instancia Samba 4 " +"configurada en este máquina. Asegúrese de estar ejecutando ipa-adtrust-" +"install sobre este servidor." + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" +"No puede buscar en los dominios de confianza sin un dominio propio " +"configurado. Asegúrese que tiene corriendo ipa-adtrust-install sobre el " +"servidor IPA primero" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" +"No se pudo recuperar dominios del bosque de confianza. Vea detalles en " +"error_log" + +msgid "trust" +msgstr "confianza" + +msgid "trusts" +msgstr "confianzas" + +msgid "Trusts" +msgstr "Confianzas" + +msgid "Trust" +msgstr "Confianza" + +#, fuzzy +#| msgid "SID blacklist incoming" +msgid "SID blocklist incoming" +msgstr "Lista negra de SID entrante" + +#, fuzzy +#| msgid "SID blacklist outgoing" +msgid "SID blocklist outgoing" +msgstr "Lista negra de SID saliente" + +msgid "Trust direction" +msgstr "Dirección de confianza" + +msgid "Trust type" +msgstr "Tipo de confianza" + +msgid "Trust status" +msgstr "Estado de confianza" + +msgid "UPN suffixes" +msgstr "Sufijos UPN" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "SID no válido: {SID}" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" +"\n" +"Añadir nueva confianza a usar.\n" +"\n" +"Este comando establece la relación de confianza con otro dominio que llegar " +"a ser \n" +"trusted'. Como resultado, los usuarios del dominio de confianza puede " +"acceder a\n" +"los recursos de este dominio.\n" +"\n" +"Solo están soportados ahora la confianza con dominios Active Directory.\n" +"\n" +"El comando se puede ejecutar seguramente múltiples veces contra el mismo\n" +"dominio, esto causará cambios en las credenciales de relaciones de confianza " +"en\n" +"ambos lados.\n" +"\n" +"Advierta que si el comando se ejecuta previamente con un tipo de rango " +"específico\n" +"o con detección automática del tipo de rango y usted desea configurar un " +"tipo de\n" +"rango diferente, usted puede necesitar borrar primero la ID del rango " +"usando \n" +"ipa idrange-del antes de reintentar el comando con el rango deseado.\n" +" " + +msgid "Active Directory domain range" +msgstr "Intervalo de dominios de Active Directory" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "Rango de confianza Active Directory con atributos POSIX" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" +"Tipo de rango de ID de dominios de confianza, uno de los valores permitidos" + +msgid "External trust" +msgstr "Confianza externa" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" +"Establecida confianza externa a un dominio en otro bosque. La confianza no " +"es transitiva más allá del dominio." + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "Añadida confianza Active Directory para el reino \"%(value)s\"" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Restablecida la confianza al dominio \"%(value)s\"" + +msgid "missing base_id" +msgstr "base_id desaparecida" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" +"pysss_murmur no está disponible en el servidor y no se ha dado base-id." + +msgid "trust type" +msgstr "tipo de confianza" + +msgid "only \"ad\" is supported" +msgstr "solo se admite «ad»" + +msgid "domain" +msgstr "dominio" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" +"No puede establecer confianza al AD desplegado en el mismo dominio que IPA. " +"Este ajuste no se soporta." + +msgid "Realm-domain mismatch" +msgstr "Flata de coincidencia de dominio reino" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" +"Para establecer confianza con Active Directory, el nombre de dominio y el " +"nombre de reino del servidor IPA deben coincidir" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" +"El dominio de confianza %(domain)s está incluido entre los dominios del " +"reino IPA realm. Necesita ser quitado antes de establecer la confianza. Vea " +"el comando \"ipa realmdomains-mod --del-domain\"." + +msgid "Trusted domain and administrator account use different realms" +msgstr "" +"El dominio de confianza y la cuenta del administrador usan reinos diferentes" + +msgid "Realm administrator password should be specified" +msgstr "Debería especificarse la contraseña del administrador del reino" + +msgid "id range type" +msgstr "tipo de rango de id" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" +"Solo se permiten los valores ipa-ad-trust e ipa-ad-trust-posix para --range-" +"type cuando se añade una confianza AD." + +msgid "id range" +msgstr "rango id" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" +"Ya existe un rango id para esta confianza. Usted debería bien borrar el " +"antiguo rango o excluir las opciones --base-id/--range-size del comando." + +msgid "range exists" +msgstr "el intervalo existe" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" +"Rango de ID con el mismo nombre pero diferente SID de dominio ya existe. El " +"nuevo rango de ID para el nuevo dominio de confianza debe ser creado " +"manualmente." + +msgid "range type change" +msgstr "cambio de tipo de rango" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" +"El rango de ID para el dominio de confianza ya existe, pero tiene un tipo " +"diferente. Por favor borre manualmente el rango viejo o no haga cumplir el " +"tipo por medio de la opción --range-type." + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" +"Incapaz de resolver el controlador de dominio para el dominio {domain}. " + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" +"La política de reenvío se define para ello en IPA DNS, ¿tal vez el " +"reenviador apunta al host incorrecto?" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" +"IPA gestiona DNS, por favor verifique su configuración DNS y asegúrese que " +"el servicio de registros del dominio '{domain}' puede ser resuelto. Se " +"pueden encontrar ejemplos de como configurar DNS con comandos CLI o con Web " +"UI en la documentación. " + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" +"Puesto que IPA no gestiona los registros DNS, asegúrese de que DNS está " +"configurado para resolver el dominio '{domain}' desde los hosts IPA y vuelta." + +msgid "Unable to verify write permissions to the AD" +msgstr "Incapaz de verificar los permisos de escritura al AD" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" +"No se especifican bastantes argumentos para llevar a cabo un ajusta de " +"confianza" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "Confianza borrada \"%(value)s\"" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" +"\n" +" Modificar una confianza (para uso futuro).\n" +"\n" +" Actualmente solo está disponible la opción predeterminada para modificar " +"los\n" +" atributos LDAP. Opciones más especificas serán añadidas en futuras " +"versiones.\n" +" " + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" +"Confianza modificada \"%(value)s\" (el cambio será efectivo en 60 segundos)" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d confianza encontrada" +msgstr[1] "%(count)d confianzas encontradas" + +msgid "trust configuration" +msgstr "configuración de la confianza" + +msgid "Global Trust Configuration" +msgstr "Configuración Global de Confianza" + +msgid "IPA AD trust agents" +msgstr "IPA AD agentes de confianza" + +msgid "IPA servers configured as AD trust agents" +msgstr "Servidores IPA configurados como agentes de confianza AD" + +msgid "IPA AD trust controllers" +msgstr "Controladores de confianza IPA AD" + +msgid "IPA servers configured as AD trust controllers" +msgstr "Servidores IPA configurados como controladores de confianza AD" + +msgid "unsupported trust type" +msgstr "tipo de confianza no soportado" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "Modificada \"%(value)s\" configuración de confianza" + +msgid "Name" +msgstr "Nombre" + +msgid "SID" +msgstr "SID" + +msgid "sidgen_was_run" +msgstr "sidgen_was_run" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" +"Este comando se basa en la existencia del grupo \"editors\" pero este grupo " +"no h sido encontrado." + +msgid "trust domain" +msgstr "dominio de confianza" + +msgid "trust domains" +msgstr "dominios de confianza" + +msgid "Trusted domains" +msgstr "Dominios de confianza" + +msgid "Trusted domain" +msgstr "Dominio de confianza" + +msgid "Domain enabled" +msgstr "Dominio habilitado" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "Borrada información sobre el dominio de confianza \"%(value)s\"" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"no puede borrar el dominio raíz de la confianza, use trust-del para borrarla " +"misma confianza" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" +"Lista de dominios de confianza refrescados con éxito. Use el comando " +"trustdomain-find para listarlos." + +#, fuzzy +#| msgid "IPA servers configured as AD trust agents" +msgid "Configure this server as a trust agent." +msgstr "Servidores IPA configurados como agentes de confianza AD" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "debe ser \"%s\"" + +#, fuzzy +#| msgid "not allowed to modify user entries" +msgid "not allowed to remotely add agent" +msgstr "no se permite modificar las entradas de los usuarios" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Habilitado dominio de confianza \"%(value)s\"" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" +"El dominio raíz de la confianza está siempre habilitado para la confianza " +"existente" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Deshabilitar dominio de confianza \"%(value)s\"" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"no puede deshabilitar el dominio raíz de la confianza, use trust-del para " +"borrar la confianza misma" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" +"\n" +"Información devuelta sobre la identidad actualmente autentificada\n" +"\n" +"El comando quien soy devuelve información sobre como obtener más detalles " +"sobre la identidad autentificada para esta petición. La información " +"incluye:\n" +"\n" +" * tipo de objeto\n" +" * comando para recuperar detalles del objeto\n" +" * argumentos y opciones a pasar al comando\n" +"\n" +"La información se devuelve como un diccionario. Los ejemplos de abajo usan " +"la salida 'key: value' con propósitos ilustrativos.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Buscar como usuario IPA:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Buscar como un usuario desde un dominio de confianza:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Buscar como host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Buscar como servicio Kerberos:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" + +msgid "Describe currently authenticated identity." +msgstr "Describe la identidad actualmente autentificada." + +msgid "Object class name" +msgstr "Nombre de clase objeto" + +msgid "Function to get details" +msgstr "Función para obtener detalles" + +msgid "Arguments to details function" +msgstr "Argumentos para detalles de la función" + +msgid "Cannot query Directory Manager with API" +msgstr "No se puede cosultar al Administrador de Directorios con API" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" +"\n" +"Roles del servidor IPA\n" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" +"\n" +"Obtener el estado de los roles (servidor DNS, CA, etc.) suministrado por los " +"IPA maestros.\n" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" +"\n" +"El estado de un rol es habilitado, configurado o ausente.\n" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" +"\n" +" Muestra el estado del rol 'DNS server' sobre un servidor:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" +"\n" +" Muestra el estado de todos los roles que contienen 'AD' sobre un " +"servidor:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" +"\n" +" Muestra el estado de todos los roles configurados en un servidor:\n" +" ipa server-role-find ipa.example.com\n" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" +"\n" +" Muestra el rol maestro IPA implícito:\n" +" ipa server-role-find --include-master\n" + +msgid "server role" +msgstr "rol servidor" + +msgid "server roles" +msgstr "roles de servidor" + +msgid "IPA Server Roles" +msgstr "Roles de Servidor IPA" + +msgid "IPA Server Role" +msgstr "Rol de Servidor IPA" + +msgid "IPA server role name" +msgstr "Nombre de rol del servidor IPA" + +msgid "Role status" +msgstr "Estado rol" + +msgid "Status of the role" +msgstr "Estado del rol" + +msgid "Show role status on a server" +msgstr "Muestra el rol de estado sobre un servidor" + +msgid "Find a server role on a server(s)" +msgstr "Encontrar un rol de servidor sobre un servidor(s)" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "%(count)s rol servidor coincidente" +msgstr[1] "%(count)s roles servidor coincidentes" + +msgid "Include IPA master entries" +msgstr "Incluir entradas IPA maestro" + +msgid "roles" +msgstr "roles" + +msgid "IPA role name" +msgstr "Nombre de rol IPA" + +msgid "" +"\n" +"Vaults\n" +msgstr "" +"\n" +"Bóvedas\n" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" +"\n" +"Manejar bóvedas.\n" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" +"\n" +"En base al propietario hay tres categorías de bóveda:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" +"\n" +"Las bóvedas de usuario son bóvedas propietarias usadas por un usuario " +"concreto. Las bóvedas\n" +"privadas son bóvedas propiedad del usuario actual. Las bóvedas de servcio " +"son\n" +"bóvedas propiedad de un servicio. Las bóvedas compartidas son propiedad del " +"administrador\n" +"pero pueden ser usadas por otros usuarios o sevicios.\n" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" +"\n" +"En base al mecanismos de seguridad hay tres tipos de\n" +"bóvedas:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" +"\n" +"La bóveda standard usa un mecanismo seguro para transportar y\n" +"almacenar el secreto. El secreto puede ser sólo recuperado por los usuarios\n" +"que tiene acceso a la bovéda.\n" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" +"\n" +"La bóveda symmetric es similar a la standard, pero\n" +"encripta previamente el secreto usando una contraseña antes de transportar.\n" +"El secreto sólo se puede recuperar usando la misma contraseña.\n" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" +"\n" +"La bóveda asymmetric es similar a la bóveda standard, pero\n" +"encripta el secreto usando una clave pública antes del transporte.\n" +"El secreto sólo se puede recuperar usando la clave privada.\n" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Show global DNS configuration:\n" +#| " ipa dnsconfig-show\n" +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" +"\n" +" Muestra la configuración DNS global:\n" +" ipa dnsconfig-show\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Group container" +msgid "vaultcontainer" +msgstr "Contenedor de grupoi" + +#, fuzzy +#| msgid "Group container" +msgid "vaultcontainers" +msgstr "Contenedor de grupoi" + +#, fuzzy +#| msgid "Group container" +msgid "Vault Containers" +msgstr "Contenedor de grupoi" + +#, fuzzy +#| msgid "Group container" +msgid "Vault Container" +msgstr "Contenedor de grupoi" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +#, fuzzy +#| msgid "only \"ad\" is supported" +msgid "Host is not supported" +msgstr "solo se admite «ad»" + +msgid "KRA service is not enabled" +msgstr "" + +#, fuzzy +#| msgid "Delete an automount location." +msgid "Deleted vault container" +msgstr "Borrar una localización de automontaje." + +#, fuzzy, python-format +#| msgid "Owner" +msgid "owner %s" +msgstr "Propietario" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Add an automember rule.\n" +#| " " +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" +"\n" +" Añadir una regla automiembro.\n" +" " + +#, fuzzy +#| msgid "" +#| "\n" +#| "Vaults\n" +msgid "vault" +msgstr "" +"\n" +"Bóvedas\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Vaults\n" +msgid "vaults" +msgstr "" +"\n" +"Bóvedas\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Vaults\n" +msgid "Vaults" +msgstr "" +"\n" +"Bóvedas\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Vaults\n" +msgid "Vault" +msgstr "" +"\n" +"Bóvedas\n" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +#, fuzzy +#| msgid "Modify a vault." +msgid "Add a vault." +msgstr "Modificar una bóveda" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "Ha sido agregado el equipo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted trust \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "Confianza borrada \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d trust matched" +#| msgid_plural "%(count)d trusts matched" +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "%(count)d confianza encontrada" +msgstr[1] "%(count)d confianzas encontradas" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "Ha sido modificado el equipo \"%(value)s\"" + +#, fuzzy +#| msgid "trust configuration" +msgid "Vault configuration" +msgstr "configuración de la confianza" + +#, fuzzy +#| msgid "IPA DNS servers" +msgid "IPA KRA servers" +msgstr "Servidores IPA DNS" + +#, fuzzy +#| msgid "IPA servers configured as AD trust agents" +msgid "IPA servers configured as key recovery agents" +msgstr "Servidores IPA configurados como agentes de confianza AD" + +#, fuzzy, python-format +#| msgid "Archive data into a vault." +msgid "Archived data into vault \"%(value)s\"" +msgstr "Datos archivados en una bóveda" + +#, fuzzy +#| msgid "Archive data into a vault." +msgid "Retrieve data from a vault." +msgstr "Datos archivados en una bóveda" + +#, fuzzy, python-format +#| msgid "Removed aliases from host \"%(value)s\"" +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Borrados alias del host \"%(value)s\"" + +msgid "No archived data." +msgstr "" + +#, fuzzy +#| msgid "Checks if any of the servers has the DNS service enabled." +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" +"Comprueba si alguno de los servidores tiene un servicio DNS habilitado." + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" +"\n" +"Gestión de los Certificados de Perfil\n" +"\n" +"LOs Certificados de Perfil son usados por una Autoridad de Certificación " +"(CA) en la\n" +"firma de certificados si una Petición de Firma de Certificado (CSR) es " +"aceptable y\n" +"que características y extensiones estarán presentes en el certificado.\n" +"\n" +"El formato del Cetificado de Perfil es la lista de propiedad entendida por " +"Dogtag\n" +"o Red Hat Certificate System CA.\n" +"\n" +"SINTAXIS DEL ID DE PERFIL:\n" +"\n" +"Una ID de Perfil es una cadena sin espacios o puntuación que empieza con " +"una\n" +"letra y seguida por una secuencia de letras, dígitos o guiones bajos (\"_" +"\").\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Importar un perfil que no almacenará los certificados enviados:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Borrar un certificado de perfil:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Mostrar información sobre un perfil:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Guardar la configuración del perfil en un fichero:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Búsqueda de perfiles que almacenan certificados:\n" +" ipa certprofile-find --store=false\n" +"\n" +"FORMATO DE CONFIGURACIÓN DE PERFIL:\n" +"\n" +"El formato de configuración de perfil es el formato crudo de lista de " +"propiedad\n" +"usado por Dogtag Certificate System. No está soportado el formato XML.\n" +"\n" +"A los perfiles manejados por IPA se les aplican las siguientes " +"restricciones:\n" +"\n" +"- Cuando se importa un perfil el campo \"profileId\", si está presente, debe " +"coincidir\n" +" con la ID dada en la linea de comandos.\n" +"\n" +"- El campo \"classId\" debe estar fijado a \"caEnrollImpl\"\n" +"\n" +"- El campo \"auth.instance_id\" debe estar fijado a \"raCertAuth\"\n" +"\n" +"- La clase de entrada \"certReqInputImpl\" y la de salida \"certOutputImpl\" " +"se deben\n" +" usar.\n" +"\n" + +msgid "invalid Profile ID" +msgstr "ID de perfil no válido" + +msgid "Certificate Profile" +msgstr "Certificado de Perfil" + +msgid "Certificate Profiles" +msgstr "Certificado de Perfiles" + +msgid "Profile configuration" +msgstr "Configuración de perfil" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d perfil coincidente" +msgstr[1] "%(count)d perfiles coincidentes" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "Perfil importado \"%(value)s\"" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "Los datos del perfil especifican profileId múltiples veces: %(values)s" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" +"ID de perfil '%(cli_value)s' no coincide con los datos de perfil " +"'%(file_value)s'" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "Perfil borrado \"%(value)s\"" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "El perfil predefinido '%(profile_id)s' no puede ser borrado" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Modificado Certificado Perfil \"%(value)s\"" + +msgid "Certificate profiles cannot be renamed" +msgstr "Certificado de los perfiles no pueden ser renombrado" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "Privilegio insuficiente para modificar un certificado perfil" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "grupos de host" + +msgid "Host Group" +msgstr "Grupo de Host" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Ha sido agregado el grupo de equipo \"%(value)s\"" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"grupo de red con nombre “%s” ya existe. Los grupos de host y grupos de red " +"comparten un espacio de nombre común" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Ha sido eliminado el grupo de equipo \"%(value)s\"" + +#, fuzzy +#| msgid "host group" +msgid "hostgroup" +msgstr "grupo de host" + +#, fuzzy +#| msgid "privileged group" +msgid "privileged hostgroup" +msgstr "grupo privilegiado" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Ha sido modificado el grupo de equipo \"%(value)s\"" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "%(count)d grupo de equipos coincidente" +msgstr[1] "%(count)d grupos de equipos coincidentes" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this hostgroup." +msgstr "Añadir usuarios que pueden manejar esta ficha." + +#, fuzzy +#| msgid "Remove users that can manage this token." +msgid "Remove users that can manage members of this hostgroup." +msgstr "Quitar usuarios que puedan manejar esta ficha." + +msgid "kerberos ticket policy settings" +msgstr "ajustes de la entrada de política kerberos" + +msgid "Kerberos Ticket Policy" +msgstr " Política de tiquete de Kerberos" + +#, fuzzy +#| msgid "Max life" +msgid "OTP max life" +msgstr "Vida máxima" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "OTP token maximum ticket life (seconds)" +msgstr "Duración máxima del ticket (en segundos)" + +#, fuzzy +#| msgid "Max renew" +msgid "OTP max renew" +msgstr "Renovación máxima" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "Duración máxima renovable (en segundos)" + +#, fuzzy +#| msgid "Max life" +msgid "RADIUS max life" +msgstr "Vida máxima" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "RADIUS maximum ticket life (seconds)" +msgstr "Duración máxima del ticket (en segundos)" + +#, fuzzy +#| msgid "RADIUS proxy server name" +msgid "RADIUS max renew" +msgstr "Nombre del servidor proxy RADIUS" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "Duración máxima renovable (en segundos)" + +#, fuzzy +#| msgid "Max life" +msgid "PKINIT max life" +msgstr "Vida máxima" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "PKINIT maximum ticket life (seconds)" +msgstr "Duración máxima del ticket (en segundos)" + +#, fuzzy +#| msgid "Max renew" +msgid "PKINIT max renew" +msgstr "Renovación máxima" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "Duración máxima renovable (en segundos)" + +msgid "Hardened max life" +msgstr "" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "Duración máxima del ticket (en segundos)" + +msgid "Hardened max renew" +msgstr "" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "Duración máxima renovable (en segundos)" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "La política de entrada para %s podría no ser leída" + +msgid "Default ticket policy could not be read" +msgstr "La política de entrada por defecto podría no ser leída" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" +"\n" +"Localizaciones IPA\n" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" +"\n" +"Manipular localizaciones DNS\n" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" +"\n" +" Encontrar todas las localizaciones:\n" +" ipa location-find\n" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" +"\n" +" Mostrar localización específica:\n" +" ipa location-show location\n" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" +"\n" +" Añadir localización:\n" +" ipa location-add location --description 'My location'\n" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" +"\n" +" Borrar localización:\n" +" ipa location-del location\n" + +msgid "location" +msgstr "localización" + +msgid "locations" +msgstr "localizaciones" + +msgid "IPA Locations" +msgstr "Localizaciones IPA" + +msgid "IPA Location" +msgstr "Localización IPA" + +msgid "Location name" +msgstr "Nombre de localización" + +msgid "IPA location name" +msgstr "Nombre de localización IPA" + +msgid "IPA Location description" +msgstr "Descripción de Localización IPA" + +msgid "Servers" +msgstr "Servidores" + +msgid "Servers that belongs to the IPA location" +msgstr "Servidores que pertenecen a la localización IPA" + +msgid "Advertised by servers" +msgstr "Anunciado por los servidores" + +msgid "List of servers which advertise the given location" +msgstr "Lista de servidores que anuncian la localización dada" + +msgid "Add a new IPA location." +msgstr "Añadir una nueva localización IPA." + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "Añadida localización IPA \"%(value)s\"" + +msgid "Delete an IPA location." +msgstr "Borrar una localización IPA." + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Borrada localización IPA \"%(value)s\"" + +msgid "IPA Server" +msgstr "Servidor IPA" + +msgid "Modify information about an IPA location." +msgstr "Modificar información sobre localización IPA." + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "Modificada localización IPA \"%(value)s\"" + +msgid "Search for IPA locations." +msgstr "Buscar localizaciones IPA." + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "%(count)d localización IPA emparejada" +msgstr[1] "%(count)d localizaciones IPA emparejadas" + +msgid "Display information about an IPA location." +msgstr "Muestra información sobre una localización IPA." + +msgid "Servers in location" +msgstr "Servidores en localización" + +msgid "Role" +msgstr "Rol" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "Rol agregado \"%(value)s\"" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "Rol eliminado \"%(value)s\"" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "Rol modificado \"%(value)s\"" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d rol coincidente" +msgstr[1] "%(count)d roles coincidentes" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Ha sido agregado el usuario \"%(value)s\"" + +msgid "Default group for new users is not POSIX" +msgstr "El grupo predeterminado para nuevos usuarios no es POSIX" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Ha sido eliminado el usuario \"%(value)s\"" + +#, python-format +msgid "%s: user is already preserved" +msgstr "%s: usuario ya preservado" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Ha sido modificado el usuario \"%(value)s\"" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "Recuperada cuenta de usuario \"%(value)s\"" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "usuario \"%s\" ya está activo" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "Cuenta de usuario por etapas \"%(value)s\"" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr " \"%(value)s\" de cuenta de usuario desactivada" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr " \"%(value)s\" de cuenta de usuario activada" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" +"\n" +"Desbloquear una cuenta de usuario\n" +"\n" +" Una cuenta de usuario puede llegar a bloquearse si la contraseña se ha " +"introducido incorrectamente demasiadas\n" +"veces dentro de un período de tiempo controlado por la política de\n" +"contraseña. Una cuenta bloqueada es una condición temporal y puede ser " +"desbloqueada por\n" +"un administrador." + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "Cuenta desbloqueada \" %(value)s \"" + +msgid "Failed logins" +msgstr "Inicios de sesión fallidos" + +msgid "Last successful authentication" +msgstr "Última autenticación exitosa" + +msgid "Last failed authentication" +msgstr "Última autenticación fallada" + +msgid "Time now" +msgstr "Ahora" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" +"\n" +" Estado de bloqueo de una cuenta de usuario\n" +"\n" +" Una cuenta de usuario puede resultar bloqueada si la contraseña se " +"introduce\n" +" incorrectamente muchas veces dentro de un período especifico de tiempo\n" +" controlado por la política de contraseña. Un bloqueo de cuenta es una " +"condición\n" +" temporal y debe ser desbloqueada por un administrador.\n" +"\n" +" Esto conecta con el máster IPA y muestra el estado de bloqueo de cada " +"uno.\n" +"\n" +" Para determinar si una cuenta está bloqueada en un servidor dado usted\n" +" necesita comparar el número de accesos fallido y la hora del último " +"fallo. Para\n" +" que una cuenta se bloquee debe exceder maxfail dentro de la duración\n" +" failinterval según se especifique en la política de contraseña asociada " +"con el\n" +" usuario.\n" +"\n" +" El contador de acceso fallado se modifica solo cuando un usuario intenta " +"acceder\n" +" por lo que es posible que una cuenta puede aparecer bloqueada pero el " +"último\n" +" acceso fallado sea más antiguo que el lockouttime de la política de " +"contraseña.\n" +" Esto significa que el usuario puede intentar acceder otra vez." + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "%(host)s falló: %(error)s" + +#, python-format +msgid "%(host)s failed" +msgstr "%(host)s falló" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "Cuenta deshabilitada: %(disabled)s" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "Añadidos certificados al usuario \"%(value)s\"" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Certificados borrados del usuario \"%(value)s\"" + +msgid "Add new principal alias to the user entry" +msgstr "Añade un nuevo alias principal a la entrada de usuario" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Añade nuevos alias al usuario \"%(value)s\"" + +msgid "Remove principal alias from the user entry" +msgstr "Borra el alias principal de la entrada de usuario" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Borrados alias del usuario \"%(value)s\"" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" +"\n" +"Fichas OTP\n" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"Gestionar fichas OTP.\n" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" +"\n" +"IPA soporta el uso de fichas OTP para la autenticación de varios factores. " +"Este\n" +"código habilita la gestión de las fichas OTP.\n" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" +"\n" +" Añadir una nueva ficha:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Examinar la ficha:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" +"\n" +" Cambiar el vendedor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Borrar una ficha:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "OTP token" +msgstr "Ficha OTP" + +msgid "OTP tokens" +msgstr "Fichas OTP" + +msgid "OTP Tokens" +msgstr "Fichas OTP" + +msgid "OTP Token" +msgstr "Ficha OTP" + +msgid "URI" +msgstr "URI" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "Añadir ficha OTP \"%(value)s\"" + +msgid "cannot be empty" +msgstr "no puede estar vacío" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Ficha OTP borrada \"%(value)s\"" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Ficha OTP modificada \"%(value)s\"" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d OTP ficha coincidente" +msgstr[1] "%(count)d OTP fichas coincidentes" + +msgid "A list of ACI values" +msgstr "Una lista de valores ACI" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "tipo, filtro, subárbol y grupo de destino, se excluyen mutuamente" + +msgid "ACI prefix is required" +msgstr "Se requiere prefijo de ACI " + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"es necesario como mínimo alguno de: tipo, filtro, subárbol, grupo de " +"destino, atributos, o miembro de " + +msgid "filter and memberof are mutually exclusive" +msgstr "filtro y memberof son mutuamente excluyentes" + +msgid "group, permission and self are mutually exclusive" +msgstr "grupo, permisos y auto son mutuamente excluyentes" + +msgid "One of group, permission or self is required" +msgstr "Uno de grupo, permiso o self es necesario" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "El grupo '%s' no existe" + +msgid "empty filter" +msgstr "Vaciar filtro" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Error de sintaxis:%(error)s " + +#, python-format +msgid "invalid DN (%s)" +msgstr "DN no válido (%s)" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "No se encuentra un ACI cuyo nombre sea \"%s\"" + +msgid "ACI object." +msgstr "Objeto ACI." + +msgid "ACIs" +msgstr "ACI" + +msgid "ACI" +msgstr "ACI" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "Ha sido creado ACI \"%(value)s\"" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "Ha sido eliminado ACI \"%(value)s\"" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "Ha sido modificado ACI \"%(value)s\"" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d ACI coincidente" +msgstr[1] "%(count)d ACIs coincidentes" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "ACI renombrado a \"%(value)s\"" + msgid "" "\n" "Domain Name System (DNS)\n" @@ -18057,9 +23558,6 @@ msgstr "" msgid "Managedby permission" msgstr "Gestionado con permiso" -msgid "DNS is not configured" -msgstr "DNS no está configurado" - msgid "cannot be used when a zone is specified" msgstr "" @@ -18295,1880 +23793,630 @@ msgstr "Correr en seco" msgid "Do not update records only return expected records" msgstr "No actualizar registros solo devolver registros esperados" +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +#, fuzzy +#| msgid "IPA server domain cannot be deleted" +msgid "Domain Level cannot be lowered." +msgstr "Servidor de dominio IPA no puede ser borrado" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +#, fuzzy +#| msgid "LDAP schema" msgid "" "\n" -"DNS server configuration\n" -msgstr "" -"\n" -"Configuración del servidor DNS\n" +"API Schema\n" +msgstr "Esquema LDAP" msgid "" "\n" -"Manipulate DNS server configuration\n" +"Provides API introspection capabilities.\n" msgstr "" -"\n" -"Manipular la configuración del servidor DNS\n" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" -"\n" -" Mostar la configuración de un servidor DNS especifico:\n" -" ipa dnsserver-show\n" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" -"\n" -" Actualizar la configuración de un servidor DNS especifico:\n" -" ipa dnsserver-mod\n" - -msgid "DNS server" -msgstr "Servidor DNS" - -msgid "DNS servers" -msgstr "Servidores DNS" - -#, fuzzy -#| msgid "DNS servers" -msgid "DNS Servers" -msgstr "Servidores DNS" - -#, fuzzy -#| msgid "DNS server" -msgid "DNS Server" -msgstr "Servidor DNS" - -#, fuzzy -#| msgid "Server name" -msgid "DNS Server name" -msgstr "Nombre del servidor" - -msgid "SOA mname override" -msgstr "" - -#, fuzzy -#| msgid "Authoritative nameserver domain name" -msgid "SOA mname (authoritative server) override" -msgstr "Nombre de dominio servidor de nombre autorizado" - -#, fuzzy -#| msgid "Zone forwarders" -msgid "Forwarders" -msgstr "Zona de expedidores" - -#, fuzzy -#| msgid "" -#| "Per-zone forwarders. A custom port can be specified for each forwarder " -#| "using a standard format \"IP_ADDRESS port PORT\"" -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Expedidores por zona. Se puede especificar un puerto personalizado para cada " -"exedidor usando el formato estándar \"IP_ADDRESS port PORT\"" - -#, fuzzy -#| msgid "" -#| "Per-zone conditional forwarding policy. Set to \"none\" to disable " -#| "forwarding to global forwarder for this zone. In that case, conditional " -#| "zone forwarders are disregarded." -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" -"Política de envío condicional por zona. Se establece a \"none\" para " -"deshabilitar el envío a expedidores globales para esta zona. En este caso, " -"la zona condicional de expedidores es ignorada." #, fuzzy #| msgid "" #| "\n" -#| "DNS server configuration\n" -msgid "Modify DNS server configuration" -msgstr "" -"\n" -"Configuración del servidor DNS\n" - -#, fuzzy, python-format -#| msgid "Modified IPA server \"%(value)s\"" -msgid "Modified DNS server \"%(value)s\"" -msgstr "Modificado servidor IPA \"%(value)s\"" - -#, fuzzy -#| msgid "Search for IPA servers." -msgid "Search for DNS servers." -msgstr "Buscar servidores IPA." - -#, fuzzy, python-format -#| msgid "%(count)d IPA server matched" -#| msgid_plural "%(count)d IPA servers matched" -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "%(count)d servidor IPA coincide" -msgstr[1] "%(count)d servidores IPA coinciden" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA DNS Server is not installed" -msgstr "Servidor de IPA a utilizar" - -#, fuzzy -#| msgid "Display information about a RADIUS proxy server." -msgid "Display configuration of a DNS server." -msgstr "Muestra información sobre un servidor proxy RADIUS." - -#, fuzzy -#| msgid "Add a new SMB service." -msgid "Add a new DNS server." -msgstr "Añadir un nuevo servicio SMB." - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added new DNS server \"%(value)s\"" -msgstr "Ha sido agregado el servicio \"%(value)s\"" - -#, fuzzy -#| msgid "Delete IPA server." -msgid "Delete a DNS server" -msgstr "Eliminar servidor IPA." - -#, fuzzy, python-format -#| msgid "Deleted IPA server \"%(value)s\"" -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Eliminado servidor IPA \"%(value)s\"" - -msgid "REST API is not logged in." -msgstr "REST API no ha iniciado sesión." - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "No hay respuesta 2xx desde CA REST API: %(status)d. %(explanation)s" - -msgid "Unable to communicate with CMS" -msgstr "Incapaz de comunicar con CMS" - -msgid "Response from CA was not valid JSON" -msgstr "La respuesta desde CA no era JSON válido" - -msgid "Host-based access control commands" -msgstr "Comandos de control de acceso basado en host" - +#| " Show specific location:\n" +#| " ipa location-show location\n" msgid "" "\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" msgstr "" "\n" -"Servicios de HBAC\n" -"\n" -"Los servicios PAM a los que HBAC puede controlar el acceso. El nombre " -"utilizado aquí debe coincidir\n" -"con el nombre del servicio que PAM está evaluando.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Añadir un nuevo servicio:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modificar un servicio de HBAC:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Buscar servicios para HBAC. Este ejemplo retornará dos resultados, el " -"servicio FTP\n" -" y el servicio recién añadido tftp:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Borrar un servicio de HBAC:\n" -" ipa hbacsvc-del tftp\n" -"\n" - -msgid "HBAC services" -msgstr "Servicios HBAC" - -msgid "HBAC Services" -msgstr "Servicios HBAC" - -msgid "HBAC Service" -msgstr "Servicio HBAC" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "Servicio de HBAC \"%(value)s\" añadido" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Suprimido el servicio HBAC \"%(value)s\"" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr " Servicio modificado HBAC \"%(value)s\"" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "Servicio HBAC %(count)d coincidente" -msgstr[1] "Servicios HBAC %(count)d coincidentes" - -msgid "HBAC service group" -msgstr "Grupo de servicio HBAC" - -msgid "HBAC service groups" -msgstr "Grupos de servicio HBAC" - -msgid "HBAC Service Groups" -msgstr "Grupos de Servicios HBAC" - -msgid "HBAC Service Group" -msgstr "Grupo de Servicio HBAC" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Agregado servicio de grupo HBAC \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr " Suprimido el servicio HBAC grupo \"%(value)s\"" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "Servicio modificado HBAC grupo \"%(value)s\"" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "%(count)d grupo de servicio HBAC coincidente" -msgstr[1] "%(count)d grupos de servicio HBAC coincidentes" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" -"\n" -"Escenógrafos\n" -"\n" -"Gestionar las entradas de escenario de usuario.\n" -"\n" -"Las entradas de escenario de usuario están directamente bajo el contenedor.\n" -" \"cn=stage users, cn=accounts, cn=provisioning, SUFFIX\". Los usuarios no " -"se\n" -" pueden autenticar con estas entradas (aunque las entradas contengan\n" -" credenciales). Estas entradas son solo candidatas a llegar a ser entradas " -"Activas.\n" -"\n" -"Las entradas Activas de usuario son usuarios Posix directamente bajo el " -"contenedor. \"cn=accounts, SUFFIX\".\n" -"Los usuario se pueden autenticar con entradas Activas con la condición de " -"que \n" -"tengan credenciales.\n" -"\n" -"Las entradas borradas de usuario son usuaruios Posix directamente bajo el " -"contenedor. \"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Los usuarios no se pueden autenticas con estas entradas, aunque estas " -"entradas contengan credenciales.\n" -"\n" -"El contenedor escenario de usuario contiene entradas:\n" -" - crreadas por comandos 'stageuser-add' que son usuarios Posix,\n" -" - creadas por un sistema externa de aprovisionamiento.\n" -"\n" -"Una entrada de escenario de usuario valida DEBE tener:\n" -" - entrada RDN es 'uid',\n" -" - ipaUniqueID es 'autogenerate'.\n" -"\n" -"IPA soporta un amplia rango de formatos de nombre de usuario, pero usted " -"debe\n" -"estar atento a algunas restricciones que pueden aplicarse a su entorno " -"concreto.\n" -"Por ejemplo, los nombres de usuario que empiezan con un dígito o los nombres " -"de \n" -"usuario que exceden cierta longitud pueden causar problemas en algunos " -"sistemas UNIX.\n" -"Use 'ipa config-mod' para cambiar el formato de nombre de usuario permitido " -"por las herramientas IPA.\n" -"\n" -"\n" -"EJEMPLOS:\n" -"\n" -"Añadir un uevo escenógrafo:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Añadir un escenografo desde un contenedor de usuarios borrados:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" - -msgid "Stage Users" -msgstr "Escenario Usuarios" - -msgid "Stage User" -msgstr "Escenario de Usuario" - -msgid "stage user" -msgstr "escenario usuario" - -msgid "stage users" -msgstr "escenario usuarios" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Añadido escenario usuario \"%(value)s\"" - -msgid "givenname is required" -msgstr "se requiere nombre" - -msgid "sn is required" -msgstr "se requiere sn" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "puede ser a lo sumo%(len)d caracteres" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Borrado escenario usuario \"%(value)s\"" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Modificado escenario usuario \"%(value)s\"" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d usuario coincidente" -msgstr[1] "%(count)d usuarios coincidentes" - -#, fuzzy, python-format -#| msgid "Added stage user \"%(value)s\"" -msgid "Activate a stage user \"%(value)s\"" -msgstr "Añadido escenario usuario \"%(value)s\"" +" Mostrar localización específica:\n" +" ipa location-show location\n" #, fuzzy -#| msgid "Entry %s not found" -msgid "Entry RDN is not 'uid'" -msgstr "Entrada %s no encontrada" +#| msgid "" +#| "\n" +#| " Find all servers:\n" +#| " ipa server-find\n" +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" +"\n" +" Encuentra todos los servidores:\n" +" ipa server-find\n" -#, python-format -msgid "Entry has no '%(attribute)s'" +#, fuzzy +#| msgid "Location" +msgid "Documentation" +msgstr "Ubicación" + +msgid "Exclude from" msgstr "" +#, fuzzy +#| msgid "Include Enabled" +msgid "Include in" +msgstr "Include Habilitado" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" +"Los resultados deberían contener sólo atributo de clave primaria (“%s”)" + +msgid "Help topic" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Version" +msgstr "Permiso" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "Record name" +msgid "Method name" +msgstr "Nombre de registro" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s: no se encuentra %(oname)s" + +#, fuzzy +#| msgid "Display information about a range." +msgid "Display information about a command." +msgstr "Mostrar información sobre un rango." + +#, fuzzy +#| msgid "Search for Sudo Commands." +msgid "Search for commands." +msgstr "Buscar Comandos Sudo." + +#, fuzzy +#| msgid "Run Commands" +msgid "Return command defaults" +msgstr "Ejecutar comandos" + +#, fuzzy +#| msgid "Display information about a host." +msgid "Display information about a class." +msgstr "Mostrar información sobre un host." + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for classes." +msgstr "Buscar roles." + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a help topic." +msgstr "Mostrar información sobre un grupo de red." + +#, fuzzy +#| msgid "Search for hostgroups." +msgid "Search for help topics." +msgstr "Buscar grupos de host." + +#, fuzzy +#| msgid "is required" +msgid "Required" +msgstr "se requiere" + +#, fuzzy +#| msgid "Custom value" +msgid "Multi-value" +msgstr "Valor personal" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "CLI name" +msgstr "Nombre de ACI" + +#, fuzzy +#| msgid "Change password" +msgid "Confirm (password)" +msgstr "Cambiar contraseña" + +#, fuzzy +#| msgid "Default shell" +msgid "Default" +msgstr "Shell predeterminada" + +#, fuzzy +#| msgid "Default users group" +msgid "Default from" +msgstr "Grupo de usuarios predeterminado" + +msgid "Label" +msgstr "" + +#, fuzzy +#| msgid "Advertised by servers" +msgid "Convert on server" +msgstr "Anunciado por los servidores" + +#, fuzzy +#| msgid "Operations Error" +msgid "Option group" +msgstr "Error en Operaciones" + +msgid "Sensitive" +msgstr "" + +#, fuzzy +#| msgid "Positional arguments" +msgid "Positional argument" +msgstr "Argumentos posicionales" + #, fuzzy, python-format -#| msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgid "active user with name \"%(user)s\" already exists" +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(parent)s: no se encuentra %(oname)s" + +#, fuzzy +#| msgid "Display information about a range." +msgid "Display information about a command parameter." +msgstr "Mostrar información sobre un rango." + +#, fuzzy +#| msgid "Search for ranges." +msgid "Search command parameters." +msgstr "Buscar intervalos." + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(parent)s: no se encuentra %(oname)s" + +#, fuzzy +#| msgid "Display information about a named group." +msgid "Display information about a command output." +msgstr "Mostrar información sobre un grupo denominado." + +#, fuzzy +#| msgid "Search for Sudo Command Groups." +msgid "Search for command outputs." +msgstr "Buscar Grupos de Comando Sudo." + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "Member service groups" +msgstr "Grupos de miembro de servicio" + +msgid "Member HBAC service groups" +msgstr "Grupos de servicio de Miembros HBAC" + +#, fuzzy +#| msgid "Member services" +msgid "Member ID user overrides" +msgstr "Servicios de miembros" + +#, fuzzy +#| msgid "Indirect Member users" +msgid "Indirect Member ID user overrides" +msgstr "Usuarios indirectos miembros" + +msgid "Indirect Member permissions" +msgstr "" +"\\n\n" +"Permisos indirectos de miembro " + +msgid "Indirect Member HBAC service" +msgstr "Servicio HBAC de miembro indirecto" + +msgid "Indirect Member HBAC service group" +msgstr "Grupo de servicio HBAC de miembros indirectos " + +msgid "Invalid format. Should be name=value" +msgstr "" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Esta entrada no puede ser activada o desactivada" + +msgid "entry" +msgstr "entrada" + +msgid "entries" +msgstr "entradas" + +msgid "Entry" +msgstr "Entrada" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "no se encuentra la entrada (%(container)s) de contenedor" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s: no se encuentra %(oname)s" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr " %(oname)s con el nombre \"%(pkey)s\" ya existe" #, fuzzy, python-format -#| msgid "Staged user account \"%(value)s\"" -msgid "Stage user %s activated" -msgstr "Cuenta de usuario por etapas \"%(value)s\"" - -#, fuzzy -#| msgid "Add one or more certificates to the user entry" -msgid "Add one or more certificates to the stageuser entry" -msgstr "Añade uno o más certificados a la entrada del usuario" +#| msgid "attribute \"%s\" not allowed" +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "atributo \"%s\" no permitido" #, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "Añadidos certificados al usuario \"%(value)s\"" +#| msgid "attribute \"%s\" not allowed" +msgid "these attributes are not allowed: %(attrs)s" +msgstr "atributo \"%s\" no permitido" #, fuzzy -#| msgid "Remove one or more certificates to the user entry" -msgid "Remove one or more certificates to the stageuser entry" -msgstr "Borra uno o más certificados de la entrada de usuario" +#| msgid "domain is not configured" +msgid "attribute is not configurable" +msgstr "el dominio no está configurado" + +#, fuzzy +#| msgid "The username attribute on the user object" +msgid "No such attribute on this entry" +msgstr "El atributo username sobre el objeto usuario" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "Cambie el nombre del %(ldap_obj_name)s objeto" + +msgid "the entry was deleted while being modified" +msgstr "la entrada fue eliminada mientras estaba siendo modificada" + +#, python-format +msgid "%s" +msgstr "%s" + +#, python-format +msgid "%s to add" +msgstr "%s a añadir" + +#, python-format +msgid "%s to remove" +msgstr "%s a eliminar" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" #, fuzzy, python-format -#| msgid "Removed certificates from user \"%(value)s\"" -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "Certificados borrados del usuario \"%(value)s\"" - -#, fuzzy -#| msgid "Add new principal alias to the user entry" -msgid "Add new principal alias to the stageuser entry" -msgstr "Añade un nuevo alias principal a la entrada de usuario" +#| msgid "Search for services without these managed by hosts." +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." #, fuzzy, python-format #| msgid "Added new aliases to user \"%(value)s\"" -msgid "Added new aliases to stageuser \"%(value)s\"" +msgid "added attribute value to entry %(value)s" msgstr "Añade nuevos alias al usuario \"%(value)s\"" -#, fuzzy -#| msgid "Remove principal alias from the user entry" -msgid "Remove principal alias from the stageuser entry" -msgstr "Borra el alias principal de la entrada de usuario" - #, fuzzy, python-format #| msgid "Removed aliases from user \"%(value)s\"" -msgid "Removed aliases from stageuser \"%(value)s\"" +msgid "removed attribute values from entry %(value)s" msgstr "Borrados alias del usuario \"%(value)s\"" -#, fuzzy -#| msgid "Add one or more certificate mappings to the user entry." -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "Añade uno o más mapeados de certificados a la entrada de usuario." - -#, fuzzy -#| msgid "Remove one or more certificate mappings from the user entry." -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "Borra uno o más mapeados de certificados de la entrada de usuario." - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" +msgid "one or more values to remove" msgstr "" -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" +msgid "The deny type has been deprecated." +msgstr "El tipo deny ha quedado obsoleto." -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" +msgid "HBAC rules" +msgstr "Reglas HBAC" -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Find all servers:\n" -#| " ipa server-find\n" -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -" Encuentra todos los servidores:\n" -" ipa server-find\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Find all servers:\n" -#| " ipa server-find\n" -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" -"\n" -" Encuentra todos los servidores:\n" -" ipa server-find\n" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" +msgid "HBAC Rules" +msgstr "Reglas HBAC" #, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" +msgid "Added HBAC rule \"%(value)s\"" +msgstr "Añadida regla HBAC \"%(value)s\"" #, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d host matched" -#| msgid_plural "%(count)d hosts matched" -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "%(count)d equipo coincidente" -msgstr[1] "%(count)d equipos coincidentes" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added segment \"%(value)s\"" -msgstr "Ha sido agregado el equipo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted segment \"%(value)s\"" -msgstr "Ha sido eliminado el equipo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified segment \"%(value)s\"" -msgstr "Ha sido modificado el equipo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Found '%(value)s'" -msgid "%(value)s" -msgstr "Ha sido encontrado '%(value)s'" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "Suprimida regla HBAC \"%(value)s\"" #, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "Modificada regla HBAC \"%(value)s\"" #, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "%(count)d regla coincidente de HBAC" +msgstr[1] "%(count)d reglas coincidentes de HBAC " + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "Habilitada regla HBAC \"%(value)s\"" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" regla HBAC desactivada " + +msgid "Access time" +msgstr "Hora de acceso" #, fuzzy -#| msgid "UPN suffixes" -msgid "suffixes" -msgstr "Sufijos UPN" - -#, fuzzy -#| msgid "UPN suffixes" -msgid "Topology suffixes" -msgstr "Sufijos UPN" - -msgid "Topology suffix" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d profile matched" -#| msgid_plural "%(count)d profiles matched" -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "%(count)d perfil coincidente" -msgstr[1] "%(count)d perfiles coincidentes" - -#, fuzzy, python-format -#| msgid "Deleted profile \"%(value)s\"" -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Perfil borrado \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added topology suffix \"%(value)s\"" -msgstr "Ha sido agregado el equipo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Ha sido modificado el equipo \"%(value)s\"" +#| msgid "Add target hosts and hostgroups to an HBAC rule." +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "Añadir hosts objetivos y grupos de host a una regla HBAC." msgid "" "\n" -"Verify replication topology for suffix.\n" +"Simulate use of Host-based access controls\n" "\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" -"Privilegio 'write' insuficiente al atributo 'krbLastPwdChange' de la entrada " -"'%s'." - -msgid "" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"Groups of hosts.\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "grupos de host" - -msgid "Host Group" -msgstr "Grupo de Host" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Ha sido agregado el grupo de equipo \"%(value)s\"" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"grupo de red con nombre “%s” ya existe. Los grupos de host y grupos de red " -"comparten un espacio de nombre común" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Ha sido eliminado el grupo de equipo \"%(value)s\"" - -#, fuzzy -#| msgid "host group" -msgid "hostgroup" -msgstr "grupo de host" - -#, fuzzy -#| msgid "privileged group" -msgid "privileged hostgroup" -msgstr "grupo privilegiado" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Ha sido modificado el grupo de equipo \"%(value)s\"" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "%(count)d grupo de equipos coincidente" -msgstr[1] "%(count)d grupos de equipos coincidentes" - -#, fuzzy -#| msgid "Add users that can manage this token." -msgid "Add users that can manage members of this hostgroup." -msgstr "Añadir usuarios que pueden manejar esta ficha." - -#, fuzzy -#| msgid "Remove users that can manage this token." -msgid "Remove users that can manage members of this hostgroup." -msgstr "Quitar usuarios que puedan manejar esta ficha." - -msgid "" -"\n" -"Vaults\n" -msgstr "" -"\n" -"Bóvedas\n" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" -"\n" -"Manejar bóvedas.\n" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" -"\n" -"En base al propietario hay tres categorías de bóveda:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" -"\n" -"Las bóvedas de usuario son bóvedas propietarias usadas por un usuario " -"concreto. Las bóvedas\n" -"privadas son bóvedas propiedad del usuario actual. Las bóvedas de servcio " -"son\n" -"bóvedas propiedad de un servicio. Las bóvedas compartidas son propiedad del " -"administrador\n" -"pero pueden ser usadas por otros usuarios o sevicios.\n" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" -"\n" -"En base al mecanismos de seguridad hay tres tipos de\n" -"bóvedas:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" -"\n" -"La bóveda standard usa un mecanismo seguro para transportar y\n" -"almacenar el secreto. El secreto puede ser sólo recuperado por los usuarios\n" -"que tiene acceso a la bovéda.\n" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" -"\n" -"La bóveda symmetric es similar a la standard, pero\n" -"encripta previamente el secreto usando una contraseña antes de transportar.\n" -"El secreto sólo se puede recuperar usando la misma contraseña.\n" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" -"\n" -"La bóveda asymmetric es similar a la bóveda standard, pero\n" -"encripta el secreto usando una clave pública antes del transporte.\n" -"El secreto sólo se puede recuperar usando la clave privada.\n" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " List vaults:\n" -#| " ipa vault-find\n" -#| " [--user |--service |--shared]\n" -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " List vaults:\n" -#| " ipa vault-find\n" -#| " [--user |--service |--shared]\n" -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " List vaults:\n" -#| " ipa vault-find\n" -#| " [--user |--service |--shared]\n" -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " List vaults:\n" -#| " ipa vault-find\n" -#| " [--user |--service |--shared]\n" -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " List vaults:\n" -#| " ipa vault-find\n" -#| " [--user |--service |--shared]\n" -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " List vaults:\n" -#| " ipa vault-find\n" -#| " [--user |--service |--shared]\n" -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Show global DNS configuration:\n" -#| " ipa dnsconfig-show\n" -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" -"\n" -" Muestra la configuración DNS global:\n" -" ipa dnsconfig-show\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " List vaults:\n" -#| " ipa vault-find\n" -#| " [--user |--service |--shared]\n" -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " List vaults:\n" -#| " ipa vault-find\n" -#| " [--user |--service |--shared]\n" -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " List vaults:\n" -#| " ipa vault-find\n" -#| " [--user |--service |--shared]\n" -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " List vaults:\n" -#| " ipa vault-find\n" -#| " [--user |--service |--shared]\n" -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " List vaults:\n" -#| " ipa vault-find\n" -#| " [--user |--service |--shared]\n" -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " List vaults:\n" -#| " ipa vault-find\n" -#| " [--user |--service |--shared]\n" -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " List vaults:\n" -#| " ipa vault-find\n" -#| " [--user |--service |--shared]\n" -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " List vaults:\n" -#| " ipa vault-find\n" -#| " [--user |--service |--shared]\n" -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " List vaults:\n" -#| " ipa vault-find\n" -#| " [--user |--service |--shared]\n" -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -#, fuzzy -#| msgid "Group container" -msgid "vaultcontainer" -msgstr "Contenedor de grupoi" - -#, fuzzy -#| msgid "Group container" -msgid "vaultcontainers" -msgstr "Contenedor de grupoi" - -#, fuzzy -#| msgid "Group container" -msgid "Vault Containers" -msgstr "Contenedor de grupoi" - -#, fuzzy -#| msgid "Group container" -msgid "Vault Container" -msgstr "Contenedor de grupoi" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -#, fuzzy -#| msgid "only \"ad\" is supported" -msgid "Host is not supported" -msgstr "solo se admite «ad»" - -msgid "KRA service is not enabled" -msgstr "" - -#, fuzzy -#| msgid "Delete an automount location." -msgid "Deleted vault container" -msgstr "Borrar una localización de automontaje." - -#, fuzzy, python-format -#| msgid "Owner" -msgid "owner %s" -msgstr "Propietario" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Add an automember rule.\n" -#| " " -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" -"\n" -" Añadir una regla automiembro.\n" -" " - -#, fuzzy -#| msgid "" -#| "\n" -#| "Vaults\n" -msgid "vault" -msgstr "" -"\n" -"Bóvedas\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| "Vaults\n" -msgid "vaults" -msgstr "" -"\n" -"Bóvedas\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| "Vaults\n" -msgid "Vaults" -msgstr "" -"\n" -"Bóvedas\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| "Vaults\n" -msgid "Vault" -msgstr "" -"\n" -"Bóvedas\n" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -#, fuzzy -#| msgid "Modify a vault." -msgid "Add a vault." -msgstr "Modificar una bóveda" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added vault \"%(value)s\"" -msgstr "Ha sido agregado el equipo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted trust \"%(value)s\"" -msgid "Deleted vault \"%(value)s\"" -msgstr "Confianza borrada \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "%(count)d trust matched" -#| msgid_plural "%(count)d trusts matched" -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d confianza encontrada" -msgstr[1] "%(count)d confianzas encontradas" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified vault \"%(value)s\"" -msgstr "Ha sido modificado el equipo \"%(value)s\"" - -#, fuzzy -#| msgid "trust configuration" -msgid "Vault configuration" -msgstr "configuración de la confianza" - -#, fuzzy -#| msgid "IPA DNS servers" -msgid "IPA KRA servers" -msgstr "Servidores IPA DNS" - -#, fuzzy -#| msgid "IPA servers configured as AD trust agents" -msgid "IPA servers configured as key recovery agents" -msgstr "Servidores IPA configurados como agentes de confianza AD" - -#, fuzzy, python-format -#| msgid "Archive data into a vault." -msgid "Archived data into vault \"%(value)s\"" -msgstr "Datos archivados en una bóveda" - -#, fuzzy -#| msgid "Archive data into a vault." -msgid "Retrieve data from a vault." -msgstr "Datos archivados en una bóveda" - -#, fuzzy, python-format -#| msgid "Removed aliases from host \"%(value)s\"" -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Borrados alias del host \"%(value)s\"" - -msgid "No archived data." -msgstr "" - -#, fuzzy -#| msgid "Checks if any of the servers has the DNS service enabled." -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" -"Comprueba si alguno de los servidores tiene un servicio DNS habilitado." - -msgid "netgroups" -msgstr "grupos de red" - -msgid "Netgroups" -msgstr "Grupos de red" - -msgid "Netgroup" -msgstr "Grupo de red" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "\"%(value)s\"netgroup añadido" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"grupo de host con nombre “%s” ya existe. Los grupos de nombres y los grupos " -"de red comparten un espacio de nombre común" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "%(value)s\" de netgroup eliminados" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "netgroup modificado \"%(value)s\"" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d autoservicio coincidente" -msgstr[1] "%(count)d autoservicios coincidentes" - -msgid "One time password commands" -msgstr "Comandos de contraseña de una vez" - -msgid "OTP configuration options" -msgstr "Opciones de configuración OTP" - -msgid "OTP Configuration" -msgstr "Configuración OTP" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Cambio de contraseña para \"%(value)s\"" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" -"\n" -"Herramientas de informe de estados de características Kerberos PKINIT.\n" -"\n" -"Informa de los másters IPA sobre los cuales Kerberos PKINIT está habilitado " -"o deshabilitado\n" -"\n" -"EJEMPLOS:\n" -" Lista el estado PKINIT sobre todos los másters:\n" -" ipa pkinit-status\n" -"\n" -" Comprueba el estado PKINIT sobre `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" Lista todos los másters IPA con PKINIT deshabilitado:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"Para más información sobre soporte PKINIT vea:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" - -msgid "pkinit" -msgstr "pkinit" - -msgid "PKINIT" -msgstr "" -" Los certificados de entrada deben estar codificados en DER. \n" -" Tenga en cuenta que no puede ser un normalizador en la Param, ya que " -"solamente las variables de \n" -" Unicode se normalizan.\n" -" " - -msgid "PKINIT status" -msgstr "Estado PKINIT" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "Sí PKINIT está habilitado o deshabilitado" - -msgid "Report PKINIT status on the IPA masters" -msgstr "Informa el estado PKINIT sobre los másters IPA" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)s servidor coincide" -msgstr[1] "%(count)s servidores coinciden" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" -"\n" -"Servidores Proxy RADIUS\n" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" -"\n" -"Gestionar Servidores Proxy RADIUS.\n" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" -"\n" -"IPA soporta el uso de servidores proxy RADIUS externos para autenticaciones " -"krb5\n" -"OTP. Esto permite una gran oferta de flexibilidad cuando se integra con " -"servicios de \n" -"autenticación de tercera parte.\n" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" -"\n" -" Añadir un nuevo servidor:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" -"\n" -" Encontrar todos los servidores cuyas entradas incluyan la cadena \"example." -"com\":\n" -" ipa radiusproxy-find example.com\n" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" -"\n" -" Examinar la configuración:\n" -" ipa radiusproxy-show MyRADIUS\n" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" -"\n" -" Cambiar el secreto:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" -"\n" -" Borrar una configuración:\n" -" ipa radiusproxy-del MyRADIUS\n" - -msgid "invalid attribute name" -msgstr "nombre de atributo no válido" - -msgid "invalid port number" -msgstr "número de puerto no válido" - -msgid "RADIUS proxy server" -msgstr "Servidor proxy RADIUS" - -msgid "RADIUS proxy servers" -msgstr "Servidores proxy RADIUS" - -msgid "RADIUS Servers" -msgstr "Servidores RADIUS" - -msgid "RADIUS Server" -msgstr "Servidor RADIUS" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "Añadido servidor proxy RADIUS \"%(value)s\"" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "Borrado servidor proxy RADIUS \"%(value)s\"" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "Modificado servidor proxy RADIUS \"%(value)s\"" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "%(count)d servidor proxy RADIUS coincidente" -msgstr[1] "%(count)d servidores proxy RADIUS coincidentes" - -msgid "A list of ACI values" -msgstr "Una lista de valores ACI" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "tipo, filtro, subárbol y grupo de destino, se excluyen mutuamente" - -msgid "ACI prefix is required" -msgstr "Se requiere prefijo de ACI " - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" -"es necesario como mínimo alguno de: tipo, filtro, subárbol, grupo de " -"destino, atributos, o miembro de " - -msgid "filter and memberof are mutually exclusive" -msgstr "filtro y memberof son mutuamente excluyentes" - -msgid "group, permission and self are mutually exclusive" -msgstr "grupo, permisos y auto son mutuamente excluyentes" - -msgid "One of group, permission or self is required" -msgstr "Uno de grupo, permiso o self es necesario" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "El grupo '%s' no existe" - -msgid "empty filter" -msgstr "Vaciar filtro" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Error de sintaxis:%(error)s " - -#, python-format -msgid "invalid DN (%s)" -msgstr "DN no válido (%s)" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "No se encuentra un ACI cuyo nombre sea \"%s\"" - -msgid "ACI object." -msgstr "Objeto ACI." - -msgid "ACIs" -msgstr "ACI" - -msgid "ACI" -msgstr "ACI" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "Ha sido creado ACI \"%(value)s\"" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "Ha sido eliminado ACI \"%(value)s\"" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "Ha sido modificado ACI \"%(value)s\"" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d ACI coincidente" -msgstr[1] "%(count)d ACIs coincidentes" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "ACI renombrado a \"%(value)s\"" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" -#, fuzzy -#| msgid "must be at least 1" -msgid "must be at least 10" -msgstr "debe ser al menos 1" +msgid "Unresolved rules in --rules" +msgstr "Eliminar miembro desde un grupo." -msgid "configuration options" -msgstr "opciones de configuración" - -msgid "Configuration" -msgstr "Configuración" +#, python-format +msgid "Access granted: %s" +msgstr "Acceso obtenido: %s" #, fuzzy -#| msgid "Maximum username length" -msgid "Maximum hostname length" -msgstr "Largo máximo para nombre de usuario" +#| msgid "View" +msgid "ID View" +msgstr "Ver" #, fuzzy -#| msgid "" -#| "\n" -#| "IPA servers\n" -msgid "IPA masters" -msgstr "" -"\n" -"IPA servers\n" - -msgid "List of all IPA masters" -msgstr "" +#| msgid "Assigned ID View" +msgid "system ID View" +msgstr "Vista ID asignada" #, fuzzy -#| msgid "Include IPA master entries" -msgid "Hidden IPA masters" -msgstr "Incluir entradas IPA maestro" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" +#| msgid "View" +msgid "ID Views" +msgstr "Ver" #, fuzzy -#| msgid "IPA DNS servers" -msgid "IPA CA servers" -msgstr "Servidores IPA DNS" +#| msgid "User object class" +msgid "User object overrides" +msgstr "Clase de objeto de usuario" #, fuzzy -#| msgid "IPA server configured as DNSSec key master" -msgid "IPA servers configured as certificate authority" -msgstr "Servidor IPA configurado como clave maestra DNSSec" +#| msgid "Group object class" +msgid "Group object overrides" +msgstr "Clase de objeto de grupo" #, fuzzy -#| msgid "IPA DNS servers" -msgid "Hidden IPA CA servers" -msgstr "Servidores IPA DNS" - -#, fuzzy -#| msgid "IPA server configured as DNSSec key master" -msgid "Hidden IPA servers configured as certificate authority" -msgstr "Servidor IPA configurado como clave maestra DNSSec" - -#, fuzzy -#| msgid "Cannot hide CA renewal master." -msgid "IPA CA renewal master" -msgstr "No se puede ocultar el maestro de renovación de CA." - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -#, fuzzy -#| msgid "IPA servers configured as AD trust agents" -msgid "IPA servers configured as key recovery agent" -msgstr "Servidores IPA configurados como agentes de confianza AD" - -#, fuzzy -#| msgid "IPA DNS servers" -msgid "Hidden IPA KRA servers" -msgstr "Servidores IPA DNS" - -#, fuzzy -#| msgid "IPA servers configured as AD trust agents" -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "Servidores IPA configurados como agentes de confianza AD" +#| msgid "Host category the rule applies to" +msgid "Hosts the view applies to" +msgstr "Categoría del equipo al que se aplica la regla" msgid "Domain resolution order" msgstr "" @@ -20176,254 +24424,226 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -#, fuzzy -#| msgid "IPA server configured as DNSSec key master" -msgid "IPA servers configured as domain name server" -msgstr "Servidor IPA configurado como clave maestra DNSSec" - -#, fuzzy -#| msgid "IPA DNS servers" -msgid "Hidden IPA DNS servers" -msgstr "Servidores IPA DNS" - -#, fuzzy -#| msgid "List of IPA masters configured as DNS servers" -msgid "Hidden IPA servers configured as domain name server" -msgstr "Lista de los maestros IPA configurados como servidores DNS" - -#, fuzzy -#| msgid "IPA DNSSec key master" -msgid "DNSec key master" -msgstr "Clave maestra IPA DNSSec" - -#, fuzzy -#| msgid "options are not allowed" -msgid "Empty domain is not allowed" -msgstr "las opciones no están permitidas" +#, fuzzy, python-format +#| msgid "Added ID range \"%(value)s\"" +msgid "Added ID View \"%(value)s\"" +msgstr "Se añadió el intervalo de ID «%(value)s»" #, fuzzy, python-format -#| msgid "invalid domain-name: %s" -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "nombre de dominio no válido: %s" +#| msgid "Deleted ID range \"%(value)s\"" +msgid "Deleted ID View \"%(value)s\"" +msgstr "Se eliminó el intervalo de ID «%(value)s»" #, fuzzy, python-format -#| msgid "Removed information about the trusted domain \"%(value)s\"" -msgid "Server has no information about domain '%(domain)s'" -msgstr "Borrada información sobre el dominio de confianza \"%(value)s\"" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "The group doesn't exist" -msgstr "El grupo no existe" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "atributo \"%s\" no permitido" - -msgid "May not be empty" -msgstr "Puede no estar vacío" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" +#| msgid "Modified ID range \"%(value)s\"" +msgid "Modified an ID View \"%(value)s\"" +msgstr "Modificar rango ID \"%(value)s\"" #, fuzzy, python-format -#| msgid "error on server '%(server)s': %(error)s" -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "error sobre el servidor '%(server)s': %(error)s" +#| msgid "%(count)d ACI matched" +#| msgid_plural "%(count)d ACIs matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "%(count)d ACI coincidente" +msgstr[1] "%(count)d ACIs coincidentes" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" #, fuzzy -#| msgid "SELinux user %(user)s not found in ordering list (in config)" -msgid "SELinux user map default user not in order list" +#| msgid "realm not found\n" +msgid "not found" +msgstr "reino no encontrado\n" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." msgstr "" -"Usuario SELinux %(user)s no encontrado en la lista de pedidos (en config)" msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" -msgid "groups" -msgstr "grupos" +#, fuzzy +#| msgid "ACI object." +msgid "IPA object" +msgstr "Objeto ACI." -msgid "User Group" -msgstr "Grupo Usuario" +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" -#, python-format -msgid "Added group \"%(value)s\"" +#, fuzzy, python-format +#| msgid "Conditions that could not be removed" +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "Condiciones que no pueden ser eliminadas" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +#, fuzzy +#| msgid "Add a new IPA service." +msgid "Add a new ID override." +msgstr "Añadir un nuevo servicio IPA." + +#, fuzzy, python-format +#| msgid "Added ID range \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" +msgstr "Se añadió el intervalo de ID «%(value)s»" + +#, fuzzy +#| msgid "Delete an ID range." +msgid "Delete an ID override." +msgstr "Eliminar un intervalo de ID." + +#, fuzzy, python-format +#| msgid "Deleted ID range \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" +msgstr "Se eliminó el intervalo de ID «%(value)s»" + +#, fuzzy +#| msgid "Modify an HBAC service." +msgid "Modify an ID override." +msgstr "Modificar un servicio HBAC." + +#, fuzzy, python-format +#| msgid "Modified ID range \"%(value)s\"" +msgid "Modified an ID override \"%(value)s\"" +msgstr "Modificar rango ID \"%(value)s\"" + +msgid "ID override" +msgstr "" + +#, fuzzy +#| msgid "DNS zone root record cannot be renamed" +msgid "ID overrides cannot be renamed" +msgstr "El registro DNS de zona raíz no puede ser renombrado" + +#, fuzzy +#| msgid "Search for IPA services." +msgid "Search for an ID override." +msgstr "Buscar servicios IPA." + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d servicio coincidente" +msgstr[1] "%(count)d servicios coincidentes\t\t\t" + +#, fuzzy +#| msgid "Display information about an IPA service." +msgid "Display information about an ID override." +msgstr "Mostrar información sobre un servicio IPA." + +#, fuzzy +#| msgid "User ID" +msgid "User ID override" +msgstr "ID de usuario" + +msgid "User ID overrides" +msgstr "" + +#, fuzzy +#| msgid "Group ID Number" +msgid "Group ID override" +msgstr "Número de Identificación de Grupo" + +#, fuzzy +#| msgid "Group ID Number" +msgid "Group ID overrides" +msgstr "Número de Identificación de Grupo" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "Añade uno o más certificados a la entrada del usuario" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Añadidos certificados al usuario \"%(value)s\"" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "Borra uno o más certificados de la entrada de usuario" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "Certificados borrados del usuario \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" +msgstr "Ha sido agregado el servicio \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Ha sido eliminado el servicio \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Ha sido modificado el servicio \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "%(count)d servicio coincidente" +msgstr[1] "%(count)d servicios coincidentes\t\t\t" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" msgstr "Ha sido agregado el grupo \"%(value)s\"" -msgid "gid cannot be set for external group" -msgstr "gid no puede ser fijado para un grupo externo" - -#, python-format -msgid "Deleted group \"%(value)s\"" +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" msgstr "Ha sido eliminado el grupo \"%(value)s\"" -msgid "privileged group" -msgstr "grupo privilegiado" - -#, python-format -msgid "Modified group \"%(value)s\"" +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified an Group ID override \"%(value)s\"" msgstr "Ha sido modificado el grupo \"%(value)s\"" -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" msgstr[0] "%(count)d grupo coincidente" msgstr[1] "%(count)d grupos coincidentes" -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"No se puede llevar a cabo la validación del miembro externo sin el soporte " -"para Samba 4 instalado. Asegúrese de que tiene instalado el sub-paquete " -"server-trust-ad de IPA en el servidor" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" -"No puede llevar a cabo la operación de unión si el dominio propio " -"configurado. Asegúrese primero que está corriendo ipa-adtrust-install sobre " -"el servidor IPA" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Ha sido desasociado el grupo \"%(value)s\" del usuario \"%(value)s\"" - -msgid "not allowed to modify user entries" -msgstr "no se permite modificar las entradas de los usuarios" - -msgid "not allowed to modify group entries" -msgstr "no se permite modificar las entradas de los grupos" - -msgid "Not a managed group" -msgstr "No es un grupo administrado" - -#, fuzzy -#| msgid "Add users that can manage this token." -msgid "Add users that can manage members of this group." -msgstr "Añadir usuarios que pueden manejar esta ficha." - -#, fuzzy -#| msgid "Remove users that can manage this token." -msgid "Remove users that can manage members of this group." -msgstr "Quitar usuarios que puedan manejar esta ficha." - msgid "" "\n" "Permissions\n" @@ -20725,1636 +24945,35 @@ msgid_plural "%(count)d permissions matched" msgstr[0] "%(count)d permiso coincidente" msgstr[1] " %(count)d permisos coincidentes" -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"Fichas OTP\n" +msgid "delegation" +msgstr "delegación" -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" -"\n" -"Gestionar fichas OTP.\n" +msgid "delegations" +msgstr "delegaciones" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" -"\n" -"IPA soporta el uso de fichas OTP para la autenticación de varios factores. " -"Este\n" -"código habilita la gestión de las fichas OTP.\n" +msgid "Delegations" +msgstr "Delegaciones" -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" -"\n" -" Añadir una nueva ficha:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Examinar la ficha:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" -"\n" -" Cambiar el vendedor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Borrar una ficha:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" - -msgid "OTP token" -msgstr "Ficha OTP" - -msgid "OTP tokens" -msgstr "Fichas OTP" - -msgid "OTP Tokens" -msgstr "Fichas OTP" - -msgid "OTP Token" -msgstr "Ficha OTP" - -msgid "URI" -msgstr "URI" +msgid "Delegation" +msgstr "Delegación" #, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Añadir ficha OTP \"%(value)s\"" - -msgid "cannot be empty" -msgstr "no puede estar vacío" +msgid "Added delegation \"%(value)s\"" +msgstr "Delegación añadida \"%(value)s\"" #, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Ficha OTP borrada \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" +msgstr "Delegación eliminada \"%(value)s\"" #, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Ficha OTP modificada \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" +msgstr "Delegación modificada \"%(value)s\"" #, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "%(count)d OTP ficha coincidente" -msgstr[1] "%(count)d OTP fichas coincidentes" - -#, fuzzy -#| msgid "Sudo Rules" -msgid "" -"\n" -"Sudo Rules\n" -msgstr "Reglas Sudo" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "esta opción ha quedado obsoleta." - -msgid "sudo rules" -msgstr "reglas sudo" - -msgid "Sudo Rules" -msgstr "Reglas Sudo" - -msgid "Sudo Rule" -msgstr "Regla Sudo" - -#, fuzzy, python-format -#| msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" -"la prioridad debe ser un valor único (%(prio)d que ya esté siendo utilizado " -"por %(gname)s)" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Añadida Regla Sudo “%(value)s”" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Borrada Regla Sudo “%(value)s”" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Regla Sudo Modificada “%(value)s”" - -#, fuzzy, python-format -#| msgid "host category cannot be set to 'all' while there are allowed hosts" -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" -"la categoría de host no puede ser establecida a 'all' mientras hay host " -"permitidos" - -msgid "users" -msgstr "usuarios" - -#, fuzzy -#| msgid "Commands" -msgid "command" -msgstr "Comandos" - -#, fuzzy -#| msgid "Commands" -msgid "commands" -msgstr "Comandos" - -#, fuzzy -#| msgid "RunAs Users" -msgid "runAs user" -msgstr "RunAs Usuarios" - -#, fuzzy -#| msgid "RunAs Users" -msgid "runAs users" -msgstr "RunAs Usuarios" - -#, fuzzy -#| msgid "groups" -msgid "group runAs" -msgstr "grupos" - -#, fuzzy -#| msgid "RunAs Groups" -msgid "runAs groups" -msgstr "Grupos RunAs" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "%(count)d Regla Sudo emparejada" -msgstr[1] "%(count)d Reglas Sudo emparejadas" - -#, fuzzy -#| msgid "hosts cannot be added when host category='all'" -msgid "commands cannot be added when command category='all'" -msgstr "hosts no puede ser añadido con categoría de host='all'" - -#, fuzzy -#| msgid "users cannot be added when user category='all'" -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "no se pueden añadir usuarios cuando la categoría de usuario='all'" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "comandos para controlar la configuración sudo" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" -"\n" -"Comandos de Sudo\n" -"\n" -"Comandos usados como partes integrantes de sudo\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Crear un comando nuevo\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Eliminar un comando\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" - -msgid "sudo command" -msgstr "comando sudo" - -msgid "sudo commands" -msgstr "comandos sudo" - -msgid "Sudo Commands" -msgstr "Comandos de sudo" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Añadido Comando Sudo “%(value)s”" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Borrado Comando Sudo “%(value)s”" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Modificado Comando Sudo “%(value)s”" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "%(count)d Comando Sudo emparejado" -msgstr[1] "%(count)d Comandos Sudo emparejados" - -#, fuzzy -#| msgid "" -#| "\n" -#| "Groups of Sudo Commands\n" -#| "\n" -#| "Manage groups of Sudo Commands.\n" -#| "\n" -#| "EXAMPLES:\n" -#| "\n" -#| " Add a new Sudo Command Group:\n" -#| " ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -#| "\n" -#| " Remove a Sudo Command Group:\n" -#| " ipa sudocmdgroup-del admincmds\n" -#| "\n" -#| " Manage Sudo Command Group membership, commands:\n" -#| " ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -#| "admincmds\n" -#| "\n" -#| " Manage Sudo Command Group membership, commands:\n" -#| " ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -#| "\n" -#| " Show a Sudo Command Group:\n" -#| " ipa group-show localadmins\n" -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" -"\n" -"Grupos de Comandos Sudo\n" -"\n" -"Gestionar grupos de Comandos Sudo.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Añadir un nuevo Grupo de Comandos Sudo:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Borrar un Grupo de Comando Sudo:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Gestionar pertenencia a Grupo de Comando Sudo, comandos:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Gestionar pertenencia a Grupo de Comando Sudo, comandos:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Mostrat un Grupo de Comando Sudo:\n" -" ipa group-show localadmins\n" - -msgid "sudo command group" -msgstr "grupo de comando sudo" - -msgid "sudo command groups" -msgstr "grupos de comando sudo" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Añadido Grupo de Comando Sudo “%(value)s”" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Borrado Grupo de Comando Sudo “%(value)s”" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Modificado Grupo de Comando Sudo “%(value)s”" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "%(count)d Grupo de Comando Sudo emparejado" -msgstr[1] "%(count)d Grupos de Comando Sudo emparejados" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" -"\n" -"Dominios de reino\n" -"\n" -"Gestiona la lista de dominios asociados con el reino IPA.\n" -"\n" -"Esta lista es útil para los Controladores de Dominio de otros reinos que " -"tienen\n" -"establecida confianza con este reino IPA. Necesitan la información para " -"saber que \n" -"peticiones deberían ser reenviadas a KDC de este reino IPA.\n" -"\n" -"Gestión automática: se añade un dominio automáticamente a la lista de " -"dominios\n" -"cuando se crea una nueva Zona DNS gestionada por IPA. Lo mismo se aplica " -"para el borrado.\n" -"\n" -"DNS extermanete gestionado: los dominios que no son gestionados en el " -"servidor\n" -"IPA DNA necesitan ser añadidos manualmente a la lista usando el comando ipa " -"realmdomains-mod command.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Muestra la lista actual de dominios reino:\n" -" ipa realmdomains-show\n" -"\n" -" Reemplaza la lista de dominios reino:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Añade un dominio a la lista de dominios reino:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Borra un dominio de la lista de dominios reino:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" - -msgid "Realm domains" -msgstr "Dominios reino" - -msgid "Realm Domains" -msgstr "Dominios Reino" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" -"\n" -" Modificar dominios reino\n" -"\n" -" Comprobación DNS: Cuando añade manualmente un dominio a la lista, por\n" -" defecto se lleva a cabo una comprobación DNS. Asegura que el dominio " -"está\n" -" asociado con el reino IPA, comprobando si el dominio tiene un registro " -"_kerberos\n" -" TXT que contenga el nombre del reino IPA realm name. Esta comprobación " -"se\n" -" puede saltar especificando la opción --force.\n" -"\n" -" Eliminación: cuando un dominio reino que tiene una zona DNS coincidente\n" -" gestionada por IPA se borra, el registro _kerberos TXT correspondiente " -"en la\n" -" es borrado automáticamente también. Los demás registros en la zona o la " -"zona\n" -" no son afectados.\n" -" " - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" -"La zona DNS para cada realmdomain debe contener registros SOA o NS. No se " -"han encontrado registros para: %s" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "Los siguientes dominio no pertenecen a este reino: %(domains)s" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" -"El reino de los siguientes dominios podrían no ser detectados: %(domains)s. " -"Si estos dominios pertenecen a este reino, cree por favor un registro " -"_kerberos TXT que contenga \"%(realm)s\" en cada uno." - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" -"La opción --domain no puede ser usada junto con --add-domain o --del-domain. " -"Use --domain para especificar explícitamente la lista de todo el dominio, " -"para añadir/borrar dominios concretos, use --add-domain/del-domain." - -msgid "IPA server domain cannot be omitted" -msgstr "Servidor de domino IPA no puede ser omitido" - -msgid "IPA server domain cannot be deleted" -msgstr "Servidor de dominio IPA no puede ser borrado" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" -"\n" -"Información devuelta sobre la identidad actualmente autentificada\n" -"\n" -"El comando quien soy devuelve información sobre como obtener más detalles " -"sobre la identidad autentificada para esta petición. La información " -"incluye:\n" -"\n" -" * tipo de objeto\n" -" * comando para recuperar detalles del objeto\n" -" * argumentos y opciones a pasar al comando\n" -"\n" -"La información se devuelve como un diccionario. Los ejemplos de abajo usan " -"la salida 'key: value' con propósitos ilustrativos.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Buscar como usuario IPA:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Buscar como un usuario desde un dominio de confianza:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Buscar como host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Buscar como servicio Kerberos:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" - -msgid "Describe currently authenticated identity." -msgstr "Describe la identidad actualmente autentificada." - -msgid "Object class name" -msgstr "Nombre de clase objeto" - -msgid "Function to get details" -msgstr "Función para obtener detalles" - -msgid "Arguments to details function" -msgstr "Argumentos para detalles de la función" - -msgid "Cannot query Directory Manager with API" -msgstr "No se puede cosultar al Administrador de Directorios con API" - -msgid "kerberos ticket policy settings" -msgstr "ajustes de la entrada de política kerberos" - -msgid "Kerberos Ticket Policy" -msgstr " Política de tiquete de Kerberos" - -#, fuzzy -#| msgid "Max life" -msgid "OTP max life" -msgstr "Vida máxima" - -#, fuzzy -#| msgid "Maximum ticket life (seconds)" -msgid "OTP token maximum ticket life (seconds)" -msgstr "Duración máxima del ticket (en segundos)" - -#, fuzzy -#| msgid "Max renew" -msgid "OTP max renew" -msgstr "Renovación máxima" - -#, fuzzy -#| msgid "Maximum renewable age (seconds)" -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "Duración máxima renovable (en segundos)" - -#, fuzzy -#| msgid "Max life" -msgid "RADIUS max life" -msgstr "Vida máxima" - -#, fuzzy -#| msgid "Maximum ticket life (seconds)" -msgid "RADIUS maximum ticket life (seconds)" -msgstr "Duración máxima del ticket (en segundos)" - -#, fuzzy -#| msgid "RADIUS proxy server name" -msgid "RADIUS max renew" -msgstr "Nombre del servidor proxy RADIUS" - -#, fuzzy -#| msgid "Maximum renewable age (seconds)" -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "Duración máxima renovable (en segundos)" - -#, fuzzy -#| msgid "Max life" -msgid "PKINIT max life" -msgstr "Vida máxima" - -#, fuzzy -#| msgid "Maximum ticket life (seconds)" -msgid "PKINIT maximum ticket life (seconds)" -msgstr "Duración máxima del ticket (en segundos)" - -#, fuzzy -#| msgid "Max renew" -msgid "PKINIT max renew" -msgstr "Renovación máxima" - -#, fuzzy -#| msgid "Maximum renewable age (seconds)" -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "Duración máxima renovable (en segundos)" - -msgid "Hardened max life" -msgstr "" - -#, fuzzy -#| msgid "Maximum ticket life (seconds)" -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "Duración máxima del ticket (en segundos)" - -msgid "Hardened max renew" -msgstr "" - -#, fuzzy -#| msgid "Maximum renewable age (seconds)" -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "Duración máxima renovable (en segundos)" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "La política de entrada para %s podría no ser leída" - -msgid "Default ticket policy could not be read" -msgstr "La política de entrada por defecto podría no ser leída" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" -"\n" -"Localizaciones IPA\n" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" -"\n" -"Manipular localizaciones DNS\n" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" -"\n" -" Encontrar todas las localizaciones:\n" -" ipa location-find\n" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" -"\n" -" Mostrar localización específica:\n" -" ipa location-show location\n" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" -"\n" -" Añadir localización:\n" -" ipa location-add location --description 'My location'\n" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" -"\n" -" Borrar localización:\n" -" ipa location-del location\n" - -msgid "location" -msgstr "localización" - -msgid "locations" -msgstr "localizaciones" - -msgid "IPA Locations" -msgstr "Localizaciones IPA" - -msgid "IPA Location" -msgstr "Localización IPA" - -msgid "Location name" -msgstr "Nombre de localización" - -msgid "IPA location name" -msgstr "Nombre de localización IPA" - -msgid "IPA Location description" -msgstr "Descripción de Localización IPA" - -msgid "Servers" -msgstr "Servidores" - -msgid "Servers that belongs to the IPA location" -msgstr "Servidores que pertenecen a la localización IPA" - -msgid "Advertised by servers" -msgstr "Anunciado por los servidores" - -msgid "List of servers which advertise the given location" -msgstr "Lista de servidores que anuncian la localización dada" - -msgid "Add a new IPA location." -msgstr "Añadir una nueva localización IPA." - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Añadida localización IPA \"%(value)s\"" - -msgid "Delete an IPA location." -msgstr "Borrar una localización IPA." - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Borrada localización IPA \"%(value)s\"" - -msgid "IPA Server" -msgstr "Servidor IPA" - -msgid "Modify information about an IPA location." -msgstr "Modificar información sobre localización IPA." - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "Modificada localización IPA \"%(value)s\"" - -msgid "Search for IPA locations." -msgstr "Buscar localizaciones IPA." - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "%(count)d localización IPA emparejada" -msgstr[1] "%(count)d localizaciones IPA emparejadas" - -msgid "Display information about an IPA location." -msgstr "Muestra información sobre una localización IPA." - -msgid "Servers in location" -msgstr "Servidores en localización" - -#, fuzzy -#| msgid "LDAP schema" -msgid "" -"\n" -"API Schema\n" -msgstr "Esquema LDAP" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Show specific location:\n" -#| " ipa location-show location\n" -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" -"\n" -" Mostrar localización específica:\n" -" ipa location-show location\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Find all servers:\n" -#| " ipa server-find\n" -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" -"\n" -" Encuentra todos los servidores:\n" -" ipa server-find\n" - -msgid "Name" -msgstr "Nombre" - -#, fuzzy -#| msgid "Location" -msgid "Documentation" -msgstr "Ubicación" - -msgid "Exclude from" -msgstr "" - -#, fuzzy -#| msgid "Include Enabled" -msgid "Include in" -msgstr "Include Habilitado" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" -"Los resultados deberían contener sólo atributo de clave primaria (“%s”)" - -msgid "Help topic" -msgstr "" - -#, fuzzy -#| msgid "Permission" -msgid "Version" -msgstr "Permiso" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -#| msgid "Record name" -msgid "Method name" -msgstr "Nombre de registro" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s: no se encuentra %(oname)s" - -#, fuzzy -#| msgid "Display information about a range." -msgid "Display information about a command." -msgstr "Mostrar información sobre un rango." - -#, fuzzy -#| msgid "Search for Sudo Commands." -msgid "Search for commands." -msgstr "Buscar Comandos Sudo." - -#, fuzzy -#| msgid "Run Commands" -msgid "Return command defaults" -msgstr "Ejecutar comandos" - -#, fuzzy -#| msgid "Display information about a host." -msgid "Display information about a class." -msgstr "Mostrar información sobre un host." - -#, fuzzy -#| msgid "Search for roles." -msgid "Search for classes." -msgstr "Buscar roles." - -#, fuzzy -#| msgid "Display information about a netgroup." -msgid "Display information about a help topic." -msgstr "Mostrar información sobre un grupo de red." - -#, fuzzy -#| msgid "Search for hostgroups." -msgid "Search for help topics." -msgstr "Buscar grupos de host." - -#, fuzzy -#| msgid "is required" -msgid "Required" -msgstr "se requiere" - -#, fuzzy -#| msgid "Custom value" -msgid "Multi-value" -msgstr "Valor personal" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -#| msgid "ACI name" -msgid "CLI name" -msgstr "Nombre de ACI" - -#, fuzzy -#| msgid "Change password" -msgid "Confirm (password)" -msgstr "Cambiar contraseña" - -#, fuzzy -#| msgid "Default shell" -msgid "Default" -msgstr "Shell predeterminada" - -#, fuzzy -#| msgid "Default users group" -msgid "Default from" -msgstr "Grupo de usuarios predeterminado" - -msgid "Label" -msgstr "" - -#, fuzzy -#| msgid "Advertised by servers" -msgid "Convert on server" -msgstr "Anunciado por los servidores" - -#, fuzzy -#| msgid "Operations Error" -msgid "Option group" -msgstr "Error en Operaciones" - -msgid "Sensitive" -msgstr "" - -#, fuzzy -#| msgid "Positional arguments" -msgid "Positional argument" -msgstr "Argumentos posicionales" - -#, fuzzy, python-format -#| msgid "%(parent)s: %(oname)s not found" -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(parent)s: no se encuentra %(oname)s" - -#, fuzzy -#| msgid "Display information about a range." -msgid "Display information about a command parameter." -msgstr "Mostrar información sobre un rango." - -#, fuzzy -#| msgid "Search for ranges." -msgid "Search command parameters." -msgstr "Buscar intervalos." - -#, fuzzy, python-format -#| msgid "%(parent)s: %(oname)s not found" -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(parent)s: no se encuentra %(oname)s" - -#, fuzzy -#| msgid "Display information about a named group." -msgid "Display information about a command output." -msgstr "Mostrar información sobre un grupo denominado." - -#, fuzzy -#| msgid "Search for Sudo Command Groups." -msgid "Search for command outputs." -msgstr "Buscar Grupos de Comando Sudo." - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" -"=======\n" -"ADVERTENCIA:\n" -"\n" -"El plugin DNA en 389-ds asignará IDs basados en el rango configurado para " -"el\n" -"dominio local. Actualmente el plugin DNA *no puede* ser reconfigurado en " -"base a\n" -"los rangos locales establecidos por medio de esta familia de comandos.\n" -"\n" -"El cambio de configuración manual ha de ser hecho en la configuración del " -"plugin\n" -"DNA para e nuevo rango local. Especialmente, el atributo dnaNextRange de\n" -"'cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " -"ha\n" -"sido modificado para coincidir con el nuevo rango.\n" -"=======\n" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "Intervalos de ID" - -msgid "ID Range" -msgstr "Intervalo de ID" - -msgid "local domain range" -msgstr "intervalo de dominios locales" - -msgid "Active Directory domain range" -msgstr "Intervalo de dominios de Active Directory" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "Rango de confianza Active Directory con atributos POSIX" - -msgid "ID range type, one of allowed values" -msgstr "Tipo de rango ID, uno de los siguientes valores" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" -"la modificación de rango dejando objetos con ID fuera del rango definido no " -"está permitida" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"No se puede llevar a cabo la validación SID sin el soporte de Samba 4 " -"instalado. Asegúrese de que tiene instalado el sub paquete server-trust-ad " -"de IPA en el servidor" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" -"Los fideicomisos a través del reino no están instalados. Asegúrese de que " -"está corriendo ipa-adtrust-install en el servidor IPA primero" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "SID no es reconocido como un SID válido para el dominio de confianza" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" -"\n" -" Añadir un nuevo rango ID.\n" -"\n" -" Para añadir un nuevo rango ID usted debe especificar siempre\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Adicionalmente\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" puede ser dado para un nuevo rangi ID para el dominio local mientras\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" debe ser dado para añadir un nuevo rango para un dominio AD de " -"confianza.\n" -"\n" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "Se añadió el intervalo de ID «%(value)s»" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "Las opciones dom-sid y dom-name no pueden ser usadas juntas" - -msgid "Specified trusted domain name could not be found." -msgstr "" -"El nombre especificado de dominio de confianza podría no ser encontrado." - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "Las opciones dom-sid/dom-name y rid-base se deben usar juntas" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" -"La opción rid-base no se debe usar cuando el tipo de rango IPA es ipa-ad-" -"trust-posix" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" -"El tipo de Rango IPA debe ser uno de ipa-ad-trust o ipa-ad-trust-posix " -"cuando se especifica el SID del dominio de confianza" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" -"Las opciones dom-sid/dom-name y secondary-rid-base no pueden ser usados " -"juntos" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" -"El tipo de Rango IPA Range no debe ser ni ipa-ad-trust ni ipa-ad-trust-posix " -"cuando no se especifica el SID del dominio de confianza." - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "Las opciones secondary-rid-base y rid-base ser deben usar juntas" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "El rango RID primario y el secundario no pueden superponerse" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" -"Debe especificar las opciones tanto rid-base como secondary-rid-base " -"options, puesto que ipa-adtrust-install ya ha estado corriendo." - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "Se eliminó el intervalo de ID «%(value)s»" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d rango coincide" -msgstr[1] "%(count)d rangos coinciden" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" -"Modificar rango ID.\n" -"\n" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "Modificar rango ID \"%(value)s\"" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" -"Este comando no puede ser usado para cambiar la asignación de ID para el " -"dominio IPA local. Ejecute `ipa help idrange` para más información" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" -"El SID para el nombre de dominio de confianza especificado podría no ser " -"encontrado. Por favor especifique directamente el SID usando la opción dom-" -"sid." - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "Las opciones dom-sid y secondary-rid-base no podrían ser usadas juntas" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "Las opciones dom-sid y rid-base deben ser usadas juntas" - -msgid "self service permission" -msgstr "auto servicio de permiso" - -msgid "self service permissions" -msgstr "auto servicio de permisos" - -msgid "Self Service Permissions" -msgstr "Permisos de autoservicio" - -msgid "Self Service Permission" -msgstr "Auto Servicio de Permiso" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Añadido autoservicio \"%(value)s\"" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "autoservicio eliminados \"%(value)s\"" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Autoservicio modificado \"%(value)s\"" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)d autoservicio coincidente" -msgstr[1] "%(count)d autoservicios coincidentes" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" -"\n" -"Roles del servidor IPA\n" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" -"\n" -"Obtener el estado de los roles (servidor DNS, CA, etc.) suministrado por los " -"IPA maestros.\n" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" -"\n" -"El estado de un rol es habilitado, configurado o ausente.\n" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" -"\n" -" Muestra el estado del rol 'DNS server' sobre un servidor:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" -"\n" -" Muestra el estado de todos los roles que contienen 'AD' sobre un " -"servidor:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" -"\n" -" Muestra el estado de todos los roles configurados en un servidor:\n" -" ipa server-role-find ipa.example.com\n" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" -"\n" -" Muestra el rol maestro IPA implícito:\n" -" ipa server-role-find --include-master\n" - -msgid "server role" -msgstr "rol servidor" - -msgid "server roles" -msgstr "roles de servidor" - -msgid "IPA Server Roles" -msgstr "Roles de Servidor IPA" - -msgid "IPA Server Role" -msgstr "Rol de Servidor IPA" - -msgid "IPA server role name" -msgstr "Nombre de rol del servidor IPA" - -msgid "Role status" -msgstr "Estado rol" - -msgid "Status of the role" -msgstr "Estado del rol" - -msgid "Show role status on a server" -msgstr "Muestra el rol de estado sobre un servidor" - -msgid "Find a server role on a server(s)" -msgstr "Encontrar un rol de servidor sobre un servidor(s)" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "%(count)s rol servidor coincidente" -msgstr[1] "%(count)s roles servidor coincidentes" - -msgid "Include IPA master entries" -msgstr "Incluir entradas IPA maestro" - -msgid "roles" -msgstr "roles" - -msgid "IPA role name" -msgstr "Nombre de rol IPA" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "%(count)d delegación coincidente" +msgstr[1] "%(count)d delegaciones coincidentes" msgid "HBAC rule and local members cannot both be set" msgstr "Regla HBAC y miembros locales no pueden ser fijados" @@ -22420,1011 +25039,24 @@ msgstr "Habilitado Mapa de Usuario SELinux \"%(value)s\"" msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "Deshabilitado Mapa de Usuario SELinux \"%(value)s\"" -#, python-brace-format -msgid "{role}: role not found" -msgstr "{role}: rol no encontrado" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "{attr}: no existe tal atributo" - -msgid "pyhbac is not installed." -msgstr "pyhbac no está instalado." +msgid "" +"\n" +"IPA servers\n" +msgstr "" +"\n" +"IPA servers\n" msgid "" "\n" -"IPA certificate operations\n" +"Get information about installed IPA servers.\n" msgstr "" "\n" -"Operaciones de certificado IPA\n" +"Obtener información sobre los servidores IPA instalados.\n" msgid "" "\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" -"\n" -"Implementa un conjunto de comandos para manejar los certificados de servidor " -"SSL.\n" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" -"\n" -"Las peticiones de certificado existen en la forma de una Petición de Firma " -"de\n" -"Certificado (CSR) en formato PEM.\n" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" -"\n" -"La placa de identidad CA usa el valor CN del CSR y fuerza al resto del " -"sujeto a\n" -"valores configurados en el servidor.\n" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" -"\n" -"Se ha almacenado un certificado con un servicio principal y un servicio " -"principal\n" -"necesita un host.\n" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" -"\n" -"Con el objetivo de pedir un certificado:\n" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" -"\n" -"* El host debe existir\n" -"* El servicio debe existir (o debe usar la opción --add para añadirlo " -"automáticamente)\n" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" -"\n" -"BUSCANDO:\n" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" -"\n" -"Los certificados pueden ser buscados por sujeto del certificado, número de " -"serie,\n" -"razón de la revocación, fechas de validez y fecha de envío.\n" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" -"\n" -"Cuando se busca por fechas _from fecha hace un >= search y _to fecha hace\n" -"<= search. Cuando se combina esto hace como un AND.\n" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" -"\n" -"Las fechas se tratan como GMT para coincidir con las fechas de los " -"certificados.\n" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" -"\n" -"El formato de fecha es YYYY-mm-dd.\n" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" -"\n" -" Pide un nuevo certificado y añade el principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" -"\n" -" Recupera un certificado existente:\n" -" ipa cert-show 1032\n" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" -"\n" -" Revocar un certificado (vea RFC 5280 para detalles de la razón):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" -"\n" -" Quita un certificado del estado de cogido para revocación:\n" -" ipa cert-remove-hold 1032\n" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" -"\n" -" Comprueba el estado de una petición de firma:\n" -" ipa cert-status 10\n" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" -"\n" -" Búsqueda de certificados por nombre de host:\n" -" ipa cert-find --subject=ipaserver.example.com\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Search for certificates by hostname:\n" -#| " ipa cert-find --subject=ipaserver.example.com\n" -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" -"\n" -" Búsqueda de certificados por nombre de host:\n" -" ipa cert-find --subject=ipaserver.example.com\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Search for certificates by hostname:\n" -#| " ipa cert-find --subject=ipaserver.example.com\n" -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" -"\n" -" Búsqueda de certificados por nombre de host:\n" -" ipa cert-find --subject=ipaserver.example.com\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Search for certificates by hostname:\n" -#| " ipa cert-find --subject=ipaserver.example.com\n" -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" -"\n" -" Búsqueda de certificados por nombre de host:\n" -" ipa cert-find --subject=ipaserver.example.com\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Search for certificates by hostname:\n" -#| " ipa cert-find --subject=ipaserver.example.com\n" -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" -"\n" -" Búsqueda de certificados por nombre de host:\n" -" ipa cert-find --subject=ipaserver.example.com\n" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -#, fuzzy -#| msgid "Unspecified" -msgid " * 0 - unspecified\n" -msgstr "No especificada" - -#, fuzzy -#| msgid "Key Compromise" -msgid " * 1 - keyCompromise\n" -msgstr "Clave de transacción" - -#, fuzzy -#| msgid "AA Compromise" -msgid " * 2 - cACompromise\n" -msgstr "AA transacción" - -#, fuzzy -#| msgid "Affiliation Changed" -msgid " * 3 - affiliationChanged\n" -msgstr "Afiliación cambiada" - -msgid " * 4 - superseded\n" -msgstr "" - -#, fuzzy -#| msgid "Cessation of Operation" -msgid " * 5 - cessationOfOperation\n" -msgstr "Cese de operaciones" - -#, fuzzy -#| msgid "Certificate Hold" -msgid " * 6 - certificateHold\n" -msgstr "Certificado retenido" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -#, fuzzy -#| msgid "Privilege Withdrawn" -msgid " * 9 - privilegeWithdrawn\n" -msgstr "Retirada de privilegios" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Host '%(host)s' not found" -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "No ha sido encontrado el equipo anfitrión '%(host)s' " - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "Certificado codificado en Base-64." - -msgid "Certificate chain" -msgstr "Cadena de certificado" - -msgid "X.509 certificate chain" -msgstr "Cadena de certificado X.509" - -msgid "Subject" -msgstr "Asunto" - -#, fuzzy -#| msgid "Email address" -msgid "Subject email address" -msgstr "Dirección de correo electrónico" - -#, fuzzy -#| msgid "Subject DN" -msgid "Subject DNS name" -msgstr "Sujeto DN" - -#, fuzzy -#| msgid "Street address" -msgid "Subject X.400 address" -msgstr "Dirección postal" - -#, fuzzy -#| msgid "Home directory base" -msgid "Subject directory name" -msgstr "Base del directorio principal" - -#, fuzzy -#| msgid "Object class name" -msgid "Subject EDI Party name" -msgstr "Nombre de clase objeto" - -#, fuzzy -#| msgid "Subject" -msgid "Subject URI" -msgstr "Asunto" - -#, fuzzy -#| msgid "IP Address" -msgid "Subject IP Address" -msgstr "Dirección IP" - -#, fuzzy -#| msgid "Subject DN" -msgid "Subject OID" -msgstr "Sujeto DN" - -#, fuzzy -#| msgid "Subject DN" -msgid "Subject UPN" -msgstr "Sujeto DN" - -#, fuzzy -#| msgid "must be Kerberos principal" -msgid "Subject Kerberos principal name" -msgstr "debe ser Kerberos principal" - -#, fuzzy -#| msgid "Subject Distinguished Name" -msgid "Subject Other Name" -msgstr "Nombre Distinguido del Sujeto" - -msgid "Issuer" -msgstr "Emisor" - -msgid "Issuer DN" -msgstr "Editor DN" - -msgid "Not Before" -msgstr "No antes de" - -msgid "Not After" -msgstr "No luego de" - -msgid "Fingerprint (SHA1)" -msgstr "Huella digital (SHA1)" - -msgid "Fingerprint (SHA256)" -msgstr "Huella digital (SHA256)" - -msgid "Serial number (hex)" -msgstr "N.º de serie (hex.)" - -msgid "Request status" -msgstr "Estado de la petición" - -msgid "Include certificate chain in output" -msgstr "Incluir la cadena del certificado en la salida" - -#, fuzzy -#| msgid "automatically add the principal if it doesn't exist" -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "si no existe, agregar automáticamente el principal" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, fuzzy, python-format -#| msgid "" -#| "Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of " -#| "entry '%s'." -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" -"Privilegio 'write' insuficiente al atributo 'krbLastPwdChange' de la entrada " -"'%s'." - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, fuzzy, python-format -#| msgid "The principal for this request doesn't exist." -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "El principal para esta petición no existe." - -#, fuzzy, python-format -#| msgid "Insufficient privilege to modify a certificate profile." -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "Privilegio insuficiente para modificar un certificado perfil" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -#, fuzzy -#| msgid "Sudo Option" -msgid "'add' option" -msgstr "Opción de sudo" - -msgid "The principal for this request doesn't exist." -msgstr "El principal para esta petición no existe." - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Status" -msgstr "Estatus" - -msgid "Revoked" -msgstr "Revocado" - -msgid "Revocation reason" -msgstr "Motivo de la revocación" - -#, fuzzy -#| msgid "Reason for revoking the certificate (0-10)" -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "Motivo por el cual el certificado ha sido revocado (0-10)" - -#, fuzzy, python-format -#| msgid "Owner" -msgid "Owner %s" -msgstr "Propietario" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "7 no es una razón válida de revocación" - -#, fuzzy -#| msgid "Results should contain primary key attribute only (\"name\")" -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" -"Los resultados deberían contener solo la clave del atributo primario (\"name" -"\")" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "%(count)d servicio coincidente" -msgstr[1] "%(count)d servicios coincidentes\t\t\t" - -#, fuzzy, python-format -#| msgid "Search for services with these managed by hosts." -msgid "Search for certificates with these owner %s." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy, python-format -#| msgid "Search for services without these managed by hosts." -msgid "Search for certificates without these owner %s." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -#| msgid "View" -msgid "ID View" -msgstr "Ver" - -#, fuzzy -#| msgid "Assigned ID View" -msgid "system ID View" -msgstr "Vista ID asignada" - -#, fuzzy -#| msgid "View" -msgid "ID Views" -msgstr "Ver" - -#, fuzzy -#| msgid "User object class" -msgid "User object overrides" -msgstr "Clase de objeto de usuario" - -#, fuzzy -#| msgid "Group object class" -msgid "Group object overrides" -msgstr "Clase de objeto de grupo" - -#, fuzzy -#| msgid "Host category the rule applies to" -msgid "Hosts the view applies to" -msgstr "Categoría del equipo al que se aplica la regla" - -#, fuzzy, python-format -#| msgid "Added ID range \"%(value)s\"" -msgid "Added ID View \"%(value)s\"" -msgstr "Se añadió el intervalo de ID «%(value)s»" - -#, fuzzy, python-format -#| msgid "Deleted ID range \"%(value)s\"" -msgid "Deleted ID View \"%(value)s\"" -msgstr "Se eliminó el intervalo de ID «%(value)s»" - -#, fuzzy, python-format -#| msgid "Modified ID range \"%(value)s\"" -msgid "Modified an ID View \"%(value)s\"" -msgstr "Modificar rango ID \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "%(count)d ACI matched" -#| msgid_plural "%(count)d ACIs matched" -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "%(count)d ACI coincidente" -msgstr[1] "%(count)d ACIs coincidentes" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -#, fuzzy -#| msgid "realm not found\n" -msgid "not found" -msgstr "reino no encontrado\n" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -#, fuzzy -#| msgid "ACI object." -msgid "IPA object" -msgstr "Objeto ACI." - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, fuzzy, python-format -#| msgid "Conditions that could not be removed" -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "Condiciones que no pueden ser eliminadas" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -#, fuzzy -#| msgid "Add a new IPA service." -msgid "Add a new ID override." -msgstr "Añadir un nuevo servicio IPA." - -#, fuzzy, python-format -#| msgid "Added ID range \"%(value)s\"" -msgid "Added ID override \"%(value)s\"" -msgstr "Se añadió el intervalo de ID «%(value)s»" - -#, fuzzy -#| msgid "Delete an ID range." -msgid "Delete an ID override." -msgstr "Eliminar un intervalo de ID." - -#, fuzzy, python-format -#| msgid "Deleted ID range \"%(value)s\"" -msgid "Deleted ID override \"%(value)s\"" -msgstr "Se eliminó el intervalo de ID «%(value)s»" - -#, fuzzy -#| msgid "Modify an HBAC service." -msgid "Modify an ID override." -msgstr "Modificar un servicio HBAC." - -#, fuzzy, python-format -#| msgid "Modified ID range \"%(value)s\"" -msgid "Modified an ID override \"%(value)s\"" -msgstr "Modificar rango ID \"%(value)s\"" - -msgid "ID override" -msgstr "" - -#, fuzzy -#| msgid "DNS zone root record cannot be renamed" -msgid "ID overrides cannot be renamed" -msgstr "El registro DNS de zona raíz no puede ser renombrado" - -#, fuzzy -#| msgid "Search for IPA services." -msgid "Search for an ID override." -msgstr "Buscar servicios IPA." - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d servicio coincidente" -msgstr[1] "%(count)d servicios coincidentes\t\t\t" - -#, fuzzy -#| msgid "Display information about an IPA service." -msgid "Display information about an ID override." -msgstr "Mostrar información sobre un servicio IPA." - -#, fuzzy -#| msgid "User ID" -msgid "User ID override" -msgstr "ID de usuario" - -msgid "User ID overrides" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "Certificado de usuario codificado en Base-64" - -#, fuzzy -#| msgid "Group ID Number" -msgid "Group ID override" -msgstr "Número de Identificación de Grupo" - -#, fuzzy -#| msgid "Group ID Number" -msgid "Group ID overrides" -msgstr "Número de Identificación de Grupo" - -#, fuzzy -#| msgid "Add one or more certificates to the user entry" -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "Añade uno o más certificados a la entrada del usuario" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Añadidos certificados al usuario \"%(value)s\"" - -#, fuzzy -#| msgid "Remove one or more certificates to the user entry" -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "Borra uno o más certificados de la entrada de usuario" - -#, fuzzy, python-format -#| msgid "Removed certificates from user \"%(value)s\"" -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "Certificados borrados del usuario \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added User ID override \"%(value)s\"" -msgstr "Ha sido agregado el servicio \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Ha sido eliminado el servicio \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Modified service \"%(value)s\"" -msgid "Modified an User ID override \"%(value)s\"" -msgstr "Ha sido modificado el servicio \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "%(count)d servicio coincidente" -msgstr[1] "%(count)d servicios coincidentes\t\t\t" - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added Group ID override \"%(value)s\"" -msgstr "Ha sido agregado el grupo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Ha sido eliminado el grupo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Ha sido modificado el grupo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "%(count)d group matched" -#| msgid_plural "%(count)d groups matched" -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "%(count)d grupo coincidente" -msgstr[1] "%(count)d grupos coincidentes" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" -"\n" -"Regla de Membresía Automática.\n" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" -"\n" -"Brinde claridad a la membresía de hosts y usuarios configurando patrones\n" -"inclusivos o exclusivos de expresiones regulares, usted puede " -"automáticamente\n" -"asignar una nuevas entradas a un grupo o grupo de host en base a la " -"información del atributo.\n" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" -"\n" -"Un regla está directamente asociada con un grupo por nombre, de modo que " -"usted\n" -"no puede crear un regla sin un grupo o grupo de host que lo acompañen.\n" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" -"\n" -"Una condición es una expresión regular usada por 389-ds para coincidir una " -"nueva\n" -"entrada entrtante con una regla de auto miembro. Si la coincidencia es una " -"regla\n" -"inclusiva la entrada se añade al grupo o grupo de host apopiado.\n" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" -"\n" -"Se podría especificar un grupo o grupo de host predeterminado para las " -"entradas\n" -"que no coincidan con ninguna regla. En caso de entradas de usuario, este " -"grupo\n" -"será un grupo de reserva puesto que todos los usuarios son por defecto " -"miembros del grupo especificado en la configuración IPA.\n" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" -"\n" -"El comando de reconstrucción de auto miembro puede ser usado para ejecutar \n" -"retroactivamente reglas de auto miembro contra las entradas existentes, así " -"reconstruirá su membresía.\n" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Delete a host:\n" -#| " ipa host-del test.example.com\n" -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" -"\n" -" Borrar un host:\n" -" ipa host-del test.example.com\n" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Modify an automember rule.\n" -#| " " -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" -"\n" -" Modificar una regla automiembro.\n" -" " - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Find all servers:\n" -#| " ipa server-find\n" -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" +" Find all servers:\n" +" ipa server-find\n" msgstr "" "\n" " Encuentra todos los servidores:\n" @@ -23432,278 +25064,187 @@ msgstr "" msgid "" "\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" msgstr "" - -msgid "" "\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" +" Mostrar un servidor específico:\n" +" ipa server-show ipa.example.com\n" + +msgid "server" +msgstr "servidor" + +msgid "servers" +msgstr "servidores" + +msgid "IPA Servers" +msgstr "Servidores IPA" + +msgid "Server location" +msgstr "Localización de servidor" + +msgid "Service weight" +msgstr "Peso del servicio" + +msgid "Weight for server services" +msgstr "Peso para los servicios del servidor" + +msgid "Service relative weight" +msgstr "Peso relativo del servicio" + +msgid "Relative weight for server services (counts per location)" msgstr "" +"Pero relativo para los servicios del servidor (cuentas por localización)" -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" +msgid "Enabled server roles" +msgstr "Rolkes de servidor habilitados" -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" +msgid "List of enabled roles" +msgstr "Listra de roles habilitados" -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "Regla Auto Afiliación" - -#, fuzzy, python-format -#| msgid "%(pkey)s: %(oname)s not found" -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(pkey)s: no se encuentra %(oname)s" +msgid "Modify information about an IPA server." +msgstr "Modificar información sobre un servidor IPA." #, python-format -msgid "%s is not a valid attribute." -msgstr "%s no es un atributo válido." - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" -"\n" -" Añadir una regla automiembro.\n" -" " +msgid "Modified IPA server \"%(value)s\"" +msgstr "Modificado servidor IPA \"%(value)s\"" #, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Regla automiembro añadida \"%(value)s\"" - -msgid "Auto Membership is not configured" -msgstr "Auto Afiliación no está configurada" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" -"\n" -" Añadir condiciones a una regla automiembro.\n" -" " +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "%(count)d servidor IPA coincide" +msgstr[1] "%(count)d servidores IPA coinciden" #, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Añadida condición(es) a \"%(value)s\"" +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Eliminado servidor IPA \"%(value)s\"" + +msgid "Ignore topology errors" +msgstr "Ignorar errores de topología" + +msgid "Ignore topology connectivity problems after removal" +msgstr "Ignorar problemas de conectividad de topología después de quitarla" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "Ignorar la comprobación del último servidor CA o DNS que queda" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" +"Saltar una comprobación si el último maestro CA o servidor DNS se ha quitado" + +msgid "Force server removal" +msgstr "Forzar la eliminación del servidor" + +msgid "Force server removal even if it does not exist" +msgstr "Fuerza el borrado del servidor aunque no exista" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" +"La replica de la clave maestra DNSSEC está activa. Desinstalarla podría " +"romper su sistema DNS. Por favor deshabilite o reemplace la clave maestra " +"DNSSEC primero." + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "Borrando este servidor dejará su instalación sin un DNS." + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" +"El borrado de este servidor no está permitido puesto que dejaría su " +"instalación sin un KRA." + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" +"El borrado de este servidor no está permitido puesto que dejaría su " +"instalción sin una CA." + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "Ignorar estos avisos y continuar con el borrado" #, python-format -msgid "Auto member rule: %s not found!" -msgstr "Regla auto miembro: %s no encontrada!" - msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" -"\n" -" Anula esto de modo que podamos añadir completados y fallados al " -"resultado devuelto.\n" -" " - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" -"\n" -" Borrar condiciones de una regla automiembro.\n" -" " +"Fallo al limpiar memberPrincipal %(principal)s de la entrada s4u2proxy " +"%(dn)s: %(err)s" #, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Condición(es) eliminada(s) de «%(value)s»" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" -"\n" -" Anula esto de modo que podamos fijar completados y fallados.\n" -" " - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" -"\n" -" Modificar una regla automiembro.\n" -" " +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "Fallo al limpiar entradas DNA hostname para %(master)s: %(err)s" #, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Modificada regla de automiembro \"%(value)s\"" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " +msgid "Failed to remove server %(master)s from server list: %(err)s" msgstr "" -"\n" -" Borra una regla automiembro.\n" -" " +"Fallo al quitar el servidor %(master)s de la lista de servidores: %(err)s" #, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Borrada regla automiembro \"%(value)s\"" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" -"\n" -" Búsqueda reglas automiembro.\n" -" " +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "Fallo al limpiar claves Custodia para %(master)s: %(err)s" #, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d reglas coincidentes" -msgstr[1] "%(count)d reglas coincidentes" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" -"\n" -" Muestra información sobre una regla automiembro.\n" -" " - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "Fallo al limpiar principales/claves del servidor: %(err)s" #, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "Fallo al limpiar entradas %(hostname)s DNS: %(err)s" -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Removed certificates from user \"%(value)s\"" -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "Certificados borrados del usuario \"%(value)s\"" - -msgid "No default (fallback) group set" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Display information about an automember rule.\n" -#| " " -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" -"\n" -" Muestra información sobre una regla automiembro.\n" -" " - -msgid "Task DN" -msgstr "" - -#, fuzzy -#| msgid "Name of the trusted domain" -msgid "DN of the started task" -msgstr "Nombre del dominio de confianza" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -#, fuzzy -#| msgid "HBAC rule and local members cannot both be set" -msgid "users and hosts cannot both be set" -msgstr "Regla HBAC y miembros locales no pueden ser fijados" - -#, fuzzy -#| msgid "hosts cannot be added when host category='all'" -msgid "hosts cannot be set when type is 'group'" -msgstr "hosts no puede ser añadido con categoría de host='all'" - -#, fuzzy -#| msgid "users cannot be added when user category='all'" -msgid "users cannot be set when type is 'hostgroup'" -msgstr "no se pueden añadir usuarios cuando la categoría de usuario='all'" - -#, fuzzy -#| msgid "Automember rebuild membership task completed" -msgid "Automember rebuild membership task started" -msgstr "Tarea completada de reconstruir la membresía del miembro" - -msgid "Automember rebuild membership task completed" -msgstr "Tarea completada de reconstruir la membresía del miembro" +msgid "You may need to manually remove them from the tree" +msgstr "Usted puede necesitar borrarlo manualmente del árbol" #, python-format -msgid "Task DN = '%s'" -msgstr "" +msgid "Forcing removal of %(hostname)s" +msgstr "Forzando el borrado de %(hostname)s" -#, fuzzy -#| msgid "Automember Rule" -msgid "Automember" -msgstr "Regla Automiembro" +msgid "Ignoring topology connectivity errors." +msgstr "Ignorando los errores de topología de conectividad." + +msgid "Server has already been deleted" +msgstr "El servidor ya ha sido borrado" + +msgid "Agreements deleted" +msgstr "Acuerdos borrados" + +msgid "Following segments were not deleted:" +msgstr "Los siguientes segmentos no fueron borrados:" + +msgid "not allowed to perform server connection check" +msgstr "no permitido llevar a cabo la comprobación de conexión del servidor" + +msgid "Set enabled/hidden state of a server." +msgstr "Establecer estado habilitado/escondido de un servidor." + +msgid "State" +msgstr "Estado" + +msgid "Server state" +msgstr "Estado del servidor" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "Cambiado el estado del servidor de \"%(value)s\"." + +msgid "Cannot hide CA renewal master." +msgstr "No se puede ocultar el maestro de renovación de CA." + +msgid "Cannot hide DNSSec key master." +msgstr "No se puede ocultar la clave maestra DNSSec." + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "No se puede ocultar el último servidor habilitado %(name)s." msgid "" "\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " +"Session Support for IPA\n" msgstr "" -#, fuzzy -#| msgid "" -#| "\n" -#| " Remove conditions from an automember rule.\n" -#| " " -msgid "Remove orphan automember rules" -msgstr "" -"\n" -" Borrar condiciones de una regla automiembro.\n" -" " - msgid "" "\n" "Manage Certificate Authorities\n" @@ -23893,6 +25434,1087 @@ msgstr "Habilitar una CA." msgid "Enabled CA \"%(value)s\"" msgstr "Habilitada CA \"%(value)s\"" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" +"\n" +"Mapeando la Identidad del Certificado\n" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" +"\n" +"Gestionar la configuración y las reglas del Mapeo de Identidad del " +"Certificado.\n" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" +"\n" +"IPA soporta el uso de certificados para la autenticación. Las certificados " +"pueden ser\n" +"bien almacenados en la entrada del usuario (el certificado completo en el " +"atributo\n" +"usercertificate) o simplemente enlazado a la entrada de usuario a través de " +"un\n" +"mapeo. Esta código habilita la gestión de las reglas permitiendo enlazar un\n" +"certificado a una entrada de usuario.\n" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" +"\n" +" Mostrar la configuración global del Mapeo de Identidad de Certificado:\n" +" ipa certmapconfig-show\n" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" +"\n" +" Modificar la configuración global del Mapeo de Identidad de Certificado:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" +"\n" +" Crea una nueva Regla de Mapeo de Identidad de Certificado:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" +"\n" +" Modificar una Regla de Identidad de Certificado:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" +"\n" +" Deshabilitar una Regla de Mapeo de Identidad de Certificado:\n" +" ipa certmaprule-disable rule1\n" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" +"\n" +" Habilitar una Regla de Mapeo de Identidad de Certificado:\n" +" ipa certmaprule-enable rule1\n" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" +"\n" +" Muestra información sobre una Regla de Mapeo de Identidad de Certificado:\n" +" ipa certmaprule-show rule1\n" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" +"\n" +" Encuentra todas las Reglas de Mapeo de Identidad de Certificado con el " +"dominio especificado:\n" +" ipa certmaprule-find --domain example.com\n" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" +"\n" +" Borra una Regla de Mapeo de Identidad de Certificado:\n" +" ipa certmaprule-del rule1\n" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" +"El dominio(s) \"%s\" no puede ser usado para aplicar la comprobación " +"altSecurityIdentities." + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" +"La regla de mapeo con altSecurityIdentities debería ser aplicada a un " +"dominio Active Directory de confianza pero ningún dominio fue asociado con " +"la regla." + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "El dominio %s no es un dominio IPA ni un dominio de confianza." + +msgid "Certificate Identity Mapping configuration options" +msgstr "Opciones de configuración del Mapeo de Identidad de Certificado" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "Configuración Global del Mapeo de Identidad de Certificado" + +msgid "Prompt for the username" +msgstr "Pedir el nombre de usuario" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" +"Pedir el nombre de usuario cuando múltiples identidades están mapeadas a un " +"certificado" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "Modificar la configuración de Mapeo de Identidad de Certificado." + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "Muestra la configuración actual del Mapeo de Identidad de Certificado." + +msgid "Certificate Identity Mapping Rules" +msgstr "Reglas de Mapeo de Identidad de Certificado" + +msgid "Certificate Identity Mapping Rule" +msgstr "Regla de Mapeo de Identidad de Certificado" + +msgid "Certificate Identity Mapping Rule name" +msgstr "Nombre de Regla de Mapeo de Identidad de Certificado" + +msgid "Certificate Identity Mapping Rule description" +msgstr "Descripción de la Regla de Mapeo de Identidad de Certificado" + +msgid "Mapping rule" +msgstr "Regla de mapeo" + +msgid "Rule used to map the certificate with a user entry" +msgstr "Regla usada para mapear el certificado con una entrada de usuario" + +msgid "Matching rule" +msgstr "Regla de coincidencia" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" +"Regla usada para comprobar si un certificado puede ser usado para " +"autenticación" + +msgid "Domain where the user entry will be searched" +msgstr "Dominio donde se buscará la entrada de usuario" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" +"Prioridad de la regla (el número más alto significa la prioridad más baja" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "Crear una nueva Regla de Mapeo de Identidad de Certificado." + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Añadida Regla de Mapeo de Identidad de Certificado \"%(value)s\"" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "Modificar una Regla de Mapeo de Identidad de Certificado." + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Regla de Mapeo de Identidad de Certificado modificada \"%(value)s\"" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "Buscar Reglas de Mapeo de Identidad de Certificado." + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "%(count)d Regla de Mapeo de Identidad de Certificado coincidente" +msgstr[1] "%(count)d Reglas de Mapeo de Identidad de Certificado coincidentes" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" +"Visualizar información sobre una Regla de Mapeo de Identidad de Certificado." + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "Borrar una Regla de Mapeo de Identidad de Certificado." + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Regla de Mapeo de Identidad de Certificado \"%(value)s\" borrada" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "Habilitar una Regla de Mapeo de Identidad de Certificado." + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Regla de Mapeo de Identidad de Certificado \"%(value)s\" habilitada" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "Deshabilitar una Regla de Mapeo de Identidad de Certificado." + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Regla de Mapeo de Identidad de Certificado \"%(value)s\" deshabilitada" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "Fallo al conectar sssd sobre SystemBus. Vea detalles en error_log" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" +"Fallo al encontrar usuarios sobre SystemBus. Vea detalles en error_log" + +msgid "User logins" +msgstr "Accesos de usuario" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" +"\n" +" Buscar usuarios que coincidan con el certificado suministrado.\n" +"\n" +" Este comando se basa en SSSD para recuperar la lista de los usuarios\n" +" coincidentes y puede devolver los datos en cache. Para más información " +"sobre \n" +" la purga del cache SSSD, vea por favor la documentación sss_cache.\n" +" " + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "%(count)s usuario coincidente" +msgstr[1] "%(count)s usuarios coincidentes" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be at least 1" +msgid "must be at least 10" +msgstr "debe ser al menos 1" + +msgid "configuration options" +msgstr "opciones de configuración" + +msgid "Configuration" +msgstr "Configuración" + +#, fuzzy +#| msgid "Maximum username length" +msgid "Maximum hostname length" +msgstr "Largo máximo para nombre de usuario" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA servers\n" +msgid "IPA masters" +msgstr "" +"\n" +"IPA servers\n" + +msgid "List of all IPA masters" +msgstr "" + +#, fuzzy +#| msgid "Include IPA master entries" +msgid "Hidden IPA masters" +msgstr "Incluir entradas IPA maestro" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#, fuzzy +#| msgid "IPA DNS servers" +msgid "IPA CA servers" +msgstr "Servidores IPA DNS" + +#, fuzzy +#| msgid "IPA server configured as DNSSec key master" +msgid "IPA servers configured as certificate authority" +msgstr "Servidor IPA configurado como clave maestra DNSSec" + +#, fuzzy +#| msgid "IPA DNS servers" +msgid "Hidden IPA CA servers" +msgstr "Servidores IPA DNS" + +#, fuzzy +#| msgid "IPA server configured as DNSSec key master" +msgid "Hidden IPA servers configured as certificate authority" +msgstr "Servidor IPA configurado como clave maestra DNSSec" + +#, fuzzy +#| msgid "Cannot hide CA renewal master." +msgid "IPA CA renewal master" +msgstr "No se puede ocultar el maestro de renovación de CA." + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +#, fuzzy +#| msgid "IPA servers configured as AD trust agents" +msgid "IPA servers configured as key recovery agent" +msgstr "Servidores IPA configurados como agentes de confianza AD" + +#, fuzzy +#| msgid "IPA DNS servers" +msgid "Hidden IPA KRA servers" +msgstr "Servidores IPA DNS" + +#, fuzzy +#| msgid "IPA servers configured as AD trust agents" +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "Servidores IPA configurados como agentes de confianza AD" + +#, fuzzy +#| msgid "IPA server configured as DNSSec key master" +msgid "IPA servers configured as domain name server" +msgstr "Servidor IPA configurado como clave maestra DNSSec" + +#, fuzzy +#| msgid "IPA DNS servers" +msgid "Hidden IPA DNS servers" +msgstr "Servidores IPA DNS" + +#, fuzzy +#| msgid "List of IPA masters configured as DNS servers" +msgid "Hidden IPA servers configured as domain name server" +msgstr "Lista de los maestros IPA configurados como servidores DNS" + +#, fuzzy +#| msgid "IPA DNSSec key master" +msgid "DNSec key master" +msgstr "Clave maestra IPA DNSSec" + +#, fuzzy +#| msgid "options are not allowed" +msgid "Empty domain is not allowed" +msgstr "las opciones no están permitidas" + +#, fuzzy, python-format +#| msgid "invalid domain-name: %s" +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "nombre de dominio no válido: %s" + +#, fuzzy, python-format +#| msgid "Removed information about the trusted domain \"%(value)s\"" +msgid "Server has no information about domain '%(domain)s'" +msgstr "Borrada información sobre el dominio de confianza \"%(value)s\"" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "El grupo no existe" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "atributo \"%s\" no permitido" + +msgid "May not be empty" +msgstr "Puede no estar vacío" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "error sobre el servidor '%(server)s': %(error)s" + +#, fuzzy +#| msgid "SELinux user %(user)s not found in ordering list (in config)" +msgid "SELinux user map default user not in order list" +msgstr "" +"Usuario SELinux %(user)s no encontrado en la lista de pedidos (en config)" + +msgid "REST API is not logged in." +msgstr "REST API no ha iniciado sesión." + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "No hay respuesta 2xx desde CA REST API: %(status)d. %(explanation)s" + +msgid "Unable to communicate with CMS" +msgstr "Incapaz de comunicar con CMS" + +msgid "Response from CA was not valid JSON" +msgstr "La respuesta desde CA no era JSON válido" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" +"\n" +"Hosts/Máquinas\n" +"\n" +"Un host representa una máquina. Puede ser usado en distintos contextos:\n" +"- las entradas de servicio están asociadas con un host\n" +"- un host almacena el host/ servicio principal\n" +"- un host puede ser usado en reglas de Control de Acceso basado en Host " +"(HBAC)\n" +"- cada cliente inscrito genera una entrada de host\n" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" +"\n" +"INSCRIPCIÓN:\n" +"\n" +"Hay tres escenarios de inscripción cuando se inscribe un nuevo cliente:\n" +"\n" +"1. Se está inscribiendo como administrador total. La entrada de host puede " +"existir o\n" +" no. Un administrador total es miembro del rol hostadmin role o del grupo " +"admins.\n" +"2. Se está inscribiendo como administrador limitado. El host debe existir " +"ya. Un\n" +" administrador limitado es miembro de un rol con el privilegio Host " +"Enrollment.\n" +"3. El host ha sido creado con una contraseña de una vez.\n" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" +"\n" +"RE-INSCRIPCIÓN:\n" +"\n" +"El host que ha sido inscrito en algún punto y pierde su configuración (e.g. " +"VM destruido) puede ser reinscrito.\n" +"\n" +"Para mas información, consulte las páginas de manual para ipa-client-" +"install.\n" +"\n" +"Un host puede almacenar opcionalmente información como donde está " +"localizado,\n" +"el SO que ejecuta, etc.\n" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" +"\n" +" Añadir un nuevo host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" +"\n" +" Borrar un host:\n" +" ipa host-del test.example.com\n" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" +"\n" +" Añadir un nuevo host con una contraseña de un uso:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" +"\n" +" Añadir un nuevo host con una contraseña aleatoria de un uso:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" +"\n" +" Modificar información sobre un host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" +"\n" +" Quitar las claves públicas SSH de un host y actualizar DNS para reflejar " +"este cambio:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" +"\n" +" Deshabilitar la clave Kerberos de host, el certificado SSL y todos sus " +"servicios:\n" +" ipa host-disable test.example.com\n" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" +"\n" +" Añadir un host que pueda manejar la tabla de teclas y certificado del " +"host:\n" +" ipa host-add-managedby --hosts=test2 test\n" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" +"\n" +" Permitir al usuario crear una tabla de teclas:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" + +msgid "Host" +msgstr "Host" + +msgid "Base-64 encoded host certificate" +msgstr "Certificado de host codificado en Base-64" + +msgid "Serial Number" +msgstr "Número de serie" + +msgid "Serial Number (hex)" +msgstr "N.º de serie (hex.)" + +msgid "Authentication Indicators" +msgstr "Indicadores de Autenticación" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "Ha sido agregado el equipo \"%(value)s\"" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Ha sido eliminado el equipo \"%(value)s\"" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" +"Borrar los registros A, AAAA, SSHFP y PTR del host(s) gestionado por IPA DNS" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "Sin registros A, AAAA, SSHFP o PTR encontrados." + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Ha sido modificado el equipo \"%(value)s\"" + +msgid "Password cannot be set on enrolled host." +msgstr "La contraseña no puede ser fijada en el host matriculado." + +msgid "cn is immutable" +msgstr "cn es inmutable" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d equipo coincidente" +msgstr[1] "%(count)d equipos coincidentes" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "Host desactivado \"%(value)s\"" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "Añadidos certificados a host \"%(value)s\"" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Borrados certificados del host \"%(value)s\"" + +msgid "Add new principal alias to host entry" +msgstr "Añade un nuevo alias principal a una entrada de host" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Añadidos nuevos alias al host \"%(value)s\"" + +msgid "Remove principal alias from a host entry" +msgstr "Borra alias principal de la entrada de host" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Borrados alias del host \"%(value)s\"" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" +"=======\n" +"ADVERTENCIA:\n" +"\n" +"El plugin DNA en 389-ds asignará IDs basados en el rango configurado para " +"el\n" +"dominio local. Actualmente el plugin DNA *no puede* ser reconfigurado en " +"base a\n" +"los rangos locales establecidos por medio de esta familia de comandos.\n" +"\n" +"El cambio de configuración manual ha de ser hecho en la configuración del " +"plugin\n" +"DNA para e nuevo rango local. Especialmente, el atributo dnaNextRange de\n" +"'cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " +"ha\n" +"sido modificado para coincidir con el nuevo rango.\n" +"=======\n" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "Intervalos de ID" + +msgid "ID Range" +msgstr "Intervalo de ID" + +msgid "local domain range" +msgstr "intervalo de dominios locales" + +msgid "ID range type, one of allowed values" +msgstr "Tipo de rango ID, uno de los siguientes valores" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" +"la modificación de rango dejando objetos con ID fuera del rango definido no " +"está permitida" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"No se puede llevar a cabo la validación SID sin el soporte de Samba 4 " +"instalado. Asegúrese de que tiene instalado el sub paquete server-trust-ad " +"de IPA en el servidor" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" +"Los fideicomisos a través del reino no están instalados. Asegúrese de que " +"está corriendo ipa-adtrust-install en el servidor IPA primero" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "SID no es reconocido como un SID válido para el dominio de confianza" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" +"\n" +" Añadir un nuevo rango ID.\n" +"\n" +" Para añadir un nuevo rango ID usted debe especificar siempre\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Adicionalmente\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" puede ser dado para un nuevo rangi ID para el dominio local mientras\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" debe ser dado para añadir un nuevo rango para un dominio AD de " +"confianza.\n" +"\n" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "Se añadió el intervalo de ID «%(value)s»" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "Las opciones dom-sid y dom-name no pueden ser usadas juntas" + +msgid "Specified trusted domain name could not be found." +msgstr "" +"El nombre especificado de dominio de confianza podría no ser encontrado." + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "Las opciones dom-sid/dom-name y rid-base se deben usar juntas" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" +"La opción rid-base no se debe usar cuando el tipo de rango IPA es ipa-ad-" +"trust-posix" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" +"El tipo de Rango IPA debe ser uno de ipa-ad-trust o ipa-ad-trust-posix " +"cuando se especifica el SID del dominio de confianza" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" +"Las opciones dom-sid/dom-name y secondary-rid-base no pueden ser usados " +"juntos" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" +"El tipo de Rango IPA Range no debe ser ni ipa-ad-trust ni ipa-ad-trust-posix " +"cuando no se especifica el SID del dominio de confianza." + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "Las opciones secondary-rid-base y rid-base ser deben usar juntas" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "El rango RID primario y el secundario no pueden superponerse" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" +"Debe especificar las opciones tanto rid-base como secondary-rid-base " +"options, puesto que ipa-adtrust-install ya ha estado corriendo." + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "Se eliminó el intervalo de ID «%(value)s»" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d rango coincide" +msgstr[1] "%(count)d rangos coinciden" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" +"Modificar rango ID.\n" +"\n" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "Modificar rango ID \"%(value)s\"" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" +"Este comando no puede ser usado para cambiar la asignación de ID para el " +"dominio IPA local. Ejecute `ipa help idrange` para más información" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" +"El SID para el nombre de dominio de confianza especificado podría no ser " +"encontrado. Por favor especifique directamente el SID usando la opción dom-" +"sid." + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "Las opciones dom-sid y secondary-rid-base no podrían ser usadas juntas" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "Las opciones dom-sid y rid-base deben ser usadas juntas" + msgid "Internationalization messages" msgstr "Mensajes de internacionalización" @@ -25143,12 +27765,6 @@ msgstr "Certificado revocado" msgid "REVOKED" msgstr "" -msgid "Serial Number" -msgstr "Número de serie" - -msgid "Serial Number (hex)" -msgstr "N.º de serie (hex.)" - msgid "SHA1 Fingerprint" msgstr "Huella digital SHA1" @@ -25223,11 +27839,6 @@ msgstr "Regla de Mapeo de Identidad de Certificado" msgid "Add certificate mapping data" msgstr "Datos de Asociación del Certificado" -#, fuzzy -#| msgid "Certificate chain" -msgid "Certificate mapping data" -msgstr "Cadena de certificado" - #, fuzzy #| msgid "Configuration" msgid "Configuration string" @@ -26140,9 +28751,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" -msgid "Host" -msgstr "Host" - msgid "Netgroup Settings" msgstr "Configuración de Netgroup" @@ -26297,9 +28905,6 @@ msgstr "" msgid "Add password policy" msgstr "política de contraseña" -msgid "Password Policy" -msgstr "Directiva de contraseñas" - #, fuzzy #| msgid "password policies" msgid "Remove password policies" @@ -26911,15 +29516,6 @@ msgstr "Borrar" msgid "Remove domains" msgstr "Dominios reino" -msgid "Trust direction" -msgstr "Dirección de confianza" - -msgid "Trust status" -msgstr "Estado de confianza" - -msgid "Trust type" -msgstr "Tipo de confianza" - #, fuzzy #| msgid "UPN suffixes" msgid "Alternative UPN suffixes" @@ -27551,9 +30147,6 @@ msgstr "Sudo" msgid "Topology" msgstr "" -msgid "Trusts" -msgstr "Confianzas" - msgid "True" msgstr "Verdad" @@ -27672,1927 +30265,6 @@ msgstr "Campo requerido" msgid "Unsupported value" msgstr "Valor no admitido" -msgid "Role" -msgstr "Rol" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "Rol agregado \"%(value)s\"" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Rol eliminado \"%(value)s\"" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Rol modificado \"%(value)s\"" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d rol coincidente" -msgstr[1] "%(count)d roles coincidentes" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" -"\n" -"IPA servers\n" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" -"\n" -"Obtener información sobre los servidores IPA instalados.\n" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -" Encuentra todos los servidores:\n" -" ipa server-find\n" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" -"\n" -" Mostrar un servidor específico:\n" -" ipa server-show ipa.example.com\n" - -msgid "server" -msgstr "servidor" - -msgid "servers" -msgstr "servidores" - -msgid "IPA Servers" -msgstr "Servidores IPA" - -msgid "Server location" -msgstr "Localización de servidor" - -msgid "Service weight" -msgstr "Peso del servicio" - -msgid "Weight for server services" -msgstr "Peso para los servicios del servidor" - -msgid "Service relative weight" -msgstr "Peso relativo del servicio" - -msgid "Relative weight for server services (counts per location)" -msgstr "" -"Pero relativo para los servicios del servidor (cuentas por localización)" - -msgid "Enabled server roles" -msgstr "Rolkes de servidor habilitados" - -msgid "List of enabled roles" -msgstr "Listra de roles habilitados" - -msgid "Modify information about an IPA server." -msgstr "Modificar información sobre un servidor IPA." - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "Modificado servidor IPA \"%(value)s\"" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "%(count)d servidor IPA coincide" -msgstr[1] "%(count)d servidores IPA coinciden" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Eliminado servidor IPA \"%(value)s\"" - -msgid "Ignore topology errors" -msgstr "Ignorar errores de topología" - -msgid "Ignore topology connectivity problems after removal" -msgstr "Ignorar problemas de conectividad de topología después de quitarla" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "Ignorar la comprobación del último servidor CA o DNS que queda" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" -"Saltar una comprobación si el último maestro CA o servidor DNS se ha quitado" - -msgid "Force server removal" -msgstr "Forzar la eliminación del servidor" - -msgid "Force server removal even if it does not exist" -msgstr "Fuerza el borrado del servidor aunque no exista" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" -"La replica de la clave maestra DNSSEC está activa. Desinstalarla podría " -"romper su sistema DNS. Por favor deshabilite o reemplace la clave maestra " -"DNSSEC primero." - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "Borrando este servidor dejará su instalación sin un DNS." - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" -"El borrado de este servidor no está permitido puesto que dejaría su " -"instalación sin un KRA." - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" -"El borrado de este servidor no está permitido puesto que dejaría su " -"instalción sin una CA." - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "Ignorar estos avisos y continuar con el borrado" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" -"Fallo al limpiar memberPrincipal %(principal)s de la entrada s4u2proxy " -"%(dn)s: %(err)s" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "Fallo al limpiar entradas DNA hostname para %(master)s: %(err)s" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" -"Fallo al quitar el servidor %(master)s de la lista de servidores: %(err)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "Fallo al limpiar claves Custodia para %(master)s: %(err)s" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "Fallo al limpiar principales/claves del servidor: %(err)s" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "Fallo al limpiar entradas %(hostname)s DNS: %(err)s" - -msgid "You may need to manually remove them from the tree" -msgstr "Usted puede necesitar borrarlo manualmente del árbol" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "Forzando el borrado de %(hostname)s" - -msgid "Ignoring topology connectivity errors." -msgstr "Ignorando los errores de topología de conectividad." - -msgid "Server has already been deleted" -msgstr "El servidor ya ha sido borrado" - -msgid "Agreements deleted" -msgstr "Acuerdos borrados" - -msgid "Following segments were not deleted:" -msgstr "Los siguientes segmentos no fueron borrados:" - -#, python-format -msgid "must be \"%s\"" -msgstr "debe ser \"%s\"" - -msgid "not allowed to perform server connection check" -msgstr "no permitido llevar a cabo la comprobación de conexión del servidor" - -msgid "Set enabled/hidden state of a server." -msgstr "Establecer estado habilitado/escondido de un servidor." - -msgid "State" -msgstr "Estado" - -msgid "Server state" -msgstr "Estado del servidor" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "Cambiado el estado del servidor de \"%(value)s\"." - -msgid "Cannot hide CA renewal master." -msgstr "No se puede ocultar el maestro de renovación de CA." - -msgid "Cannot hide DNSSec key master." -msgstr "No se puede ocultar la clave maestra DNSSec." - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "No se puede ocultar el último servidor habilitado %(name)s." - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -#, fuzzy -#| msgid "Allowed to create keytab" -msgid "Allowed to Impersonate" -msgstr "Permitido crear tabla de teclas" - -#, fuzzy -#| msgid "Kerberos principal" -msgid "Member principals" -msgstr "Principal kerberos" - -#, fuzzy, python-format -#| msgid "Malformed principal: '%(value)s'" -msgid "Malformed principal: %(error)s" -msgstr "Principal mal construido: '%(value)s'" - -#, fuzzy -#| msgid "Add a new delegation." -msgid "Add target to a named service delegation." -msgstr "Añadir una nueva delegación." - -#, python-format -msgid "member %s" -msgstr "miembro %s" - -#, fuzzy -#| msgid "Remove members from an HBAC service group." -msgid "Remove member from a named service delegation." -msgstr "Borrar miembros de un grupo de servicio HBAC." - -#, fuzzy -#| msgid "member service delegation target" -msgid "service delegation rule" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -#| msgid "member service delegation target" -msgid "service delegation rules" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -#| msgid "member service delegation target" -msgid "Service delegation rules" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -#| msgid "member service delegation target" -msgid "Service delegation rule" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy, python-format -#| msgid "Added delegation \"%(value)s\"" -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Delegación añadida \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted delegation \"%(value)s\"" -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Delegación eliminada \"%(value)s\"" - -#, fuzzy -#| msgid "member service delegation target" -msgid "privileged service delegation rule" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy, python-format -#| msgid "%(count)d delegation matched" -#| msgid_plural "%(count)d delegations matched" -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "%(count)d delegación coincidente" -msgstr[1] "%(count)d delegaciones coincidentes" - -#, fuzzy -#| msgid "member service delegation target" -msgid "service delegation target" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -#| msgid "member service delegation target" -msgid "service delegation targets" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -#| msgid "member service delegation target" -msgid "Service delegation targets" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -#| msgid "member service delegation target" -msgid "Service delegation target" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy, python-format -#| msgid "Added delegation \"%(value)s\"" -msgid "Added service delegation target \"%(value)s\"" -msgstr "Delegación añadida \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted delegation \"%(value)s\"" -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Delegación eliminada \"%(value)s\"" - -#, fuzzy -#| msgid "member service delegation target" -msgid "privileged service delegation target" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy, python-format -#| msgid "%(count)d delegation matched" -#| msgid_plural "%(count)d delegations matched" -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "%(count)d delegación coincidente" -msgstr[1] "%(count)d delegaciones coincidentes" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" -"\n" -"Migración a IPA\n" -"\n" -"Migrar usuarios y grupos desde un servidor LDAP a IPA.\n" -"\n" -"Esto lleva a cabo una consulta LDAP contra el servidor remoto buscando \n" -"usuarios y grupos en un contenedor. Con el objetivo de migrar las " -"contraseñas\n" -"usted necesita enlazar como un usuario que pueda leer el atributo " -"userPassword\n" -"sobre el servidor remoto. Esto normalmente está restringido a " -"administradores de\n" -"alto nivel como cn=Directory Manager en 389-ds (este es el usuario de enlace " -"por defecto).\n" -"\n" -"El contenedor de usuario por defecto es ou=People.\n" -"\n" -"El contenedor de grupo por defecto es ou=Groups.\n" -"\n" -"Los usuarios y grupos que ya existen en el servidor IPA son saltados.\n" -"\n" -"Dos esquemas LDAP definen como se almacenan los miembros del grupo:\n" -"RFC2307 y RFC2307bis. RFC2307bis usa miembro y miembro único para\n" -"especificar los miembros del grupo. RFC2307 usa memberUid. El esquema por " -"defecto es RFC2307bis.\n" -"\n" -"La característica de compatibilidad de esquema permite a IPA reformatear " -"datos\n" -"para sistemas que no soportan RFC2307bis. Se recomienda deshabilitar esta\n" -"característica durante la migración para reducir la sobrecarga del sistema. " -"Puede\n" -"ser rehabilitado después de la migración. Para migrar con esto habilitado " -"use la opción \"--with-compat\".\n" -"\n" -"Los usuarios migrados no tienen credenciales Kerberos, solo tienen su " -"contraseña\n" -"LDAP. Para completar el proceso de migración los usuarios necesitan ir a\n" -"to http://ipa.example.com/ipa/migration y autenticar usando su contraseña " -"LDAP\n" -" con el objetivo de generar sus credenciales Kerberos.\n" -"\n" -"La migración está deshabilitada por defecto. Use el comando ips config-mod " -"para\n" -" habilitarla:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"Si no se ha suministrado una base DN con –basedn IPA usará en su lugar el " -"valor\n" -"de defaultNamingContext si se ha establecido o el primer valor establecido " -"en\n" -"namingContexts en la raíz el servidor LDAP remoto.\n" -"\n" -"Los usuarios son añadidos como miembros del grupo de usuarios " -"predeterminado.\n" -"Esta puede ser una tarea que consuma mucho tiempo de modo que durante la\n" -"migración se hace por lotes para cada 100 usuarios. Como resultado habrá una " -"ventana en la que los usuarios se añadirán a IPA pero no serán miembros del\n" -"grupo de usuario predeterminado.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" La migración más sencilla, aceptando todo lo predeterminado:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Especificar el contenedor de usuario y grupo. Esto se puede usar para " -"migrar datos\n" -" de usuario y grupo desde un servidor IPA v1:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -"Puesto que el servidor IPA v2 ya contiene grupos predefinidos que pueden " -"chocar\n" -"con los grupos en servidor migrado (IPA v1) (por ejemplo admins, ipausers), " -"los\n" -"usuarios que tengan un grupo que choque con su grupo primario puede suceder\n" -"que pertenezcan a un grupo desconocido sobre el nuevo servidor IPA v2\n" -"Use la opción --group-overwrite-gid para sobreescribir la GID de los grupos " -"ya\n" -"existentes y evitar esta cuestión:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -"Los usuarios o grupos migrados pueden tener objetos clase y atributos\n" -"acompañantes desconocidos por el servidor IPS v2. Estos objetos clase y " -"atributos\n" -"pueden ser dejados fuera durante el proceso de migración:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"REGISTRO\n" -"\n" -"La migración registrará alarmas y errores en el registro de error Apache. " -"Este\n" -"fichero debería ser evaluado después de la migración para corregir o " -"investigar\n" -"cualquier cuestión que se descubra.\n" -"\n" -"Por cada 100 usuarios migrados y mensaje de nivel informativo será mostrado\n" -"dando el progreso actual y l duración para hacer posible rastrear el " -"progreso de la\n" -"migración.\n" -"\n" -"Si el nivel de registro es depuración, bien porque se haya fijado debug = " -"True en\n" -"etcipa/default.conf o etcipa/server.conf, se añadirá una entrada por cada " -"usuario\n" -"añadido más un resumen cuando el grupo de usuario predeterminado se haya\n" -"actualizado.\n" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" -"El principal %s de Kerberos ya existe. Utilice 'ipa user-mod' para definirlo " -"manualmente." - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" -"Incapaz de determinar si el principal Kerberos %s ya existe. Use 'ipa user-" -"mod' para establecerlo manualmente." - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" -"Falló al intenatar agregar al usuario al grupo predeterminado. Utilice 'ipa " -"group-add-member' para agregarlo manualmente. " - -msgid "Migration of LDAP search reference is not supported." -msgstr "Migración de búsqueda de referencia LDAP no está soportada." - -msgid "Malformed DN" -msgstr "DN Malformado" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(user)s no es un usuario POSIX" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" -". Comprobar GID del grupo existente. Use la opción --group-overwrite-gid " -"para anular la GID" - -msgid "Invalid LDAP URI." -msgstr " URI LDAP no válida." - -#, python-format -msgid "%s to exclude from migration" -msgstr "%s a excluir desde la migración" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" -"los resultados de la búsqueda de los objetos que se van a migrar se han " -"truncado por el servidor; el proceso de migración puede estar incompleto\n" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" -"%(container)s búsqueda LDAP no devolvió ningún resultado (buscar base: " -"%(search_base)s, objectclass: %(objectclass)s)" - -msgid "Default group for new users not found" -msgstr "Grupo predeterminado para nuevos usuarios no encontrado" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" -"\n" -"Hosts/Máquinas\n" -"\n" -"Un host representa una máquina. Puede ser usado en distintos contextos:\n" -"- las entradas de servicio están asociadas con un host\n" -"- un host almacena el host/ servicio principal\n" -"- un host puede ser usado en reglas de Control de Acceso basado en Host " -"(HBAC)\n" -"- cada cliente inscrito genera una entrada de host\n" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" -"\n" -"INSCRIPCIÓN:\n" -"\n" -"Hay tres escenarios de inscripción cuando se inscribe un nuevo cliente:\n" -"\n" -"1. Se está inscribiendo como administrador total. La entrada de host puede " -"existir o\n" -" no. Un administrador total es miembro del rol hostadmin role o del grupo " -"admins.\n" -"2. Se está inscribiendo como administrador limitado. El host debe existir " -"ya. Un\n" -" administrador limitado es miembro de un rol con el privilegio Host " -"Enrollment.\n" -"3. El host ha sido creado con una contraseña de una vez.\n" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" -"\n" -"RE-INSCRIPCIÓN:\n" -"\n" -"El host que ha sido inscrito en algún punto y pierde su configuración (e.g. " -"VM destruido) puede ser reinscrito.\n" -"\n" -"Para mas información, consulte las páginas de manual para ipa-client-" -"install.\n" -"\n" -"Un host puede almacenar opcionalmente información como donde está " -"localizado,\n" -"el SO que ejecuta, etc.\n" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" -"\n" -" Añadir un nuevo host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" -"\n" -" Borrar un host:\n" -" ipa host-del test.example.com\n" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" -"\n" -" Añadir un nuevo host con una contraseña de un uso:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" -"\n" -" Añadir un nuevo host con una contraseña aleatoria de un uso:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" -"\n" -" Modificar información sobre un host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" -"\n" -" Quitar las claves públicas SSH de un host y actualizar DNS para reflejar " -"este cambio:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" -"\n" -" Deshabilitar la clave Kerberos de host, el certificado SSL y todos sus " -"servicios:\n" -" ipa host-disable test.example.com\n" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" -"\n" -" Añadir un host que pueda manejar la tabla de teclas y certificado del " -"host:\n" -" ipa host-add-managedby --hosts=test2 test\n" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" -"\n" -" Permitir al usuario crear una tabla de teclas:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" - -msgid "Base-64 encoded host certificate" -msgstr "Certificado de host codificado en Base-64" - -msgid "Principal alias" -msgstr "Alias principal" - -msgid "SSH public key fingerprint" -msgstr "Huella digital de clave pública SSH" - -msgid "Authentication Indicators" -msgstr "Indicadores de Autenticación" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Ha sido agregado el equipo \"%(value)s\"" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Ha sido eliminado el equipo \"%(value)s\"" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" -"Borrar los registros A, AAAA, SSHFP y PTR del host(s) gestionado por IPA DNS" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "Sin registros A, AAAA, SSHFP o PTR encontrados." - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Ha sido modificado el equipo \"%(value)s\"" - -msgid "Password cannot be set on enrolled host." -msgstr "La contraseña no puede ser fijada en el host matriculado." - -msgid "cn is immutable" -msgstr "cn es inmutable" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "%(count)d equipo coincidente" -msgstr[1] "%(count)d equipos coincidentes" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Host desactivado \"%(value)s\"" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Añadidos certificados a host \"%(value)s\"" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Borrados certificados del host \"%(value)s\"" - -msgid "Add new principal alias to host entry" -msgstr "Añade un nuevo alias principal a una entrada de host" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Añadidos nuevos alias al host \"%(value)s\"" - -msgid "Remove principal alias from a host entry" -msgstr "Borra alias principal de la entrada de host" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Borrados alias del host \"%(value)s\"" - -msgid "Class of Service object used for linking policies with groups" -msgstr "Objeto Class of Service enlazando políticas con grupos" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" -"la prioridad debe ser un valor único (%(prio)d que ya esté siendo utilizado " -"por %(gname)s)" - -msgid "Add Class of Service entry" -msgstr "Añadir entrada Class of Service" - -msgid "Delete Class of Service entry" -msgstr "Borrar entrada Class of Service" - -msgid "Modify Class of Service entry" -msgstr "Modificar entrada Class of Service" - -msgid "Display Class of Service entry" -msgstr "Visualizar entrada Class of Service" - -msgid "Search for Class of Service entry" -msgstr "Búsqueda de entrada Class of Service" - -msgid "password policy" -msgstr "política de contraseña" - -msgid "password policies" -msgstr "políticas de contraseña" - -msgid "Password Policies" -msgstr "Políticas de Contraseña" - -#, fuzzy -#| msgid "Max renew" -msgid "Max repeat" -msgstr "Renovación máxima" - -#, fuzzy -#| msgid "Maximum number of entries returned" -msgid "Maximum number of same consecutive characters" -msgstr "Cantidad máxima de entradas obtenidas" - -#, fuzzy -#| msgid "Max renew" -msgid "Max sequence" -msgstr "Renovación máxima" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -#| msgid "User name" -msgid "User check" -msgstr "Nombre de usuario" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "La duración máxima de la contraseña debe ser mayor que la mínima." - -msgid "cannot delete global password policy" -msgstr "no puede borrar la Política global de contraseña" - -msgid "priority cannot be set on global policy" -msgstr "la prioridad no puede ser definida en una plítica global" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" -"\n" -"Confianza de reino cruzado\n" -"\n" -"Gestionar relaciones de confianza entre los dominios IPA y Active " -"Directory.\n" -"\n" -"Con el objetivo de permitir a los usuarios de un dominio remoto acceder a " -"los\n" -"recursos en el dominio IPA, se necesita establecer relaciones de confianza.\n" -"Actualmente IPA soporta solo confianza entre dominios IPA y Active Directory " -"bajo \n" -"el control de Windows Server 2008 o posterior, con nivel funcional 2008 o " -"posterior.\n" -"\n" -"Por favor advierta que el DNS en ambos lados de los dominios IPA y Active\n" -"Directory deberían ser configurados apropiadamente para descubrir a cada " -"uno.\n" -"Las relaciones de confianza se apoyan en la capacidad de descubrir recursos " -"especiales en el otro dominio por medio de los registros DNS.\n" -"\n" -"Ejemplos:\n" -"\n" -"1. Establecer confianza de reino cruzado con Active Directory usando el \n" -" dministrador de credenciales AD:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. Listar todas las relaciones de confianza existentes:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Mostrar detalles de la relación de confianza específica:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Borrar relaciones de confianza existentes:\n" -"\n" -" ipa trust-del \n" -"\n" -"Una vez que la relación de confianza está establecida, los usuarios remotos\n" -"necesitarán ser mapeados a grupos POSIX locales con el objetivo de usar " -"recursos\n" -"IPA. El mapeado debería ser hecho por medio del uso de la membresía externa " -"de\n" -"grupo no-POSIX y después este grupo debería ser incluido en uno de los " -"grupos locales POSIX.\n" -"\n" -"Ejemplo:\n" -"\n" -"1. Crear un grupo para el mapeo de administrador de dominio de confianza y " -"su\n" -"grupo POSIX local:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Añadir identificador de seguridad de Domain Admins del al " -"grupo\n" -" ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Permitir a los miembros del grupo admins_external ser asociados con el " -"grupo\n" -" POSIX ad-admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Lista de miembros de miembros externos del grupo ad_admins_external para " -"ver\n" -" sus SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"CONFIGURACIÓN GLOBAL DE CONFIANZA\n" -"\n" -"Cuando se instale un subpaquete de confianza IPA AD y está corriendo ipa-" -"adtrust-\n" -"install, se genera una configuración de dominio local (SID, GUID, nombre\n" -"NetBIOS). Estos identificadores se usan entonces cuando se comunica con un\n" -"dominio de confianza de un tipo concreto.\n" -"\n" -"1. Mostrar la configuración de confianza global para el tipo de confianza " -"Active Directory:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modificar la configuración global de todos los confiados de tipo Active " -"Directory y\n" -" establecer un grupo primario de retroceso (el GID del grupo primario de " -"retroceso\n" -" se usa como GID de usuario primario y el usuario autenticando al dominio " -"IPA no\n" -" tiene ningún otro GID primario establecido ya):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Cambiar el grupo primario de retroceso al grupo escondido predeterminado\n" -" (cualquier grupo con un objeto clae posixGroup está permitido):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" -" Alternativamente, los siguientes servidores son capaces de ejecutar este " -"comando: %(masters)s" - -msgid "AD Trust setup" -msgstr "Ajuste de Confianza AD" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" -"No puede llevar a cabo el comando seleccionado sin el soporte de Samba 4 " -"instalad. Asegúrese de tener el instalado el sub-paquete server-trust-ad de " -"IPA." - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" -"No puede llevar a cabo el comando seleccionado sin una instancia Samba 4 " -"configurada en este máquina. Asegúrese de estar ejecutando ipa-adtrust-" -"install sobre este servidor." - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" -"No puede buscar en los dominios de confianza sin un dominio propio " -"configurado. Asegúrese que tiene corriendo ipa-adtrust-install sobre el " -"servidor IPA primero" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" -"No se pudo recuperar dominios del bosque de confianza. Vea detalles en " -"error_log" - -msgid "trust" -msgstr "confianza" - -msgid "trusts" -msgstr "confianzas" - -msgid "Trust" -msgstr "Confianza" - -#, fuzzy -#| msgid "SID blacklist incoming" -msgid "SID blocklist incoming" -msgstr "Lista negra de SID entrante" - -#, fuzzy -#| msgid "SID blacklist outgoing" -msgid "SID blocklist outgoing" -msgstr "Lista negra de SID saliente" - -msgid "UPN suffixes" -msgstr "Sufijos UPN" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "SID no válido: {SID}" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" -"\n" -"Añadir nueva confianza a usar.\n" -"\n" -"Este comando establece la relación de confianza con otro dominio que llegar " -"a ser \n" -"trusted'. Como resultado, los usuarios del dominio de confianza puede " -"acceder a\n" -"los recursos de este dominio.\n" -"\n" -"Solo están soportados ahora la confianza con dominios Active Directory.\n" -"\n" -"El comando se puede ejecutar seguramente múltiples veces contra el mismo\n" -"dominio, esto causará cambios en las credenciales de relaciones de confianza " -"en\n" -"ambos lados.\n" -"\n" -"Advierta que si el comando se ejecuta previamente con un tipo de rango " -"específico\n" -"o con detección automática del tipo de rango y usted desea configurar un " -"tipo de\n" -"rango diferente, usted puede necesitar borrar primero la ID del rango " -"usando \n" -"ipa idrange-del antes de reintentar el comando con el rango deseado.\n" -" " - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" -"Tipo de rango de ID de dominios de confianza, uno de los valores permitidos" - -msgid "External trust" -msgstr "Confianza externa" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" -"Establecida confianza externa a un dominio en otro bosque. La confianza no " -"es transitiva más allá del dominio." - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "Añadida confianza Active Directory para el reino \"%(value)s\"" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Restablecida la confianza al dominio \"%(value)s\"" - -msgid "missing base_id" -msgstr "base_id desaparecida" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" -"pysss_murmur no está disponible en el servidor y no se ha dado base-id." - -msgid "trust type" -msgstr "tipo de confianza" - -msgid "only \"ad\" is supported" -msgstr "solo se admite «ad»" - -msgid "domain" -msgstr "dominio" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" -"No puede establecer confianza al AD desplegado en el mismo dominio que IPA. " -"Este ajuste no se soporta." - -msgid "Realm-domain mismatch" -msgstr "Flata de coincidencia de dominio reino" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" -"Para establecer confianza con Active Directory, el nombre de dominio y el " -"nombre de reino del servidor IPA deben coincidir" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" -"El dominio de confianza %(domain)s está incluido entre los dominios del " -"reino IPA realm. Necesita ser quitado antes de establecer la confianza. Vea " -"el comando \"ipa realmdomains-mod --del-domain\"." - -msgid "Trusted domain and administrator account use different realms" -msgstr "" -"El dominio de confianza y la cuenta del administrador usan reinos diferentes" - -msgid "Realm administrator password should be specified" -msgstr "Debería especificarse la contraseña del administrador del reino" - -msgid "id range type" -msgstr "tipo de rango de id" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" -"Solo se permiten los valores ipa-ad-trust e ipa-ad-trust-posix para --range-" -"type cuando se añade una confianza AD." - -msgid "id range" -msgstr "rango id" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" -"Ya existe un rango id para esta confianza. Usted debería bien borrar el " -"antiguo rango o excluir las opciones --base-id/--range-size del comando." - -msgid "range exists" -msgstr "el intervalo existe" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" -"Rango de ID con el mismo nombre pero diferente SID de dominio ya existe. El " -"nuevo rango de ID para el nuevo dominio de confianza debe ser creado " -"manualmente." - -msgid "range type change" -msgstr "cambio de tipo de rango" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" -"El rango de ID para el dominio de confianza ya existe, pero tiene un tipo " -"diferente. Por favor borre manualmente el rango viejo o no haga cumplir el " -"tipo por medio de la opción --range-type." - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" -"Incapaz de resolver el controlador de dominio para el dominio {domain}. " - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" -"La política de reenvío se define para ello en IPA DNS, ¿tal vez el " -"reenviador apunta al host incorrecto?" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" -"IPA gestiona DNS, por favor verifique su configuración DNS y asegúrese que " -"el servicio de registros del dominio '{domain}' puede ser resuelto. Se " -"pueden encontrar ejemplos de como configurar DNS con comandos CLI o con Web " -"UI en la documentación. " - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" -"Puesto que IPA no gestiona los registros DNS, asegúrese de que DNS está " -"configurado para resolver el dominio '{domain}' desde los hosts IPA y vuelta." - -msgid "Unable to verify write permissions to the AD" -msgstr "Incapaz de verificar los permisos de escritura al AD" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" -"No se especifican bastantes argumentos para llevar a cabo un ajusta de " -"confianza" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Confianza borrada \"%(value)s\"" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" -"\n" -" Modificar una confianza (para uso futuro).\n" -"\n" -" Actualmente solo está disponible la opción predeterminada para modificar " -"los\n" -" atributos LDAP. Opciones más especificas serán añadidas en futuras " -"versiones.\n" -" " - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" -"Confianza modificada \"%(value)s\" (el cambio será efectivo en 60 segundos)" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d confianza encontrada" -msgstr[1] "%(count)d confianzas encontradas" - -msgid "trust configuration" -msgstr "configuración de la confianza" - -msgid "Global Trust Configuration" -msgstr "Configuración Global de Confianza" - -msgid "IPA AD trust agents" -msgstr "IPA AD agentes de confianza" - -msgid "IPA servers configured as AD trust agents" -msgstr "Servidores IPA configurados como agentes de confianza AD" - -msgid "IPA AD trust controllers" -msgstr "Controladores de confianza IPA AD" - -msgid "IPA servers configured as AD trust controllers" -msgstr "Servidores IPA configurados como controladores de confianza AD" - -msgid "unsupported trust type" -msgstr "tipo de confianza no soportado" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "Modificada \"%(value)s\" configuración de confianza" - -msgid "SID" -msgstr "SID" - -msgid "sidgen_was_run" -msgstr "sidgen_was_run" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" -"Este comando se basa en la existencia del grupo \"editors\" pero este grupo " -"no h sido encontrado." - -msgid "trust domain" -msgstr "dominio de confianza" - -msgid "trust domains" -msgstr "dominios de confianza" - -msgid "Trusted domains" -msgstr "Dominios de confianza" - -msgid "Trusted domain" -msgstr "Dominio de confianza" - -msgid "Domain enabled" -msgstr "Dominio habilitado" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "Borrada información sobre el dominio de confianza \"%(value)s\"" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"no puede borrar el dominio raíz de la confianza, use trust-del para borrarla " -"misma confianza" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" -"Lista de dominios de confianza refrescados con éxito. Use el comando " -"trustdomain-find para listarlos." - -#, fuzzy -#| msgid "IPA servers configured as AD trust agents" -msgid "Configure this server as a trust agent." -msgstr "Servidores IPA configurados como agentes de confianza AD" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, fuzzy -#| msgid "not allowed to modify user entries" -msgid "not allowed to remotely add agent" -msgstr "no se permite modificar las entradas de los usuarios" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Habilitado dominio de confianza \"%(value)s\"" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" -"El dominio raíz de la confianza está siempre habilitado para la confianza " -"existente" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Deshabilitar dominio de confianza \"%(value)s\"" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"no puede deshabilitar el dominio raíz de la confianza, use trust-del para " -"borrar la confianza misma" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" -"\n" -"Mapeando la Identidad del Certificado\n" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" -"\n" -"Gestionar la configuración y las reglas del Mapeo de Identidad del " -"Certificado.\n" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" -"\n" -"IPA soporta el uso de certificados para la autenticación. Las certificados " -"pueden ser\n" -"bien almacenados en la entrada del usuario (el certificado completo en el " -"atributo\n" -"usercertificate) o simplemente enlazado a la entrada de usuario a través de " -"un\n" -"mapeo. Esta código habilita la gestión de las reglas permitiendo enlazar un\n" -"certificado a una entrada de usuario.\n" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" -"\n" -" Mostrar la configuración global del Mapeo de Identidad de Certificado:\n" -" ipa certmapconfig-show\n" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" -"\n" -" Modificar la configuración global del Mapeo de Identidad de Certificado:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" -"\n" -" Crea una nueva Regla de Mapeo de Identidad de Certificado:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" -"\n" -" Modificar una Regla de Identidad de Certificado:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" -"\n" -" Deshabilitar una Regla de Mapeo de Identidad de Certificado:\n" -" ipa certmaprule-disable rule1\n" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" -"\n" -" Habilitar una Regla de Mapeo de Identidad de Certificado:\n" -" ipa certmaprule-enable rule1\n" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" -"\n" -" Muestra información sobre una Regla de Mapeo de Identidad de Certificado:\n" -" ipa certmaprule-show rule1\n" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" -"\n" -" Encuentra todas las Reglas de Mapeo de Identidad de Certificado con el " -"dominio especificado:\n" -" ipa certmaprule-find --domain example.com\n" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" -"\n" -" Borra una Regla de Mapeo de Identidad de Certificado:\n" -" ipa certmaprule-del rule1\n" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" -"El dominio(s) \"%s\" no puede ser usado para aplicar la comprobación " -"altSecurityIdentities." - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" -"La regla de mapeo con altSecurityIdentities debería ser aplicada a un " -"dominio Active Directory de confianza pero ningún dominio fue asociado con " -"la regla." - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "El dominio %s no es un dominio IPA ni un dominio de confianza." - -msgid "Certificate Identity Mapping configuration options" -msgstr "Opciones de configuración del Mapeo de Identidad de Certificado" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "Configuración Global del Mapeo de Identidad de Certificado" - -msgid "Prompt for the username" -msgstr "Pedir el nombre de usuario" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" -"Pedir el nombre de usuario cuando múltiples identidades están mapeadas a un " -"certificado" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "Modificar la configuración de Mapeo de Identidad de Certificado." - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "Muestra la configuración actual del Mapeo de Identidad de Certificado." - -msgid "Certificate Identity Mapping Rules" -msgstr "Reglas de Mapeo de Identidad de Certificado" - -msgid "Certificate Identity Mapping Rule" -msgstr "Regla de Mapeo de Identidad de Certificado" - -msgid "Certificate Identity Mapping Rule name" -msgstr "Nombre de Regla de Mapeo de Identidad de Certificado" - -msgid "Certificate Identity Mapping Rule description" -msgstr "Descripción de la Regla de Mapeo de Identidad de Certificado" - -msgid "Mapping rule" -msgstr "Regla de mapeo" - -msgid "Rule used to map the certificate with a user entry" -msgstr "Regla usada para mapear el certificado con una entrada de usuario" - -msgid "Matching rule" -msgstr "Regla de coincidencia" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" -"Regla usada para comprobar si un certificado puede ser usado para " -"autenticación" - -msgid "Domain where the user entry will be searched" -msgstr "Dominio donde se buscará la entrada de usuario" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" -"Prioridad de la regla (el número más alto significa la prioridad más baja" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "Crear una nueva Regla de Mapeo de Identidad de Certificado." - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Añadida Regla de Mapeo de Identidad de Certificado \"%(value)s\"" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "Modificar una Regla de Mapeo de Identidad de Certificado." - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Regla de Mapeo de Identidad de Certificado modificada \"%(value)s\"" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "Buscar Reglas de Mapeo de Identidad de Certificado." - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "%(count)d Regla de Mapeo de Identidad de Certificado coincidente" -msgstr[1] "%(count)d Reglas de Mapeo de Identidad de Certificado coincidentes" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" -"Visualizar información sobre una Regla de Mapeo de Identidad de Certificado." - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "Borrar una Regla de Mapeo de Identidad de Certificado." - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Regla de Mapeo de Identidad de Certificado \"%(value)s\" borrada" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "Habilitar una Regla de Mapeo de Identidad de Certificado." - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Regla de Mapeo de Identidad de Certificado \"%(value)s\" habilitada" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "Deshabilitar una Regla de Mapeo de Identidad de Certificado." - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Regla de Mapeo de Identidad de Certificado \"%(value)s\" deshabilitada" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "Fallo al conectar sssd sobre SystemBus. Vea detalles en error_log" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" -"Fallo al encontrar usuarios sobre SystemBus. Vea detalles en error_log" - -msgid "User logins" -msgstr "Accesos de usuario" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" -"\n" -" Buscar usuarios que coincidan con el certificado suministrado.\n" -"\n" -" Este comando se basa en SSSD para recuperar la lista de los usuarios\n" -" coincidentes y puede devolver los datos en cache. Para más información " -"sobre \n" -" la purga del cache SSSD, vea por favor la documentación sss_cache.\n" -" " - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "%(count)s usuario coincidente" -msgstr[1] "%(count)s usuarios coincidentes" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "Privilegio" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "Privilegio añadido \"%(value)s\"" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Privilegio eliminado \"%(value)s \"" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "Privilegio modificado \"%(value)s \"" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d privilegio coincidente" -msgstr[1] "%(count)d privilegios coincidentes" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -29831,703 +30503,35 @@ msgstr "Borrar alias principal de un servicio" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "Borrados alias al servicio principal \"%(value)s\"" -msgid "delegation" -msgstr "delegación" +msgid "self service permission" +msgstr "auto servicio de permiso" -msgid "delegations" -msgstr "delegaciones" +msgid "self service permissions" +msgstr "auto servicio de permisos" -msgid "Delegations" -msgstr "Delegaciones" +msgid "Self Service Permissions" +msgstr "Permisos de autoservicio" -msgid "Delegation" -msgstr "Delegación" +msgid "Self Service Permission" +msgstr "Auto Servicio de Permiso" #, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "Delegación añadida \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" +msgstr "Añadido autoservicio \"%(value)s\"" #, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "Delegación eliminada \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "autoservicio eliminados \"%(value)s\"" #, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "Delegación modificada \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" +msgstr "Autoservicio modificado \"%(value)s\"" #, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "%(count)d delegación coincidente" -msgstr[1] "%(count)d delegaciones coincidentes" - -msgid "The deny type has been deprecated." -msgstr "El tipo deny ha quedado obsoleto." - -msgid "HBAC rules" -msgstr "Reglas HBAC" - -msgid "HBAC Rules" -msgstr "Reglas HBAC" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "Añadida regla HBAC \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Suprimida regla HBAC \"%(value)s\"" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "Modificada regla HBAC \"%(value)s\"" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "%(count)d regla coincidente de HBAC" -msgstr[1] "%(count)d reglas coincidentes de HBAC " - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "Habilitada regla HBAC \"%(value)s\"" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" regla HBAC desactivada " - -msgid "Access time" -msgstr "Hora de acceso" - -#, fuzzy -#| msgid "Add target hosts and hostgroups to an HBAC rule." -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "Añadir hosts objetivos y grupos de host a una regla HBAC." - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "Eliminar miembro desde un grupo." - -#, python-format -msgid "Access granted: %s" -msgstr "Acceso obtenido: %s" - -msgid "operation not defined" -msgstr "operación no definida" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "no está permitido llevar a cabo la operación: %s" - -msgid "No such virtual command" -msgstr "Ningún comando virtual" - -msgid "Member service groups" -msgstr "Grupos de miembro de servicio" - -msgid "Member HBAC service groups" -msgstr "Grupos de servicio de Miembros HBAC" - -#, fuzzy -#| msgid "Member services" -msgid "Member ID user overrides" -msgstr "Servicios de miembros" - -#, fuzzy -#| msgid "Indirect Member users" -msgid "Indirect Member ID user overrides" -msgstr "Usuarios indirectos miembros" - -msgid "Indirect Member permissions" -msgstr "" -"\\n\n" -"Permisos indirectos de miembro " - -msgid "Indirect Member HBAC service" -msgstr "Servicio HBAC de miembro indirecto" - -msgid "Indirect Member HBAC service group" -msgstr "Grupo de servicio HBAC de miembros indirectos " - -msgid "Invalid format. Should be name=value" -msgstr "" - -#, fuzzy -#| msgid "This entry cannot be enabled or disabled" -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Esta entrada no puede ser activada o desactivada" - -msgid "entry" -msgstr "entrada" - -msgid "entries" -msgstr "entradas" - -msgid "Entry" -msgstr "Entrada" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "no se encuentra la entrada (%(container)s) de contenedor" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s: no se encuentra %(oname)s" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr " %(oname)s con el nombre \"%(pkey)s\" ya existe" - -#, fuzzy, python-format -#| msgid "attribute \"%s\" not allowed" -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "atributo \"%s\" no permitido" - -#, fuzzy, python-format -#| msgid "attribute \"%s\" not allowed" -msgid "these attributes are not allowed: %(attrs)s" -msgstr "atributo \"%s\" no permitido" - -#, fuzzy -#| msgid "domain is not configured" -msgid "attribute is not configurable" -msgstr "el dominio no está configurado" - -#, fuzzy -#| msgid "The username attribute on the user object" -msgid "No such attribute on this entry" -msgstr "El atributo username sobre el objeto usuario" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "Cambie el nombre del %(ldap_obj_name)s objeto" - -msgid "the entry was deleted while being modified" -msgstr "la entrada fue eliminada mientras estaba siendo modificada" - -#, python-format -msgid "%s" -msgstr "%s" - -#, python-format -msgid "%s to add" -msgstr "%s a añadir" - -#, python-format -msgid "%s to remove" -msgstr "%s a eliminar" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, fuzzy, python-format -#| msgid "Search for services without these managed by hosts." -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy, python-format -#| msgid "Added new aliases to user \"%(value)s\"" -msgid "added attribute value to entry %(value)s" -msgstr "Añade nuevos alias al usuario \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Removed aliases from user \"%(value)s\"" -msgid "removed attribute values from entry %(value)s" -msgstr "Borrados alias del usuario \"%(value)s\"" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -#, fuzzy -#| msgid "must be True or False" -msgid "must be TRUE or FALSE" -msgstr "debe ser True o False" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#, fuzzy -#| msgid "Password expiration" -msgid "User password expiration" -msgstr "Caducidad de la contraseña" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -#, fuzzy -#| msgid "Home directory" -msgid "SMB Home Directory" -msgstr "Directorio principal" - -#, fuzzy -#| msgid "Home directory base" -msgid "SMB Home Directory Drive" -msgstr "Base del directorio principal" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "Administrador %(manager)s no encontrado" - -#, fuzzy -#| msgid "file to store certificate in" -msgid "Issuer of the certificate" -msgstr "archivo para almacenar" - -#, fuzzy -#| msgid "must be a certificate" -msgid "Subject of the certificate" -msgstr "debe ser un certificado" - -#, fuzzy -#| msgid "cannot be empty" -msgid "cannot have an empty subject" -msgstr "no puede estar vacío" - -#, fuzzy -#| msgid "cannot specify both raw certificate and file" -msgid "cannot specify both subject/issuer and certificate" -msgstr "no puede especificar un certificado RAW y un archivo" - -#, fuzzy -#| msgid "cannot specify both raw certificate and file" -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "no puede especificar un certificado RAW y un archivo" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "Añade uno o más mapeados de certificados a la entrada de usuario." - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "Añadidos certificados al usuario \"%(value)s\"" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "Borra uno o más mapeados de certificados de la entrada de usuario." - -#, fuzzy, python-format -#| msgid "Removed certificates from user \"%(value)s\"" -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "Certificados borrados del usuario \"%(value)s\"" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Ha sido agregado el usuario \"%(value)s\"" - -msgid "Default group for new users is not POSIX" -msgstr "El grupo predeterminado para nuevos usuarios no es POSIX" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Ha sido eliminado el usuario \"%(value)s\"" - -#, python-format -msgid "%s: user is already preserved" -msgstr "%s: usuario ya preservado" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Ha sido modificado el usuario \"%(value)s\"" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Recuperada cuenta de usuario \"%(value)s\"" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "usuario \"%s\" ya está activo" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Cuenta de usuario por etapas \"%(value)s\"" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr " \"%(value)s\" de cuenta de usuario desactivada" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr " \"%(value)s\" de cuenta de usuario activada" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" -"\n" -"Desbloquear una cuenta de usuario\n" -"\n" -" Una cuenta de usuario puede llegar a bloquearse si la contraseña se ha " -"introducido incorrectamente demasiadas\n" -"veces dentro de un período de tiempo controlado por la política de\n" -"contraseña. Una cuenta bloqueada es una condición temporal y puede ser " -"desbloqueada por\n" -"un administrador." - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Cuenta desbloqueada \" %(value)s \"" - -msgid "Failed logins" -msgstr "Inicios de sesión fallidos" - -msgid "Last successful authentication" -msgstr "Última autenticación exitosa" - -msgid "Last failed authentication" -msgstr "Última autenticación fallada" - -msgid "Time now" -msgstr "Ahora" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" -"\n" -" Estado de bloqueo de una cuenta de usuario\n" -"\n" -" Una cuenta de usuario puede resultar bloqueada si la contraseña se " -"introduce\n" -" incorrectamente muchas veces dentro de un período especifico de tiempo\n" -" controlado por la política de contraseña. Un bloqueo de cuenta es una " -"condición\n" -" temporal y debe ser desbloqueada por un administrador.\n" -"\n" -" Esto conecta con el máster IPA y muestra el estado de bloqueo de cada " -"uno.\n" -"\n" -" Para determinar si una cuenta está bloqueada en un servidor dado usted\n" -" necesita comparar el número de accesos fallido y la hora del último " -"fallo. Para\n" -" que una cuenta se bloquee debe exceder maxfail dentro de la duración\n" -" failinterval según se especifique en la política de contraseña asociada " -"con el\n" -" usuario.\n" -"\n" -" El contador de acceso fallado se modifica solo cuando un usuario intenta " -"acceder\n" -" por lo que es posible que una cuenta puede aparecer bloqueada pero el " -"último\n" -" acceso fallado sea más antiguo que el lockouttime de la política de " -"contraseña.\n" -" Esto significa que el usuario puede intentar acceder otra vez." - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "%(host)s falló: %(error)s" - -#, python-format -msgid "%(host)s failed" -msgstr "%(host)s falló" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Cuenta deshabilitada: %(disabled)s" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Añadidos certificados al usuario \"%(value)s\"" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Certificados borrados del usuario \"%(value)s\"" - -msgid "Add new principal alias to the user entry" -msgstr "Añade un nuevo alias principal a la entrada de usuario" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Añade nuevos alias al usuario \"%(value)s\"" - -msgid "Remove principal alias from the user entry" -msgstr "Borra el alias principal de la entrada de usuario" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Borrados alias del usuario \"%(value)s\"" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "%(count)d autoservicio coincidente" +msgstr[1] "%(count)d autoservicios coincidentes" #, python-format msgid "all masters must have %(role)s role enabled" @@ -30750,6 +30754,27 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" +msgid "Request must be a dict" +msgstr "La petición debe ser un diccionario" + +msgid "Request is missing \"method\"" +msgstr "La petición está con \"method\" desaparecido" + +msgid "Request is missing \"params\"" +msgstr "La petición está con \"params\" desaparecido" + +msgid "params must be a list" +msgstr "params debe ser una lista" + +msgid "params must contain [args, options]" +msgstr "params debe contener [args, options]" + +msgid "params[0] (aka args) must be a list" +msgstr "params[0] (aka args) debe ser una lista" + +msgid "params[1] (aka options) must be a dict" +msgstr "params[1] (aka options) debe ser un diccionario" + #, python-format msgid "" "\n" @@ -30777,27 +30802,6 @@ msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" "La topologia no permite al servidor %(server)s replicar con servidores:" -msgid "Request must be a dict" -msgstr "La petición debe ser un diccionario" - -msgid "Request is missing \"method\"" -msgstr "La petición está con \"method\" desaparecido" - -msgid "Request is missing \"params\"" -msgstr "La petición está con \"params\" desaparecido" - -msgid "params must be a list" -msgstr "params debe ser una lista" - -msgid "params must contain [args, options]" -msgstr "params debe contener [args, options]" - -msgid "params[0] (aka args) must be a list" -msgstr "params[0] (aka args) debe ser una lista" - -msgid "params[1] (aka options) must be a dict" -msgstr "params[1] (aka options) debe ser un diccionario" - #, python-format msgid "must equal %r" msgstr "debe ser igual a %r" diff --git a/po/eu.po b/po/eu.po index 3968482f9..a887896fd 100644 --- a/po/eu.po +++ b/po/eu.po @@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2019-11-11 10:06+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Basque\n" @@ -18,6 +18,103 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "ipa-getkeytab not found\n" +msgid "principal not found\n" +msgstr "ez da ipa-getkeytab aurkitu\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "ipa-getkeytab not found\n" +msgid "realm not found\n" +msgstr "ez da ipa-getkeytab aurkitu\n" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Realm name" +msgstr "Berrizendatu" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + #, c-format msgid "Out of memory!\n" msgstr "" @@ -275,103 +372,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, fuzzy, c-format -#| msgid "ipa-getkeytab not found\n" -msgid "principal not found\n" -msgstr "ez da ipa-getkeytab aurkitu\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -#| msgid "ipa-getkeytab not found\n" -msgid "realm not found\n" -msgstr "ez da ipa-getkeytab aurkitu\n" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -#, fuzzy -#| msgid "Rename" -msgid "Realm name" -msgstr "Berrizendatu" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - #, c-format msgid "cannot open configuration file %s\n" msgstr "" @@ -9599,6 +9599,109 @@ msgid "" "Establish bi-directional trust. By default trust is inbound one-way only." msgstr "" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +#| msgid "description" +msgid "Profile description" +msgstr "deskribapena" + +#, fuzzy +#| msgid "A description of this host" +msgid "Brief description of this profile" +msgstr "Ostalari honen deskribapena" + +#, fuzzy +#| msgid "New Certificate" +msgid "Store issued certificates" +msgstr "Ziurtagiri berria" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for Certificate Profiles." +msgstr "Bilatu taldeak." + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "" "\n" "ID ranges\n" @@ -9811,109 +9914,6 @@ msgid "" " " msgstr "" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -#| msgid "description" -msgid "Profile description" -msgstr "deskribapena" - -#, fuzzy -#| msgid "A description of this host" -msgid "Brief description of this profile" -msgstr "Ostalari honen deskribapena" - -#, fuzzy -#| msgid "New Certificate" -msgid "Store issued certificates" -msgstr "Ziurtagiri berria" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -#, fuzzy -#| msgid "Search for groups." -msgid "Search for Certificate Profiles." -msgstr "Bilatu taldeak." - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - msgid "Remove users that can manage this token." msgstr "" @@ -12158,161 +12158,20 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "Additional instructions:" +msgid "Results are truncated, try a more specific search" msgstr "" #, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" +msgid "Unknown option: %(option)s" msgstr "" -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." +msgid "Client version. Used to determine if server will accept request." msgstr "" -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" +msgid "any of the configured servers" msgstr "" -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." +msgid "Exceeded number of tries to forward a request." msgstr "" #, python-format @@ -12370,6 +12229,140 @@ msgstr "" msgid "No file to read" msgstr "" +msgid "incorrect type" +msgstr "" + +msgid "Only one value is allowed" +msgstr "" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +msgid "must be an integer" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "can be at most %(maxvalue)s" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +#, fuzzy +#| msgid "New Certificate" +msgid "must be a certificate" +msgstr "Ziurtagiri berria" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "must be '%(value)s'" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +msgid "must be datetime value" +msgstr "" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +msgid "must be DNS name" +msgstr "" + +msgid "must be absolute" +msgstr "" + +msgid "must be relative" +msgstr "" + +msgid "must be dictionary" +msgstr "" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + msgid "A dictionary representing an LDAP entry" msgstr "" @@ -12381,16 +12374,6 @@ msgstr "ACI balioen zerrenda bat" msgid "All commands should at least have a result" msgstr "" -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" @@ -12761,152 +12744,161 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" -msgid "incorrect type" +msgid "Additional instructions:" msgstr "" -msgid "Only one value is allowed" -msgstr "" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "can be at most %(maxvalue)s" -msgstr "\"%(value)s\" ostalaria ezabatuta" - #, python-format msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." msgstr "" #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" msgstr "" #, python-format -msgid "must be at least %(minlength)d bytes" +msgid "'%(option)s' option is deprecated. %(additional_info)s" msgstr "" #, python-format -msgid "can be at most %(maxlength)d bytes" +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" msgstr "" #, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -#, fuzzy -#| msgid "New Certificate" -msgid "must be a certificate" -msgstr "Ziurtagiri berria" - -msgid "must be a certificate signing request" +msgid "DNS server %(server)s: %(error)s." msgstr "" #, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "must be at least %(minlength)d characters" +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." msgstr "" #, python-format -msgid "can be at most %(maxlength)d characters" +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "must be exactly %(length)d characters" +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." msgstr "" #, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "must be '%(value)s'" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, python-format -msgid "must be one of %(values)s" -msgstr "" - -msgid "must be datetime value" -msgstr "" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -msgid "must be relative" -msgstr "" - -msgid "must be dictionary" -msgstr "" - -msgid "must be Kerberos principal" +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" msgstr "" #, python-format -msgid "Malformed principal: '%(value)s'" +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." msgstr "" -msgid "Service principal is required" +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." msgstr "" #, python-format -msgid "%(filename)s: file not found" +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." msgstr "" -#, python-brace-format -msgid "Unable to parse option {item}" +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" msgstr "" -msgid "any of the configured servers" +#, python-format +msgid "%(line)s" msgstr "" -msgid "Exceeded number of tries to forward a request." +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." msgstr "" msgid "Filename is empty" @@ -13010,6 +13002,18 @@ msgstr "" msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + #, python-format msgid "Retrieving CA cert chain failed: %s" msgstr "" @@ -13026,10 +13030,6 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" -#, python-format -msgid "objectclass %s not found" -msgstr "" - #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" @@ -13167,122 +13167,10 @@ msgid_plural "%(count)d automount keys matched" msgstr[0] "" msgstr[1] "" +#, python-format msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -#, fuzzy -#| msgid "Certificate" -msgid "Certificate Profile" -msgstr "Ziurtagiria" - -#, fuzzy -#| msgid "Certificate" -msgid "Certificate Profiles" -msgstr "Ziurtagiria" - -#, fuzzy -#| msgid "Configuration" -msgid "Profile configuration" -msgstr "Konfigurazioa" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Imported profile \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted profile \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "" @@ -13514,22 +13402,4409 @@ msgstr "" msgid "%i CAs removed." msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added automember rule \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added condition(s) to \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified automember rule \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted automember rule \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "taldeak" + +msgid "User Group" +msgstr "Erabiltzaile-taldea" + +#, fuzzy, python-format +#| msgid "Added hostgroup \"%(value)s\"" +msgid "Added group \"%(value)s\"" +msgstr "\"%(value)s\" ostalari-taldea gehituta" + +msgid "gid cannot be set for external group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted group \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy +#| msgid "Target group" +msgid "privileged group" +msgstr "Helburuko taldea" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified group \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Not a managed group" +msgstr "Sortu talde berri bat." + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "" +"\n" +"DNS server configuration\n" +msgstr "Konfigurazioa" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "DNS server" +msgstr "IPA zerbitzaria" + +msgid "DNS servers" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "DNS Servers" +msgstr "IPA zerbitzaria" + +#, fuzzy +#| msgid "IPA Server" +msgid "DNS Server" +msgstr "IPA zerbitzaria" + +#, fuzzy +#| msgid "Service name" +msgid "DNS Server name" +msgstr "Zerbitzuaren izena" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified DNS server \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for DNS servers." +msgstr "Bilatu taldeak." + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA DNS Server is not installed" +msgstr "Erabili beharreko IPA zerbitzaria" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +msgid "Delete a DNS server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "HBAC service" +msgid "HBAC services" +msgstr "HBAC zerbitzua" + +msgid "HBAC Services" +msgstr "HBAC zerbitzuak" + +#, fuzzy +#| msgid "HBAC Services" +msgid "HBAC Service" +msgstr "HBAC zerbitzuak" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "HBAC service" +msgid "HBAC service group" +msgstr "HBAC zerbitzua" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC service groups" +msgstr "HBAC zerbitzu-taldearen deskribapena" + +#, fuzzy +#| msgid "Service Groups" +msgid "HBAC Service Groups" +msgstr "Zerbitzu-taldeak" + +#, fuzzy +#| msgid "Service Groups" +msgid "HBAC Service Group" +msgstr "Zerbitzu-taldeak" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, fuzzy, python-format +#| msgid "HBAC service group description" +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "HBAC zerbitzu-taldearen deskribapena" +msgstr[1] "HBAC zerbitzu-taldearen deskribapena" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "Principal alias" +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "User password expiration" +msgstr "Erabiltzailearen pasahitza" + +#, fuzzy +#| msgid "SHA1 Fingerprint" +msgid "SSH public key fingerprint" +msgstr "SHA1 hatz-marka" + +msgid "Base-64 encoded user certificate" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate mapping data" +msgstr "Ziurtagiria" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +#, fuzzy +#| msgid "Home directory base" +msgid "SMB Home Directory" +msgstr "Direktorio nagusiaren oinarria" + +#, fuzzy +#| msgid "Home directory base" +msgid "SMB Home Directory Drive" +msgstr "Direktorio nagusiaren oinarria" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +msgid "Issuer" +msgstr "" + +#, fuzzy +#| msgid "New Certificate" +msgid "Issuer of the certificate" +msgstr "Ziurtagiri berria" + +msgid "Subject" +msgstr "Gaia" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added segment \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted segment \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified segment \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified topology suffix \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "LDAP URI baliogabea." + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +#, fuzzy +#| msgid "Default group for new users" +msgid "Default group for new users not found" +msgstr "Erabiltzaile berrientzako talde lehenetsia" + +#, fuzzy +#| msgid "groups" +msgid "netgroups" +msgstr "taldeak" + +#, fuzzy +#| msgid "groups" +msgid "Netgroups" +msgstr "taldeak" + +#, fuzzy +#| msgid "group" +msgid "Netgroup" +msgstr "taldea" + +#, fuzzy, python-format +#| msgid "Added hostgroup \"%(value)s\"" +msgid "Added netgroup \"%(value)s\"" +msgstr "\"%(value)s\" ostalari-taldea gehituta" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted netgroup \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified netgroup \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "OTP configuration options" +msgstr "Konfigurazioa" + +#, fuzzy +#| msgid "Configuration" +msgid "OTP Configuration" +msgstr "Konfigurazioa" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Changed password for \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "PKINIT" + +#, fuzzy +#| msgid "PKINIT" +msgid "PKINIT status" +msgstr "PKINIT" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "invalid port number" +msgstr "Serie-zenbakia" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "RADIUS Servers" +msgstr "IPA zerbitzaria" + +#, fuzzy +#| msgid "IPA Server" +msgid "RADIUS Server" +msgstr "IPA zerbitzaria" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added privilege \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted privilege \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified privilege \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "password policy" +msgstr "pasahitza" + +#, fuzzy +#| msgid "password" +msgid "password policies" +msgstr "pasahitza" + +#, fuzzy +#| msgid "Password" +msgid "Password Policies" +msgstr "Pasahitza" + +#, fuzzy +#| msgid "Password" +msgid "Password Policy" +msgstr "Pasahitza" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +#, fuzzy +#| msgid "Default e-mail domain" +msgid "Realm domains" +msgstr "E-posta domeinu lehenetsia" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added service delegation rule \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +#, fuzzy +#| msgid "Service group name" +msgid "Service delegation target" +msgstr "Zerbitzu-taldearen izena" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Users" +msgid "Stage Users" +msgstr "Erabiltzaileak" + +#, fuzzy +#| msgid "External User" +msgid "Stage User" +msgstr "Kanpoko erabiltzailea" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added stage user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted stage user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified stage user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Activate a stage user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate chain" +msgstr "Ziurtagiria" + +msgid "X.509 certificate chain" +msgstr "" + +#, fuzzy +#| msgid "Email address" +msgid "Subject email address" +msgstr "E-posta helbidea" + +#, fuzzy +#| msgid "Subject" +msgid "Subject DNS name" +msgstr "Gaia" + +#, fuzzy +#| msgid "Street address" +msgid "Subject X.400 address" +msgstr "Kalea" + +#, fuzzy +#| msgid "Home directory base" +msgid "Subject directory name" +msgstr "Direktorio nagusiaren oinarria" + +msgid "Subject EDI Party name" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject URI" +msgstr "Gaia" + +#, fuzzy +#| msgid "Street address" +msgid "Subject IP Address" +msgstr "Kalea" + +#, fuzzy +#| msgid "Subject" +msgid "Subject OID" +msgstr "Gaia" + +#, fuzzy +#| msgid "Subject" +msgid "Subject UPN" +msgstr "Gaia" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "Hatz-marka (SHA1)" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "Fingerprint (SHA256)" +msgstr "Hatz-marka (SHA1)" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial number (hex)" +msgstr "Serie-zenbakia" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +#, fuzzy +#| msgid "Sudo Option" +msgid "'add' option" +msgstr "Sudo aukera" + +#, fuzzy +#| msgid "The group doesn't exist" +msgid "The principal for this request doesn't exist." +msgstr "Taldea ez da existitzen" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "Egoera" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "sudo command" +msgstr "Sudo komandoak" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "sudo commands" +msgstr "Sudo komandoak" + +msgid "Sudo Commands" +msgstr "Sudo komandoak" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +#, fuzzy +#| msgid "HBAC rules" +msgid "sudo rules" +msgstr "HBAC arauak" + +#, fuzzy +#| msgid "HBAC Rules" +msgid "Sudo Rules" +msgstr "HBAC arauak" + +#, fuzzy +#| msgid "Sudo" +msgid "Sudo Rule" +msgstr "Sudo" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +#, fuzzy +#| msgid "Users" +msgid "users" +msgstr "Erabiltzaileak" + +#, fuzzy +#| msgid "Any Command" +msgid "command" +msgstr "Edozein komando" + +#, fuzzy +#| msgid "Run Commands" +msgid "commands" +msgstr "Exekutatu komandoak" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +#, fuzzy +#| msgid "groups" +msgid "group runAs" +msgstr "taldeak" + +#, fuzzy +#| msgid "groups" +msgid "runAs groups" +msgstr "taldeak" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command Group" +msgid "sudo command group" +msgstr "Sudo komando-taldea" + +#, fuzzy +#| msgid "Sudo Command Group" +msgid "sudo command groups" +msgstr "Sudo komando-taldea" + +#, fuzzy, python-format +#| msgid "Added hostgroup \"%(value)s\"" +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "\"%(value)s\" ostalari-taldea gehituta" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, fuzzy, python-format +#| msgid "Sudo Command Group" +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "Sudo komando-taldea" +msgstr[1] "Sudo komando-taldea" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "Trust direction" +msgstr "" + +#, fuzzy +#| msgid "Rule type" +msgid "Trust type" +msgstr "Arau-mota" + +msgid "Trust status" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +#, fuzzy +#| msgid "External host" +msgid "External trust" +msgstr "Kanpoko ostalaria" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +#, fuzzy +#| msgid "Rule type" +msgid "trust type" +msgstr "Arau-mota" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " msgstr "" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." msgstr "" +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted trust \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Configuration" +msgid "trust configuration" +msgstr "Konfigurazioa" + +#, fuzzy +#| msgid "Configuration" +msgid "Global Trust Configuration" +msgstr "Konfigurazioa" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified \"%(value)s\" trust configuration" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, fuzzy +#| msgid "Host Name" +msgid "Name" +msgstr "Ostalari-izena" + +#, fuzzy +#| msgid "UID" +msgid "SID" +msgstr "UID" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "Domain enabled" +msgstr "NIS domeinu-izena" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Enabled trust domain \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Disabled trust domain \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "" +"\n" +"IPA server roles\n" +msgstr "Erabili beharreko IPA zerbitzaria" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA Server Roles" +msgstr "Erabili beharreko IPA zerbitzaria" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA Server Role" +msgstr "Erabili beharreko IPA zerbitzaria" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA server role name" +msgstr "Erabili beharreko IPA zerbitzaria" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, fuzzy +#| msgid "Configuration" +msgid "Vault configuration" +msgstr "Konfigurazioa" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA KRA servers" +msgstr "IPA zerbitzaria" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Archived data into vault \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +msgid "Retrieve data from a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Profile" +msgstr "Ziurtagiria" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Profiles" +msgstr "Ziurtagiria" + +#, fuzzy +#| msgid "Configuration" +msgid "Profile configuration" +msgstr "Konfigurazioa" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Imported profile \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted profile \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "Host Groups" +msgid "host groups" +msgstr "Ostalari-taldeak" + +#, fuzzy +#| msgid "Host Groups" +msgid "Host Group" +msgstr "Ostalari-taldeak" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ostalari-taldea gehituta" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy +#| msgid "Host-group" +msgid "hostgroup" +msgstr "Ostalari-taldea" + +msgid "privileged hostgroup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +#, fuzzy +#| msgid "Last name" +msgid "Location name" +msgstr "Abizena" + +#, fuzzy +#| msgid "NIS domain name" +msgid "IPA location name" +msgstr "NIS domeinu-izena" + +#, fuzzy +#| msgid "description" +msgid "IPA Location description" +msgstr "deskribapena" + +#, fuzzy +#| msgid "Services" +msgid "Servers" +msgstr "Zerbitzuak" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added IPA location \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +msgid "Delete an IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted IPA location \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "IPA Server" +msgstr "IPA zerbitzaria" + +msgid "Modify information about an IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified IPA location \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for IPA locations." +msgstr "Bilatu taldeak." + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "Role" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added role \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted role \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified role \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +#, fuzzy +#| msgid "Default group for new users" +msgid "Default group for new users is not POSIX" +msgstr "Erabiltzaile berrientzako talde lehenetsia" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Undeleted user account \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Staged user account \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Disabled user account \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Enabled user account \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Unlocked account \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificates from user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +#, fuzzy +#| msgid "UID" +msgid "URI" +msgstr "UID" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +msgid "cannot be empty" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "A list of ACI values" +msgstr "ACI balioen zerrenda bat" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +#, fuzzy +#| msgid "ACI prefix" +msgid "ACI prefix is required" +msgstr "ACI aurrizkia" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "The group doesn't exist" +msgid "Group '%s' does not exist" +msgstr "Taldea ez da existitzen" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Sintaxi-errorea: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "ACIak" + +msgid "ACI" +msgstr "ACI" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Created ACI \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted ACI \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified ACI \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Renamed ACI to \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + msgid "" "\n" "Domain Name System (DNS)\n" @@ -14078,9 +18353,6 @@ msgstr "" msgid "Managedby permission" msgstr "Baimena" -msgid "DNS is not configured" -msgstr "" - msgid "cannot be used when a zone is specified" msgstr "" @@ -14321,1450 +18593,566 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" -#, fuzzy -#| msgid "Configuration" +#, python-brace-format msgid "" -"\n" -"DNS server configuration\n" -msgstr "Konfigurazioa" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" -msgid "" -"\n" -"Manipulate DNS server configuration\n" +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." msgstr "" msgid "" "\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" +"API Schema\n" msgstr "" msgid "" "\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#, fuzzy -#| msgid "IPA Server" -msgid "DNS server" -msgstr "IPA zerbitzaria" - -msgid "DNS servers" -msgstr "" - -#, fuzzy -#| msgid "IPA Server" -msgid "DNS Servers" -msgstr "IPA zerbitzaria" - -#, fuzzy -#| msgid "IPA Server" -msgid "DNS Server" -msgstr "IPA zerbitzaria" - -#, fuzzy -#| msgid "Service name" -msgid "DNS Server name" -msgstr "Zerbitzuaren izena" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" +"Provides API introspection capabilities.\n" msgstr "" msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" msgstr "" msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" msgstr "" -msgid "Modify DNS server configuration" +msgid "Documentation" msgstr "" -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified DNS server \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Version" +msgstr "Baimena" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "hostname" +msgid "Method name" +msgstr "ostalari-izena" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command." +msgstr "" #, fuzzy #| msgid "Search for groups." -msgid "Search for DNS servers." +msgid "Search for commands." msgstr "Bilatu taldeak." -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" +#, fuzzy +#| msgid "Run Commands" +msgid "Return command defaults" +msgstr "Exekutatu komandoak" + +msgid "Display information about a class." +msgstr "" #, fuzzy -#| msgid "IPA Server to use" -msgid "IPA DNS Server is not installed" -msgstr "Erabili beharreko IPA zerbitzaria" +#| msgid "Search for groups." +msgid "Search for classes." +msgstr "Bilatu taldeak." -msgid "Display configuration of a DNS server." +msgid "Display information about a help topic." msgstr "" -msgid "Add a new DNS server." +#, fuzzy +#| msgid "Search for groups." +msgid "Search for help topics." +msgstr "Bilatu taldeak." + +msgid "Required" msgstr "" -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added new DNS server \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -msgid "Delete a DNS server" +msgid "Multi-value" msgstr "" -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted DNS server \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" +msgid "Always ask" +msgstr "" -msgid "REST API is not logged in." +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "CLI name" +msgstr "ACI izena" + +#, fuzzy +#| msgid "Random password" +msgid "Confirm (password)" +msgstr "Ausazko pasahitza" + +#, fuzzy +#| msgid "Default shell" +msgid "Default" +msgstr "Shell lehenetsia" + +#, fuzzy +#| msgid "Default users group" +msgid "Default from" +msgstr "Erabiltzaile-talde lehenetsia" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" msgstr "" #, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgid "%(metaobject)s: %(oname)s not found" msgstr "" -msgid "Unable to communicate with CMS" +msgid "Display information about a command parameter." msgstr "" -msgid "Response from CA was not valid JSON" +msgid "Search command parameters." msgstr "" -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#, fuzzy -#| msgid "HBAC service" -msgid "HBAC services" -msgstr "HBAC zerbitzua" - -msgid "HBAC Services" -msgstr "HBAC zerbitzuak" - -#, fuzzy -#| msgid "HBAC Services" -msgid "HBAC Service" -msgstr "HBAC zerbitzuak" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - #, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" #, fuzzy -#| msgid "HBAC service" -msgid "HBAC service group" -msgstr "HBAC zerbitzua" +#| msgid "Search for groups." +msgid "Search for command outputs." +msgstr "Bilatu taldeak." + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +#, fuzzy +#| msgid "Service Groups" +msgid "Member service groups" +msgstr "Zerbitzu-taldeak" #, fuzzy #| msgid "HBAC service group description" -msgid "HBAC service groups" +msgid "Member HBAC service groups" msgstr "HBAC zerbitzu-taldearen deskribapena" -#, fuzzy -#| msgid "Service Groups" -msgid "HBAC Service Groups" -msgstr "Zerbitzu-taldeak" +msgid "Member ID user overrides" +msgstr "" -#, fuzzy -#| msgid "Service Groups" -msgid "HBAC Service Group" -msgstr "Zerbitzu-taldeak" +msgid "Indirect Member ID user overrides" +msgstr "" -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, fuzzy, python-format -#| msgid "HBAC service group description" -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "HBAC zerbitzu-taldearen deskribapena" -msgstr[1] "HBAC zerbitzu-taldearen deskribapena" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" +msgid "Indirect Member permissions" msgstr "" #, fuzzy -#| msgid "Users" -msgid "Stage Users" -msgstr "Erabiltzaileak" +#| msgid "HBAC service" +msgid "Indirect Member HBAC service" +msgstr "HBAC zerbitzua" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "sarrera" + +msgid "entries" +msgstr "sarrerak" #, fuzzy -#| msgid "External User" -msgid "Stage User" -msgstr "Kanpoko erabiltzailea" +#| msgid "entry" +msgid "Entry" +msgstr "sarrera" -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added stage user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" +#, python-format +msgid "container entry (%(container)s) not found" msgstr "" #, python-format -msgid "can be at most %(len)d characters" +msgid "%(parent)s: %(oname)s not found" msgstr "" +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "%(ldap_obj_name)s objektua berrizendatu" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "HBAC arauak" + +msgid "HBAC Rules" +msgstr "HBAC arauak" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + #, fuzzy, python-format #| msgid "Deleted user \"%(value)s\"" -msgid "Deleted stage user \"%(value)s\"" +msgid "Deleted HBAC rule \"%(value)s\"" msgstr "\"%(value)s\" erabiltzailea ezabatuta" #, fuzzy, python-format #| msgid "Modified user \"%(value)s\"" -msgid "Modified stage user \"%(value)s\"" +msgid "Modified HBAC rule \"%(value)s\"" msgstr "\"%(value)s\" erabiltzailea aldatuta" #, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" msgstr[0] "" msgstr[1] "" #, fuzzy, python-format #| msgid "Deleted user \"%(value)s\"" -msgid "Activate a stage user \"%(value)s\"" +msgid "Enabled HBAC rule \"%(value)s\"" msgstr "\"%(value)s\" erabiltzailea ezabatuta" -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - #, fuzzy, python-format #| msgid "Deleted user \"%(value)s\"" -msgid "Removed aliases from stageuser \"%(value)s\"" +msgid "Disabled HBAC rule \"%(value)s\"" msgstr "\"%(value)s\" erabiltzailea ezabatuta" -msgid "Add one or more certificate mappings to the stage user entry." +msgid "Access time" msgstr "" -msgid "Remove one or more certificate mappings from the stage user entry." +msgid "Add source hosts and hostgroups to an HBAC rule." msgstr "" msgid "" "\n" -"Topology\n" +"Simulate use of Host-based access controls\n" "\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" "\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" "\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" +" --user, --host, and --service are mandatory, others are optional.\n" "\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" "\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" "\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" "\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" "\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" "\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added segment \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted segment \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified segment \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added topology suffix \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified topology suffix \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" "\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" "\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" "\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -#| msgid "Host Groups" -msgid "host groups" -msgstr "Ostalari-taldeak" - -#, fuzzy -#| msgid "Host Groups" -msgid "Host Group" -msgstr "Ostalari-taldeak" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ostalari-taldea gehituta" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy -#| msgid "Host-group" -msgid "hostgroup" -msgstr "Ostalari-taldea" - -msgid "privileged hostgroup" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" +"HBACTEST AND TRUSTED DOMAINS\n" "\n" -"Vaults\n" -msgstr "" - -msgid "" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" "\n" -"Manage vaults.\n" -msgstr "" - -msgid "" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" "\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added vault \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted vault \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified vault \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, fuzzy -#| msgid "Configuration" -msgid "Vault configuration" -msgstr "Konfigurazioa" - -#, fuzzy -#| msgid "IPA Server" -msgid "IPA KRA servers" -msgstr "IPA zerbitzaria" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Archived data into vault \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -msgid "Retrieve data from a vault." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -#, fuzzy -#| msgid "groups" -msgid "netgroups" -msgstr "taldeak" - -#, fuzzy -#| msgid "groups" -msgid "Netgroups" -msgstr "taldeak" - -#, fuzzy -#| msgid "group" -msgid "Netgroup" -msgstr "taldea" - -#, fuzzy, python-format -#| msgid "Added hostgroup \"%(value)s\"" -msgid "Added netgroup \"%(value)s\"" -msgstr "\"%(value)s\" ostalari-taldea gehituta" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted netgroup \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified netgroup \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "One time password commands" -msgstr "" - -#, fuzzy -#| msgid "Configuration" -msgid "OTP configuration options" -msgstr "Konfigurazioa" - -#, fuzzy -#| msgid "Configuration" -msgid "OTP Configuration" -msgstr "Konfigurazioa" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Changed password for \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "PKINIT" - -#, fuzzy -#| msgid "PKINIT" -msgid "PKINIT status" -msgstr "PKINIT" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -#, fuzzy -#| msgid "Serial number" -msgid "invalid port number" -msgstr "Serie-zenbakia" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -#, fuzzy -#| msgid "IPA Server" -msgid "RADIUS Servers" -msgstr "IPA zerbitzaria" - -#, fuzzy -#| msgid "IPA Server" -msgid "RADIUS Server" -msgstr "IPA zerbitzaria" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "A list of ACI values" -msgstr "ACI balioen zerrenda bat" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -#, fuzzy -#| msgid "ACI prefix" -msgid "ACI prefix is required" -msgstr "ACI aurrizkia" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, fuzzy, python-format -#| msgid "The group doesn't exist" -msgid "Group '%s' does not exist" -msgstr "Taldea ez da existitzen" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Sintaxi-errorea: %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "ACIak" - -msgid "ACI" -msgstr "ACI" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Created ACI \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted ACI \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified ACI \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Renamed ACI to \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" -msgid "must be at least 10" +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" msgstr "" #, fuzzy -#| msgid "Configuration" -msgid "configuration options" -msgstr "Konfigurazioa" +#| msgid "View" +msgid "ID View" +msgstr "Ikusi" -msgid "Configuration" -msgstr "Konfigurazioa" - -#, fuzzy -#| msgid "Maximum username length" -msgid "Maximum hostname length" -msgstr "Erabiltzaile-izenaren gehienezko luzera" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" +msgid "system ID View" msgstr "" #, fuzzy -#| msgid "IPA Server" -msgid "IPA CA servers" -msgstr "IPA zerbitzaria" +#| msgid "View" +msgid "ID Views" +msgstr "Ikusi" -msgid "IPA servers configured as certificate authority" +msgid "User object overrides" msgstr "" -msgid "Hidden IPA CA servers" +msgid "Group object overrides" msgstr "" -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" +msgid "Hosts the view applies to" msgstr "" msgid "Domain resolution order" @@ -15773,238 +19161,190 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -msgid "IPA servers configured as domain name server" -msgstr "" - -#, fuzzy -#| msgid "IPA Server" -msgid "Hidden IPA DNS servers" -msgstr "IPA zerbitzaria" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "The group doesn't exist" -msgstr "Taldea ez da existitzen" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "taldeak" - -msgid "User Group" -msgstr "Erabiltzaile-taldea" - #, fuzzy, python-format -#| msgid "Added hostgroup \"%(value)s\"" -msgid "Added group \"%(value)s\"" -msgstr "\"%(value)s\" ostalari-taldea gehituta" - -msgid "gid cannot be set for external group" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted group \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy -#| msgid "Target group" -msgid "privileged group" -msgstr "Helburuko taldea" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified group \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" +#| msgid "Added user \"%(value)s\"" +msgid "Added ID View \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" #, fuzzy, python-format #| msgid "Deleted user \"%(value)s\"" -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "Deleted ID View \"%(value)s\"" msgstr "\"%(value)s\" erabiltzailea ezabatuta" -msgid "not allowed to modify user entries" +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified an ID View \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" msgstr "" -msgid "not allowed to modify group entries" +msgid "not found" msgstr "" -#, fuzzy -#| msgid "Create a new group." -msgid "Not a managed group" -msgstr "Sortu talde berri bat." - -msgid "Add users that can manage members of this group." +msgid "ID View cannot be applied to IPA master" msgstr "" -msgid "Remove users that can manage members of this group." +msgid "ID View already applied" msgstr "" +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +msgid "Delete an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +msgid "Modify an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified an ID override \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified an User ID override \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + #, fuzzy #| msgid "Permissions" msgid "" @@ -16233,1324 +19573,39 @@ msgid_plural "%(count)d permissions matched" msgstr[0] "" msgstr[1] "" -msgid "" -"\n" -"OTP Tokens\n" +msgid "delegation" msgstr "" -msgid "" -"\n" -"Manage OTP tokens.\n" +msgid "delegations" msgstr "" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" +msgid "Delegations" msgstr "" -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -#, fuzzy -#| msgid "UID" -msgid "URI" -msgstr "UID" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -msgid "cannot be empty" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -#, fuzzy -#| msgid "HBAC rules" -msgid "sudo rules" -msgstr "HBAC arauak" - -#, fuzzy -#| msgid "HBAC Rules" -msgid "Sudo Rules" -msgstr "HBAC arauak" - -#, fuzzy -#| msgid "Sudo" -msgid "Sudo Rule" -msgstr "Sudo" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -#, fuzzy -#| msgid "Users" -msgid "users" -msgstr "Erabiltzaileak" - -#, fuzzy -#| msgid "Any Command" -msgid "command" -msgstr "Edozein komando" - -#, fuzzy -#| msgid "Run Commands" -msgid "commands" -msgstr "Exekutatu komandoak" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -#, fuzzy -#| msgid "groups" -msgid "group runAs" -msgstr "taldeak" - -#, fuzzy -#| msgid "groups" -msgid "runAs groups" -msgstr "taldeak" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, fuzzy -#| msgid "Sudo Commands" -msgid "sudo command" -msgstr "Sudo komandoak" - -#, fuzzy -#| msgid "Sudo Commands" -msgid "sudo commands" -msgstr "Sudo komandoak" - -msgid "Sudo Commands" -msgstr "Sudo komandoak" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -#, fuzzy -#| msgid "Sudo Command Group" -msgid "sudo command group" -msgstr "Sudo komando-taldea" - -#, fuzzy -#| msgid "Sudo Command Group" -msgid "sudo command groups" -msgstr "Sudo komando-taldea" - -#, fuzzy, python-format -#| msgid "Added hostgroup \"%(value)s\"" -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "\"%(value)s\" ostalari-taldea gehituta" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, fuzzy, python-format -#| msgid "Sudo Command Group" -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "Sudo komando-taldea" -msgstr[1] "Sudo komando-taldea" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -#, fuzzy -#| msgid "Default e-mail domain" -msgid "Realm domains" -msgstr "E-posta domeinu lehenetsia" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -#, fuzzy -#| msgid "Last name" -msgid "Location name" -msgstr "Abizena" - -#, fuzzy -#| msgid "NIS domain name" -msgid "IPA location name" -msgstr "NIS domeinu-izena" - -#, fuzzy -#| msgid "description" -msgid "IPA Location description" -msgstr "deskribapena" - -#, fuzzy -#| msgid "Services" -msgid "Servers" -msgstr "Zerbitzuak" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." +msgid "Delegation" msgstr "" #, fuzzy, python-format #| msgid "Added host \"%(value)s\"" -msgid "Added IPA location \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" msgstr "\"%(value)s\" ostalaria gehituta" -msgid "Delete an IPA location." -msgstr "" - #, fuzzy, python-format #| msgid "Deleted host \"%(value)s\"" -msgid "Deleted IPA location \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" msgstr "\"%(value)s\" ostalaria ezabatuta" -msgid "IPA Server" -msgstr "IPA zerbitzaria" - -msgid "Modify information about an IPA location." -msgstr "" - #, fuzzy, python-format #| msgid "Modified host \"%(value)s\"" -msgid "Modified IPA location \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" msgstr "\"%(value)s\" ostalaria aldatuta" -#, fuzzy -#| msgid "Search for groups." -msgid "Search for IPA locations." -msgstr "Bilatu taldeak." - #, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "" msgstr[1] "" -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -#, fuzzy -#| msgid "Host Name" -msgid "Name" -msgstr "Ostalari-izena" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -#| msgid "Permission" -msgid "Version" -msgstr "Baimena" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -#| msgid "hostname" -msgid "Method name" -msgstr "ostalari-izena" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command." -msgstr "" - -#, fuzzy -#| msgid "Search for groups." -msgid "Search for commands." -msgstr "Bilatu taldeak." - -#, fuzzy -#| msgid "Run Commands" -msgid "Return command defaults" -msgstr "Exekutatu komandoak" - -msgid "Display information about a class." -msgstr "" - -#, fuzzy -#| msgid "Search for groups." -msgid "Search for classes." -msgstr "Bilatu taldeak." - -msgid "Display information about a help topic." -msgstr "" - -#, fuzzy -#| msgid "Search for groups." -msgid "Search for help topics." -msgstr "Bilatu taldeak." - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -#| msgid "ACI name" -msgid "CLI name" -msgstr "ACI izena" - -#, fuzzy -#| msgid "Random password" -msgid "Confirm (password)" -msgstr "Ausazko pasahitza" - -#, fuzzy -#| msgid "Default shell" -msgid "Default" -msgstr "Shell lehenetsia" - -#, fuzzy -#| msgid "Default users group" -msgid "Default from" -msgstr "Erabiltzaile-talde lehenetsia" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -#, fuzzy -#| msgid "Search for groups." -msgid "Search for command outputs." -msgstr "Bilatu taldeak." - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -#, fuzzy -#| msgid "NIS domain name" -msgid "local domain range" -msgstr "NIS domeinu-izena" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added ID range \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted ID range \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -#| msgid "Modify a group." -msgid "" -"Modify ID range.\n" -"\n" -msgstr "Aldatu talde bat." - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified ID range \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, fuzzy -#| msgid "HBAC service description" -msgid "self service permission" -msgstr "HBAC zerbitzuaren deskribapena" - -#, fuzzy -#| msgid "HBAC service description" -msgid "self service permissions" -msgstr "HBAC zerbitzuaren deskribapena" - -#, fuzzy -#| msgid "Permissions" -msgid "Self Service Permissions" -msgstr "Baimenak" - -#, fuzzy -#| msgid "Permission" -msgid "Self Service Permission" -msgstr "Baimena" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added selfservice \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted selfservice \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified selfservice \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "" -"\n" -"IPA server roles\n" -msgstr "Erabili beharreko IPA zerbitzaria" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA Server Roles" -msgstr "Erabili beharreko IPA zerbitzaria" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA Server Role" -msgstr "Erabili beharreko IPA zerbitzaria" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA server role name" -msgstr "Erabili beharreko IPA zerbitzaria" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "IPA role name" -msgstr "" - msgid "HBAC rule and local members cannot both be set" msgstr "" @@ -17619,1017 +19674,203 @@ msgstr "\"%(value)s\" erabiltzailea ezabatuta" msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "\"%(value)s\" erabiltzailea ezabatuta" -#, python-brace-format -msgid "{role}: role not found" -msgstr "" +#, fuzzy +#| msgid "IPA Server" +msgid "" +"\n" +"IPA servers\n" +msgstr "IPA zerbitzaria" -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "pyhbac is not installed." +msgid "" +"\n" +"Get information about installed IPA servers.\n" msgstr "" msgid "" "\n" -"IPA certificate operations\n" +" Find all servers:\n" +" ipa server-find\n" msgstr "" msgid "" "\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Base-64 encoded certificate." +" Show specific server:\n" +" ipa server-show ipa.example.com\n" msgstr "" #, fuzzy -#| msgid "Certificate" -msgid "Certificate chain" -msgstr "Ziurtagiria" +#| msgid "IPA Server" +msgid "server" +msgstr "IPA zerbitzaria" -msgid "X.509 certificate chain" -msgstr "" - -msgid "Subject" -msgstr "Gaia" - -#, fuzzy -#| msgid "Email address" -msgid "Subject email address" -msgstr "E-posta helbidea" - -#, fuzzy -#| msgid "Subject" -msgid "Subject DNS name" -msgstr "Gaia" - -#, fuzzy -#| msgid "Street address" -msgid "Subject X.400 address" -msgstr "Kalea" - -#, fuzzy -#| msgid "Home directory base" -msgid "Subject directory name" -msgstr "Direktorio nagusiaren oinarria" - -msgid "Subject EDI Party name" +msgid "servers" msgstr "" #, fuzzy -#| msgid "Subject" -msgid "Subject URI" -msgstr "Gaia" +#| msgid "IPA Server" +msgid "IPA Servers" +msgstr "IPA zerbitzaria" + +msgid "Server location" +msgstr "" #, fuzzy -#| msgid "Street address" -msgid "Subject IP Address" -msgstr "Kalea" +#| msgid "Service name" +msgid "Service weight" +msgstr "Zerbitzuaren izena" -#, fuzzy -#| msgid "Subject" -msgid "Subject OID" -msgstr "Gaia" - -#, fuzzy -#| msgid "Subject" -msgid "Subject UPN" -msgstr "Gaia" - -msgid "Subject Kerberos principal name" +msgid "Weight for server services" msgstr "" -msgid "Subject Other Name" +msgid "Service relative weight" msgstr "" -msgid "Issuer" +msgid "Relative weight for server services (counts per location)" msgstr "" -msgid "Issuer DN" +msgid "Enabled server roles" msgstr "" -msgid "Not Before" +msgid "List of enabled roles" msgstr "" -msgid "Not After" +msgid "Modify information about an IPA server." msgstr "" -msgid "Fingerprint (SHA1)" -msgstr "Hatz-marka (SHA1)" +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified IPA server \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" -#, fuzzy -#| msgid "Fingerprint (SHA1)" -msgid "Fingerprint (SHA256)" -msgstr "Hatz-marka (SHA1)" +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" -#, fuzzy -#| msgid "Serial number" -msgid "Serial number (hex)" -msgstr "Serie-zenbakia" +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted IPA server \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" -msgid "Request status" +msgid "Ignore topology errors" msgstr "" -msgid "Include certificate chain in output" +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" msgstr "" msgid "" -"automatically add the principal if it doesn't exist (service principals only)" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." msgstr "" -#, python-format -msgid "krbtgt certs can use only the %s profile" +msgid "Deleting this server will leave your installation without a DNS." msgstr "" -msgid "No Common Name was found in subject of request." +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" msgstr "" #, python-format msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" #, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" msgstr "" #, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." +msgid "Failed to remove server %(master)s from server list: %(err)s" msgstr "" #, python-format -msgid "subject alt name type %s is forbidden for user principals" +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" msgstr "" #, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" +msgid "Failed to cleanup server principals/keys: %(err)s" msgstr "" #, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" msgstr "" #, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" +msgid "Forcing removal of %(hostname)s" msgstr "" -msgid "RFC822Name does not match any of user's email addresses" +msgid "Ignoring topology connectivity errors." msgstr "" -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" +msgid "Server has already been deleted" msgstr "" -#, python-format -msgid "Subject alt name type %s is forbidden" +msgid "Agreements deleted" msgstr "" -#, python-format -msgid "CA '%s' is disabled" +msgid "Following segments were not deleted:" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." msgstr "" #, fuzzy -#| msgid "Sudo Option" -msgid "'add' option" -msgstr "Sudo aukera" - -#, fuzzy -#| msgid "The group doesn't exist" -msgid "The principal for this request doesn't exist." -msgstr "Taldea ez da existitzen" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Status" +#| msgid "Status" +msgid "State" msgstr "Egoera" -msgid "Revoked" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - #, fuzzy -#| msgid "View" -msgid "ID View" -msgstr "Ikusi" - -msgid "system ID View" -msgstr "" - -#, fuzzy -#| msgid "View" -msgid "ID Views" -msgstr "Ikusi" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added ID View \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted ID View \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified an ID View \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" +#| msgid "Service name" +msgid "Server state" +msgstr "Zerbitzuaren izena" #, fuzzy, python-format #| msgid "Added service \"%(value)s\"" -msgid "Added ID override \"%(value)s\"" +msgid "Changed server state of \"%(value)s\"." msgstr "\"%(value)s\" zerbitzua gehituta" -msgid "Delete an ID override." +msgid "Cannot hide CA renewal master." msgstr "" -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted ID override \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -msgid "Modify an ID override." -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified an ID override \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." +msgid "Cannot hide DNSSec key master." msgstr "" #, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added User ID override \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted User ID override \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified an User ID override \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Auto Membership Rule.\n" +msgid "Cannot hide last enabled %(name)s server." msgstr "" msgid "" "\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added automember rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added condition(s) to \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified automember rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted automember rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" +"Session Support for IPA\n" msgstr "" msgid "" @@ -18821,6 +20062,878 @@ msgstr "Gaituta" msgid "Enabled CA \"%(value)s\"" msgstr "\"%(value)s\" ostalaria ezabatuta" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "User Groups" +msgid "User logins" +msgstr "Erabiltzaile-taldeak" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "configuration options" +msgstr "Konfigurazioa" + +msgid "Configuration" +msgstr "Konfigurazioa" + +#, fuzzy +#| msgid "Maximum username length" +msgid "Maximum hostname length" +msgstr "Erabiltzaile-izenaren gehienezko luzera" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA CA servers" +msgstr "IPA zerbitzaria" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "Hidden IPA DNS servers" +msgstr "IPA zerbitzaria" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "Taldea ez da existitzen" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "Hosts" +msgid "Host" +msgstr "Ostalariak" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "Serie-zenbakia" + +#, fuzzy +#| msgid "Serial Number" +msgid "Serial Number (hex)" +msgstr "Serie-zenbakia" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Disabled host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added certificates to host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Removed certificates from host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Removed aliases from host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "local domain range" +msgstr "NIS domeinu-izena" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Modify a group." +msgid "" +"Modify ID range.\n" +"\n" +msgstr "Aldatu talde bat." + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified ID range \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + msgid "Internationalization messages" msgstr "" @@ -19999,14 +22112,6 @@ msgstr "Ziurtagiria" msgid "REVOKED" msgstr "" -msgid "Serial Number" -msgstr "Serie-zenbakia" - -#, fuzzy -#| msgid "Serial Number" -msgid "Serial Number (hex)" -msgstr "Serie-zenbakia" - msgid "SHA1 Fingerprint" msgstr "SHA1 hatz-marka" @@ -20073,11 +22178,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -#, fuzzy -#| msgid "Certificate" -msgid "Certificate mapping data" -msgstr "Ziurtagiria" - #, fuzzy #| msgid "Configuration" msgid "Configuration string" @@ -20888,11 +22988,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -#, fuzzy -#| msgid "Hosts" -msgid "Host" -msgstr "Ostalariak" - #, fuzzy #| msgid "Group Settings" msgid "Netgroup Settings" @@ -21030,11 +23125,6 @@ msgstr "" msgid "Add password policy" msgstr "LDAP pasahitza" -#, fuzzy -#| msgid "Password" -msgid "Password Policy" -msgstr "Pasahitza" - msgid "Remove password policies" msgstr "" @@ -21545,17 +23635,6 @@ msgstr "" msgid "Remove domains" msgstr "" -msgid "Trust direction" -msgstr "" - -msgid "Trust status" -msgstr "" - -#, fuzzy -#| msgid "Rule type" -msgid "Trust type" -msgstr "Arau-mota" - msgid "Alternative UPN suffixes" msgstr "" @@ -22115,9 +24194,6 @@ msgstr "Sudo" msgid "Topology" msgstr "" -msgid "Trusts" -msgstr "" - msgid "True" msgstr "" @@ -22230,1460 +24306,6 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "Role" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added role \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted role \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified role \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -#| msgid "IPA Server" -msgid "" -"\n" -"IPA servers\n" -msgstr "IPA zerbitzaria" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#, fuzzy -#| msgid "IPA Server" -msgid "server" -msgstr "IPA zerbitzaria" - -msgid "servers" -msgstr "" - -#, fuzzy -#| msgid "IPA Server" -msgid "IPA Servers" -msgstr "IPA zerbitzaria" - -msgid "Server location" -msgstr "" - -#, fuzzy -#| msgid "Service name" -msgid "Service weight" -msgstr "Zerbitzuaren izena" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified IPA server \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted IPA server \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -#, fuzzy -#| msgid "Status" -msgid "State" -msgstr "Egoera" - -#, fuzzy -#| msgid "Service name" -msgid "Server state" -msgstr "Zerbitzuaren izena" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Changed server state of \"%(value)s\"." -msgstr "\"%(value)s\" zerbitzua gehituta" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added service delegation rule \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted service delegation \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -#, fuzzy -#| msgid "Service group name" -msgid "Service delegation target" -msgstr "Zerbitzu-taldearen izena" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added service delegation target \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "LDAP URI baliogabea." - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -#, fuzzy -#| msgid "Default group for new users" -msgid "Default group for new users not found" -msgstr "Erabiltzaile berrientzako talde lehenetsia" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Principal alias" -msgstr "" - -#, fuzzy -#| msgid "SHA1 Fingerprint" -msgid "SSH public key fingerprint" -msgstr "SHA1 hatz-marka" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Disabled host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added certificates to host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Removed certificates from host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added new aliases to host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Removed aliases from host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -#, fuzzy -#| msgid "password" -msgid "password policy" -msgstr "pasahitza" - -#, fuzzy -#| msgid "password" -msgid "password policies" -msgstr "pasahitza" - -#, fuzzy -#| msgid "Password" -msgid "Password Policies" -msgstr "Pasahitza" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -#, fuzzy -#| msgid "External host" -msgid "External trust" -msgstr "Kanpoko ostalaria" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -#, fuzzy -#| msgid "Rule type" -msgid "trust type" -msgstr "Arau-mota" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted trust \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -#| msgid "Configuration" -msgid "trust configuration" -msgstr "Konfigurazioa" - -#, fuzzy -#| msgid "Configuration" -msgid "Global Trust Configuration" -msgstr "Konfigurazioa" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified \"%(value)s\" trust configuration" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, fuzzy -#| msgid "UID" -msgid "SID" -msgstr "UID" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -#, fuzzy -#| msgid "NIS domain name" -msgid "Domain enabled" -msgstr "NIS domeinu-izena" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Enabled trust domain \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Disabled trust domain \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#, fuzzy -#| msgid "User Groups" -msgid "User logins" -msgstr "Erabiltzaile-taldeak" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added privilege \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted privilege \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified privilege \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -23860,664 +24482,46 @@ msgstr "" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "\"%(value)s\" zerbitzua ezabatuta" -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added delegation \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted delegation \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified delegation \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "HBAC arauak" - -msgid "HBAC Rules" -msgstr "HBAC arauak" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" +#, fuzzy +#| msgid "HBAC service description" +msgid "self service permission" +msgstr "HBAC zerbitzuaren deskribapena" #, fuzzy -#| msgid "Service Groups" -msgid "Member service groups" -msgstr "Zerbitzu-taldeak" +#| msgid "HBAC service description" +msgid "self service permissions" +msgstr "HBAC zerbitzuaren deskribapena" #, fuzzy -#| msgid "HBAC service group description" -msgid "Member HBAC service groups" -msgstr "HBAC zerbitzu-taldearen deskribapena" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" +#| msgid "Permissions" +msgid "Self Service Permissions" +msgstr "Baimenak" #, fuzzy -#| msgid "HBAC service" -msgid "Indirect Member HBAC service" -msgstr "HBAC zerbitzua" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "sarrera" - -msgid "entries" -msgstr "sarrerak" - -#, fuzzy -#| msgid "entry" -msgid "Entry" -msgstr "sarrera" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "%(ldap_obj_name)s objektua berrizendatu" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#, fuzzy -#| msgid "User password" -msgid "User password expiration" -msgstr "Erabiltzailearen pasahitza" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -#, fuzzy -#| msgid "Home directory base" -msgid "SMB Home Directory" -msgstr "Direktorio nagusiaren oinarria" - -#, fuzzy -#| msgid "Home directory base" -msgid "SMB Home Directory Drive" -msgstr "Direktorio nagusiaren oinarria" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#, fuzzy -#| msgid "New Certificate" -msgid "Issuer of the certificate" -msgstr "Ziurtagiri berria" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" +#| msgid "Permission" +msgid "Self Service Permission" +msgstr "Baimena" #, fuzzy, python-format #| msgid "Added service \"%(value)s\"" -msgid "Added certificate mappings to user \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" msgstr "\"%(value)s\" zerbitzua gehituta" -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" #, fuzzy, python-format #| msgid "Modified user \"%(value)s\"" -msgid "Removed certificate mappings from user \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" msgstr "\"%(value)s\" erabiltzailea aldatuta" -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - #, python-format -msgid "Added user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, fuzzy -#| msgid "Default group for new users" -msgid "Default group for new users is not POSIX" -msgstr "Erabiltzaile berrientzako talde lehenetsia" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Undeleted user account \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Staged user account \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Disabled user account \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Enabled user account \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Unlocked account \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added certificates to user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Removed certificates from user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added new aliases to user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Removed aliases from user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" #, python-format msgid "all masters must have %(role)s role enabled" @@ -24698,25 +24702,6 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - msgid "Request must be a dict" msgstr "" @@ -24738,6 +24723,25 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #, python-format msgid "must equal %r" msgstr "" diff --git a/po/fr.po b/po/fr.po index ac0a5df08..af50f3df9 100644 --- a/po/fr.po +++ b/po/fr.po @@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: French\n" @@ -18,6 +18,104 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n > 1)\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "Impossible d'analyser le nom du principal\n" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "« krb5_parse_name » %1$d : %2$s\n" + +#, c-format +msgid "Removing principal %s\n" +msgstr "Suppression du principal %s\n" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "Impossible d'ouvrir le tableau de clés\n" + +#, c-format +msgid "principal not found\n" +msgstr "principal introuvable\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "« krb5_kt_get_entry » %1$d : %2$s\n" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "Impossible de supprimer l'entrée\n" + +#, c-format +msgid "kvno %d\n" +msgstr "« kvno » %d\n" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "« krb5_kt_remove_entry » %1$d : %2$s\n" + +#, fuzzy, c-format +#| msgid "Failed to get result: %s\n" +msgid "Failed to set cursor '%1$s'\n" +msgstr "Impossible d'obtenir le résultat : %s\n" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "Impossible d'analyser le principal\n" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "« krb5_unparse_name » %1$d : %2$s\n" + +#, c-format +msgid "realm not found\n" +msgstr "domaine introuvable\n" + +msgid "Print debugging information" +msgstr "Affiche les informations de débogage" + +msgid "Debugging output" +msgstr "Sortie de débogage" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"Le principal à supprimer d'un tableau de clés (par ex. : ftp/ftp.example." +"com@EXAMPLE.COM)" + +msgid "Kerberos Service Principal Name" +msgstr "Nom de principal de service Kerberos" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" +"Le fichier tableau de clés duquel il faut retirer le principal ou les " +"principaux." + +msgid "Keytab File Name" +msgstr "Nom de fichier du tableau de clés" + +msgid "Remove all principals in this realm" +msgstr "Supprimer tous les principaux de ce royaume" + +msgid "Realm name" +msgstr "Nom du royaume" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "Échec de l'initialisation du contexte Kerberos\n" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "Échec de l'ouverture du tableau de clés « %1$s » : %2$s\n" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "La fermeture du tableau des clés a échoué\n" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "« krb5_kt_close » %1$d : %2$s\n" + #, c-format msgid "Out of memory!\n" msgstr "Mémoire saturée !\n" @@ -287,104 +385,6 @@ msgstr "Le nom d'hôte doit être pleinement qualifié : %s\n" msgid "The hostname must not be: %s\n" msgstr "Le nom d'hôte ne doit pas être : %s\n" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "Impossible d'analyser le nom du principal\n" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "« krb5_parse_name » %1$d : %2$s\n" - -#, c-format -msgid "Removing principal %s\n" -msgstr "Suppression du principal %s\n" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "Impossible d'ouvrir le tableau de clés\n" - -#, c-format -msgid "principal not found\n" -msgstr "principal introuvable\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "« krb5_kt_get_entry » %1$d : %2$s\n" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "Impossible de supprimer l'entrée\n" - -#, c-format -msgid "kvno %d\n" -msgstr "« kvno » %d\n" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "« krb5_kt_remove_entry » %1$d : %2$s\n" - -#, fuzzy, c-format -#| msgid "Failed to get result: %s\n" -msgid "Failed to set cursor '%1$s'\n" -msgstr "Impossible d'obtenir le résultat : %s\n" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "Impossible d'analyser le principal\n" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "« krb5_unparse_name » %1$d : %2$s\n" - -#, c-format -msgid "realm not found\n" -msgstr "domaine introuvable\n" - -msgid "Print debugging information" -msgstr "Affiche les informations de débogage" - -msgid "Debugging output" -msgstr "Sortie de débogage" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Le principal à supprimer d'un tableau de clés (par ex. : ftp/ftp.example." -"com@EXAMPLE.COM)" - -msgid "Kerberos Service Principal Name" -msgstr "Nom de principal de service Kerberos" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" -"Le fichier tableau de clés duquel il faut retirer le principal ou les " -"principaux." - -msgid "Keytab File Name" -msgstr "Nom de fichier du tableau de clés" - -msgid "Remove all principals in this realm" -msgstr "Supprimer tous les principaux de ce royaume" - -msgid "Realm name" -msgstr "Nom du royaume" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Échec de l'initialisation du contexte Kerberos\n" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "Échec de l'ouverture du tableau de clés « %1$s » : %2$s\n" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "La fermeture du tableau des clés a échoué\n" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "« krb5_kt_close » %1$d : %2$s\n" - #, c-format msgid "cannot open configuration file %s\n" msgstr "impossible d'ouvrir le fichier de configuration %s\n" @@ -11499,6 +11499,221 @@ msgstr "" "Établir une relation d'approbation bidirectionnelle. Par défaut, la relation " "est unilatérale entrante uniquement." +#, fuzzy +#| msgid "" +#| "\n" +#| "Manage Certificate Profiles\n" +#| "\n" +#| "Certificate Profiles are used by Certificate Authority (CA) in the " +#| "signing of\n" +#| "certificates to determine if a Certificate Signing Request (CSR) is " +#| "acceptable,\n" +#| "and if so what features and extensions will be present on the " +#| "certificate.\n" +#| "\n" +#| "The Certificate Profile format is the property-list format understood by " +#| "the\n" +#| "Dogtag or Red Hat Certificate System CA.\n" +#| "\n" +#| "PROFILE ID SYNTAX:\n" +#| "\n" +#| "A Profile ID is a string without spaces or punctuation starting with a " +#| "letter\n" +#| "and followed by a sequence of letters, digits or underscore (\"_\").\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Import a profile that will not store issued certificates:\n" +#| " ipa certprofile-import ShortLivedUserCert \\\n" +#| " --file UserCert.profile --desc \"User Certificates\" \\\n" +#| " --store=false\n" +#| "\n" +#| " Delete a certificate profile:\n" +#| " ipa certprofile-del ShortLivedUserCert\n" +#| "\n" +#| " Show information about a profile:\n" +#| " ipa certprofile-show ShortLivedUserCert\n" +#| "\n" +#| " Save profile configuration to a file:\n" +#| " ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +#| "\n" +#| " Search for profiles that do not store certificates:\n" +#| " ipa certprofile-find --store=false\n" +#| "\n" +#| "PROFILE CONFIGURATION FORMAT:\n" +#| "\n" +#| "The profile configuration format is the raw property-list format\n" +#| "used by Dogtag Certificate System. The XML format is not supported.\n" +#| "\n" +#| "The following restrictions apply to profiles managed by IPA:\n" +#| "\n" +#| "- When importing a profile the \"profileId\" field, if present, must\n" +#| " match the ID given on the command line.\n" +#| "\n" +#| "- The \"classId\" field must be set to \"caEnrollImpl\"\n" +#| "\n" +#| "- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +#| "\n" +#| "- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +#| " class must be used.\n" +#| "\n" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" +"\n" +"Gestion des profils de certificats\n" +"\n" +"Les profils de certificats sont utilisés par l'autorité de certification " +"(AC) dans\n" +"la signature de certificats afin de déterminer si une demande de signature " +"de\n" +"certificat (Certificate Signing Request, CSR) est acceptable, et si oui, " +"quelles\n" +"fonctionnalités et extensions doivent figurer dans le certificat.\n" +"\n" +"Le format du profil de certificat est un format de liste de propriétés qui " +"sera\n" +"compris par une autorité de certification Dogtag ou Red Hat Certificate " +"System.\n" +"\n" +"SYNTAXE DE L'IDENTIFIANT DE PROFIL :\n" +"\n" +"Un identifiant de profil est une chaîne de caractères sans espaces ni " +"caractère de\n" +"ponctuation débutant par une lettre suivie d'une séquence de lettres, de " +"chiffres et\n" +"de caractère souligné (« _ »).\n" +"\n" +"EXEMPLES :\n" +"\n" +" Importer un profil qui ne stockera pas les certificats émis :\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --summary \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Supprimer un profil de certificat :\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Afficher les informations sur un profil :\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Enregistrer la configuration du profil dans un fichier :\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Rechercher des profils ne stockant pas les certificats :\n" +" ipa certprofile-find --store=false\n" +"\n" +"FORMAT DE LA CONFIGURATION DE PROFIL :\n" +"\n" +"Le format de configuration de profil est un format brut de liste de \n" +"propriété utilisé par Dogtag Certificate System. Le format XML n'est\n" +"pas pris en charge.\n" +"\n" +"Les restrictions suivantes s'appliquent aux profils gérés par IPA :\n" +"\n" +"- Lors de l'import d'un profil, le champ « profileId » s'il est présent " +"doit\n" +" correspondre à l'identifiant donné sur la ligne de commande.\n" +"\n" +"- Le champ « classId » doit être « caEnrollImpl »\n" +"\n" +"- Le champ « auth.instance_id  doit être « raCertAuth »\n" +"\n" +"- Les classe d'entrée « certReqInputImpl » et de sortie « certOutputImpl » " +"doivent \n" +" être utilisées.\n" + +msgid "Profile ID for referring to this profile" +msgstr "Identifiant de profil" + +msgid "Profile description" +msgstr "Description de profil" + +msgid "Brief description of this profile" +msgstr "Brève description de ce profil" + +msgid "Store issued certificates" +msgstr "Stocker les certificats émis" + +msgid "Whether to store certs issued using this profile" +msgstr "Stocker ou non les certificats émis à partir de ce profil" + +msgid "Delete a Certificate Profile." +msgstr "Supprimer un profil de certificat." + +msgid "Search for Certificate Profiles." +msgstr "Rechercher des profils de certificats." + +msgid "Import a Certificate Profile." +msgstr "Importer un profil de certificat." + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "Nom de fichier du profil brut. Le format XML n'est pas pris en charge." + +msgid "Modify Certificate Profile configuration." +msgstr "Modifier la configuration d'un profil de certificat." + +msgid "File containing profile configuration" +msgstr "Fichier contenant la configuration du profil" + +msgid "Display the properties of a Certificate Profile." +msgstr "Afficher les propriétés d'un profil de certificat." + +msgid "Write profile configuration to file" +msgstr "Écrire le profil de configuration dans un fichier" + msgid "" "\n" "ID ranges\n" @@ -11863,221 +12078,6 @@ msgstr "" " doivent être modifiés pour correspondre à cette nouvelle plage.\n" " " -#, fuzzy -#| msgid "" -#| "\n" -#| "Manage Certificate Profiles\n" -#| "\n" -#| "Certificate Profiles are used by Certificate Authority (CA) in the " -#| "signing of\n" -#| "certificates to determine if a Certificate Signing Request (CSR) is " -#| "acceptable,\n" -#| "and if so what features and extensions will be present on the " -#| "certificate.\n" -#| "\n" -#| "The Certificate Profile format is the property-list format understood by " -#| "the\n" -#| "Dogtag or Red Hat Certificate System CA.\n" -#| "\n" -#| "PROFILE ID SYNTAX:\n" -#| "\n" -#| "A Profile ID is a string without spaces or punctuation starting with a " -#| "letter\n" -#| "and followed by a sequence of letters, digits or underscore (\"_\").\n" -#| "\n" -#| "EXAMPLES:\n" -#| "\n" -#| " Import a profile that will not store issued certificates:\n" -#| " ipa certprofile-import ShortLivedUserCert \\\n" -#| " --file UserCert.profile --desc \"User Certificates\" \\\n" -#| " --store=false\n" -#| "\n" -#| " Delete a certificate profile:\n" -#| " ipa certprofile-del ShortLivedUserCert\n" -#| "\n" -#| " Show information about a profile:\n" -#| " ipa certprofile-show ShortLivedUserCert\n" -#| "\n" -#| " Save profile configuration to a file:\n" -#| " ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -#| "\n" -#| " Search for profiles that do not store certificates:\n" -#| " ipa certprofile-find --store=false\n" -#| "\n" -#| "PROFILE CONFIGURATION FORMAT:\n" -#| "\n" -#| "The profile configuration format is the raw property-list format\n" -#| "used by Dogtag Certificate System. The XML format is not supported.\n" -#| "\n" -#| "The following restrictions apply to profiles managed by IPA:\n" -#| "\n" -#| "- When importing a profile the \"profileId\" field, if present, must\n" -#| " match the ID given on the command line.\n" -#| "\n" -#| "- The \"classId\" field must be set to \"caEnrollImpl\"\n" -#| "\n" -#| "- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -#| "\n" -#| "- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -#| " class must be used.\n" -#| "\n" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" -"\n" -"Gestion des profils de certificats\n" -"\n" -"Les profils de certificats sont utilisés par l'autorité de certification " -"(AC) dans\n" -"la signature de certificats afin de déterminer si une demande de signature " -"de\n" -"certificat (Certificate Signing Request, CSR) est acceptable, et si oui, " -"quelles\n" -"fonctionnalités et extensions doivent figurer dans le certificat.\n" -"\n" -"Le format du profil de certificat est un format de liste de propriétés qui " -"sera\n" -"compris par une autorité de certification Dogtag ou Red Hat Certificate " -"System.\n" -"\n" -"SYNTAXE DE L'IDENTIFIANT DE PROFIL :\n" -"\n" -"Un identifiant de profil est une chaîne de caractères sans espaces ni " -"caractère de\n" -"ponctuation débutant par une lettre suivie d'une séquence de lettres, de " -"chiffres et\n" -"de caractère souligné (« _ »).\n" -"\n" -"EXEMPLES :\n" -"\n" -" Importer un profil qui ne stockera pas les certificats émis :\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --summary \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Supprimer un profil de certificat :\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Afficher les informations sur un profil :\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Enregistrer la configuration du profil dans un fichier :\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Rechercher des profils ne stockant pas les certificats :\n" -" ipa certprofile-find --store=false\n" -"\n" -"FORMAT DE LA CONFIGURATION DE PROFIL :\n" -"\n" -"Le format de configuration de profil est un format brut de liste de \n" -"propriété utilisé par Dogtag Certificate System. Le format XML n'est\n" -"pas pris en charge.\n" -"\n" -"Les restrictions suivantes s'appliquent aux profils gérés par IPA :\n" -"\n" -"- Lors de l'import d'un profil, le champ « profileId » s'il est présent " -"doit\n" -" correspondre à l'identifiant donné sur la ligne de commande.\n" -"\n" -"- Le champ « classId » doit être « caEnrollImpl »\n" -"\n" -"- Le champ « auth.instance_id  doit être « raCertAuth »\n" -"\n" -"- Les classe d'entrée « certReqInputImpl » et de sortie « certOutputImpl » " -"doivent \n" -" être utilisées.\n" - -msgid "Profile ID for referring to this profile" -msgstr "Identifiant de profil" - -msgid "Profile description" -msgstr "Description de profil" - -msgid "Brief description of this profile" -msgstr "Brève description de ce profil" - -msgid "Store issued certificates" -msgstr "Stocker les certificats émis" - -msgid "Whether to store certs issued using this profile" -msgstr "Stocker ou non les certificats émis à partir de ce profil" - -msgid "Delete a Certificate Profile." -msgstr "Supprimer un profil de certificat." - -msgid "Search for Certificate Profiles." -msgstr "Rechercher des profils de certificats." - -msgid "Import a Certificate Profile." -msgstr "Importer un profil de certificat." - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "Nom de fichier du profil brut. Le format XML n'est pas pris en charge." - -msgid "Modify Certificate Profile configuration." -msgstr "Modifier la configuration d'un profil de certificat." - -msgid "File containing profile configuration" -msgstr "Fichier contenant la configuration du profil" - -msgid "Display the properties of a Certificate Profile." -msgstr "Afficher les propriétés d'un profil de certificat." - -msgid "Write profile configuration to file" -msgstr "Écrire le profil de configuration dans un fichier" - msgid "Remove users that can manage this token." msgstr "Supprimer des utilisateurs pouvant gérer ce jeton." @@ -16381,221 +16381,24 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "commandes sudo à supprimer" -msgid "Additional instructions:" -msgstr "Instructions complémentaires :" +msgid "Results are truncated, try a more specific search" +msgstr "Résultats tronqués, essayer un recherche plus précise" #, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" +msgid "Unknown option: %(option)s" +msgstr "Option inconnue : %(option)s" + +msgid "Client version. Used to determine if server will accept request." msgstr "" -"Le numéro de version de l'API n'a pas été envoyé, la compatibilité " -"ascendante n'est pas garantie. La version de l'API du serveur est supposée " -"être %(server_version)s" +"Version client. Utilisée pour déterminer si le serveur accepte la requête." -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" -"La sémantique de redirection DNS a été modifié depuis IPA 4.0.\n" -"Utilisez à la place les redirections de zones (dnsforwardzone-*).\n" -"Pour plus de détails, lisez la documentation." +msgid "any of the configured servers" +msgstr "n'importe quel serveur configuré" -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" -"La prise en charge de DNSSEC est expérimentale.\n" -"%(additional_info)s" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "L'option « %(option)s » est obsolète. %(additional_info)s" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" -"La sémantique de %(label)s a changé. %(current_behavior)s\n" -"%(hint)s" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "Serveur DNS %(server)s : %(error)s." - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"Le serveur DNS %(server)s ne prend pas en charge : %(error)s.\n" -"Si la validation DNSSEC est activée sur le ou les serveurs IPA, merci de la " -"désactiver." - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" -"La zone redirigiée « %(fwzone)s » n'est pas en fonction car il lui manque " -"une délégation NS correcte dans la zone faisant autorité « %(authzone)s ». " -"Merci d'ajouter les enregistrement NS « %(ns_rec)s » à la zone " -"« %(authzone)s »." - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"Le serveur DNS %(server)s ne prend pas en charge EDNS0 (RFC 6891) : " -"%(error)s.\n" -"Si la validation DNSSEC est activée sur le ou les serveurs, merci de la " -"désactiver." - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" -"Échec de la validation DNSSEC : %(error)s.\n" -"Merci de vérifier votre configuration DNSSEC ou de désactiver la validation " -"DNSSEC sur tous les serveurs IPA." - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" -"L'enregistrement TXT _kerberos du domaine %(domain)s ne peut être créé " -"(%(error)s).\n" -"Cela peut arriver si la zone n'est pas gérée par IPA. Merci de créer " -"manuellement l'enregistrement, qui doit contenir la valeur suivante : " -"« %(realm)s »" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" -"L'enregistrement TXT _kerberos du domaine %(domain)s ne peut être supprimé " -"(%(error)s).\n" -"Cela peut arriver si la zone n'est pas gérée par IPA. Merci de le supprimer " -"manuellement." - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" -"Aucune clé maîtresse DNSSEC n'est installée. La signature de zone DNSSEC ne " -"pourra pas fonctionner tant qu'une clé maîtresse n'est installée." - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" -"Le nom d'enregistrement relatif « %(record)s » contient le nom de la zone " -"« %(zone)s » comme suffixe, ce qui aboutit au FQDN « %(fqdn)s ». Cela " -"constitue généralement une erreur du fait du point final manquant à la fin " -"du nom indiqué." - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "La commande « %(command)s » est obsolète. %(additional_info)s" - -#, python-format -msgid "%(line)s" -msgstr "%(line)s" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "Les résultats de la recherche ont été tronqués : %(reason)s" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" -"Votre relation d'approbation avec %(domain)s est cassée. Merci de la recréer " -"à l'aide de « ipa trust-add »." - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" -"Le ou les enregistrements DNS de l'hôte %(host)s n'ont pu être supprimés. " -"(%(reason)s)" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" -"La politique de transfert entre en conflit avec certaines zones automatiques " -"vides. Les requêtes pour les zones spécifiées dans la RFC 6303 ignoreront le " -"transfert et la récursion et résulteront toujours en des réponses NXDOMAIN. " -"Pour surcharger ce comportement, utiliser la politique de transfert « only »." - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" -"Échec de la à jour de l'enregistrement du système « %(record)s », erreur : " -"%(error)s" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" -"IPA ne gère pas la zone %(zone)s, merci de modifier vos serveurs " -"DNS manuellement" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" -"Échec de la mise à jour automatique des enregistrements DNS du système. " -"Merci de relancer la mise à jour des enregistrements du système manuellement " -"pour obtenir la liste des enregistrements manquants." - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" -"Le service %(service)s doit être redémarré sur le serveur IPA %(server)s " -"pour permettre la prise en compte de la nouvelle configuration." - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" -"Aucun serveur DNS dans l'emplacement IPA %(location)s. Sans serveur DNS, " -"l'emplacement ne fonctionnera pas comme attendu." - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "The character %(char)r is not allowed." -msgid "The certificate for %(ca)s is not available on this server." -msgstr "Le caractère « %(char)r » n'est pas autorisé." +#, fuzzy +#| msgid "The number of times to retry authentication" +msgid "Exceeded number of tries to forward a request." +msgstr "Le nombre de fois autorisées pour tenter une authentification" #, python-format msgid "%(count)d variables" @@ -16648,6 +16451,147 @@ msgstr "Options obsolètes" msgid "No file to read" msgstr "Pas de fichier à lire" +msgid "incorrect type" +msgstr "type incorrect" + +msgid "Only one value is allowed" +msgstr "Une seule valeur est autorisée" + +msgid "this option is deprecated" +msgstr "cette option est obsolète" + +msgid "must be True or False" +msgstr "doit être « True » ou « False »" + +msgid "must be an integer" +msgstr "doit être un nombre entier" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "doit être supérieur ou égal à %(minvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "doit être inférieur ou égal à %(maxvalue)d" + +msgid "must be a decimal number" +msgstr "doit être un nombre décimal" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "doit valoir a minima %(minvalue)s" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "doit valoir au plus %(maxvalue)s" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" +"La classe de nombres « %(cls)s » n'est pas dans la liste des classes de " +"nombres autorisées : %(allowed)s" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "doit correspondre au motif « %(pattern)s »" + +msgid "must be binary data" +msgstr "doivent être des données binaires" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "doit être d'au moins %(minlength)d octets" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "peut être d'au plus %(maxlength)d octets" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "doit être d'exactement %(length)d octets" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "must be a certificate" +msgstr "Révoquer un certificat." + +#, fuzzy +#| msgid "Submit a certificate signing request." +msgid "must be a certificate signing request" +msgstr "Soumettre une demande de signature de certificat." + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "Échec dans le décodage du « Certificate Signing Request » : %s" + +msgid "must be Unicode text" +msgstr "doit être un texte Unicode" + +msgid "Leading and trailing spaces are not allowed" +msgstr "Les espaces de début et de fin ne sont pas autorisées" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "doit être d'au moins %(minlength)d caractères" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "peut être d'au plus %(maxlength)d caractères" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "doit être d'exactement %(length)d caractères" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "Le caractère « %(char)r » n'est pas autorisé." + +#, python-format +msgid "must be '%(value)s'" +msgstr "doit être « %(value)s »" + +#, python-format +msgid "must be one of %(values)s" +msgstr "doit être une valeur parmi %(values)s" + +msgid "must be datetime value" +msgstr "doit être une valeur date/heure" + +msgid "does not match any of accepted formats: " +msgstr "ne correspond à aucun des formats acceptés :" + +msgid "incomplete time value" +msgstr "valeur de temps incomplète" + +msgid "must be DNS name" +msgstr "doit être un nom de DNS" + +msgid "must be absolute" +msgstr "doit être absolu" + +msgid "must be relative" +msgstr "doit être relatif" + +msgid "must be dictionary" +msgstr "doit être un dictionnaire" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "must be Kerberos principal" +msgstr "Principal Kerberos" + +#, fuzzy, python-format +#| msgid "Malformed principal" +msgid "Malformed principal: '%(value)s'" +msgstr "Principal malformé" + +#, fuzzy +#| msgid "Service principal alias" +msgid "Service principal is required" +msgstr "Alias de principal de service" + msgid "A dictionary representing an LDAP entry" msgstr "Un annuaire représentant une entrée LDAP" @@ -16657,17 +16601,6 @@ msgstr "Une liste d'entrées LDAP" msgid "All commands should at least have a result" msgstr "Toutes les commandes doivent avoir au moins un résultat" -msgid "Results are truncated, try a more specific search" -msgstr "Résultats tronqués, essayer un recherche plus précise" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "Option inconnue : %(option)s" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" -"Version client. Utilisée pour déterminer si le serveur accepte la requête." - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "Client %(cver)s incompatible avec le serveur %(sver)s à « %(server)s »" @@ -17044,165 +16977,222 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" -msgid "incorrect type" -msgstr "type incorrect" - -msgid "Only one value is allowed" -msgstr "Une seule valeur est autorisée" - -msgid "this option is deprecated" -msgstr "cette option est obsolète" - -msgid "must be True or False" -msgstr "doit être « True » ou « False »" - -msgid "must be an integer" -msgstr "doit être un nombre entier" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "doit être supérieur ou égal à %(minvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "doit être inférieur ou égal à %(maxvalue)d" - -msgid "must be a decimal number" -msgstr "doit être un nombre décimal" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "doit valoir a minima %(minvalue)s" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "doit valoir au plus %(maxvalue)s" +msgid "Additional instructions:" +msgstr "Instructions complémentaires :" #, python-format msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" msgstr "" -"La classe de nombres « %(cls)s » n'est pas dans la liste des classes de " -"nombres autorisées : %(allowed)s" +"Le numéro de version de l'API n'a pas été envoyé, la compatibilité " +"ascendante n'est pas garantie. La version de l'API du serveur est supposée " +"être %(server_version)s" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" +"La sémantique de redirection DNS a été modifié depuis IPA 4.0.\n" +"Utilisez à la place les redirections de zones (dnsforwardzone-*).\n" +"Pour plus de détails, lisez la documentation." #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "doit correspondre au motif « %(pattern)s »" - -msgid "must be binary data" -msgstr "doivent être des données binaires" +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" +"La prise en charge de DNSSEC est expérimentale.\n" +"%(additional_info)s" #, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "doit être d'au moins %(minlength)d octets" +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "L'option « %(option)s » est obsolète. %(additional_info)s" #, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "peut être d'au plus %(maxlength)d octets" +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" +"La sémantique de %(label)s a changé. %(current_behavior)s\n" +"%(hint)s" #, python-format -msgid "must be exactly %(length)d bytes" -msgstr "doit être d'exactement %(length)d octets" - -#, fuzzy -#| msgid "Revoke a certificate." -msgid "must be a certificate" -msgstr "Révoquer un certificat." - -#, fuzzy -#| msgid "Submit a certificate signing request." -msgid "must be a certificate signing request" -msgstr "Soumettre une demande de signature de certificat." +msgid "DNS server %(server)s: %(error)s." +msgstr "Serveur DNS %(server)s : %(error)s." #, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "Échec dans le décodage du « Certificate Signing Request » : %s" - -msgid "must be Unicode text" -msgstr "doit être un texte Unicode" - -msgid "Leading and trailing spaces are not allowed" -msgstr "Les espaces de début et de fin ne sont pas autorisées" +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"Le serveur DNS %(server)s ne prend pas en charge : %(error)s.\n" +"Si la validation DNSSEC est activée sur le ou les serveurs IPA, merci de la " +"désactiver." #, python-format -msgid "must be at least %(minlength)d characters" -msgstr "doit être d'au moins %(minlength)d caractères" +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" +"La zone redirigiée « %(fwzone)s » n'est pas en fonction car il lui manque " +"une délégation NS correcte dans la zone faisant autorité « %(authzone)s ». " +"Merci d'ajouter les enregistrement NS « %(ns_rec)s » à la zone " +"« %(authzone)s »." #, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "peut être d'au plus %(maxlength)d caractères" +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"Le serveur DNS %(server)s ne prend pas en charge EDNS0 (RFC 6891) : " +"%(error)s.\n" +"Si la validation DNSSEC est activée sur le ou les serveurs, merci de la " +"désactiver." #, python-format -msgid "must be exactly %(length)d characters" -msgstr "doit être d'exactement %(length)d caractères" +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" +"Échec de la validation DNSSEC : %(error)s.\n" +"Merci de vérifier votre configuration DNSSEC ou de désactiver la validation " +"DNSSEC sur tous les serveurs IPA." #, python-format -msgid "The character %(char)r is not allowed." +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" +"L'enregistrement TXT _kerberos du domaine %(domain)s ne peut être créé " +"(%(error)s).\n" +"Cela peut arriver si la zone n'est pas gérée par IPA. Merci de créer " +"manuellement l'enregistrement, qui doit contenir la valeur suivante : " +"« %(realm)s »" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" +"L'enregistrement TXT _kerberos du domaine %(domain)s ne peut être supprimé " +"(%(error)s).\n" +"Cela peut arriver si la zone n'est pas gérée par IPA. Merci de le supprimer " +"manuellement." + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" +"Aucune clé maîtresse DNSSEC n'est installée. La signature de zone DNSSEC ne " +"pourra pas fonctionner tant qu'une clé maîtresse n'est installée." + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" +"Le nom d'enregistrement relatif « %(record)s » contient le nom de la zone " +"« %(zone)s » comme suffixe, ce qui aboutit au FQDN « %(fqdn)s ». Cela " +"constitue généralement une erreur du fait du point final manquant à la fin " +"du nom indiqué." + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "La commande « %(command)s » est obsolète. %(additional_info)s" + +#, python-format +msgid "%(line)s" +msgstr "%(line)s" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "Les résultats de la recherche ont été tronqués : %(reason)s" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" +"Votre relation d'approbation avec %(domain)s est cassée. Merci de la recréer " +"à l'aide de « ipa trust-add »." + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" +"Le ou les enregistrements DNS de l'hôte %(host)s n'ont pu être supprimés. " +"(%(reason)s)" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" +"La politique de transfert entre en conflit avec certaines zones automatiques " +"vides. Les requêtes pour les zones spécifiées dans la RFC 6303 ignoreront le " +"transfert et la récursion et résulteront toujours en des réponses NXDOMAIN. " +"Pour surcharger ce comportement, utiliser la politique de transfert « only »." + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" +"Échec de la à jour de l'enregistrement du système « %(record)s », erreur : " +"%(error)s" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" +"IPA ne gère pas la zone %(zone)s, merci de modifier vos serveurs " +"DNS manuellement" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" +"Échec de la mise à jour automatique des enregistrements DNS du système. " +"Merci de relancer la mise à jour des enregistrements du système manuellement " +"pour obtenir la liste des enregistrements manquants." + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" +"Le service %(service)s doit être redémarré sur le serveur IPA %(server)s " +"pour permettre la prise en compte de la nouvelle configuration." + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" +"Aucun serveur DNS dans l'emplacement IPA %(location)s. Sans serveur DNS, " +"l'emplacement ne fonctionnera pas comme attendu." + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "The character %(char)r is not allowed." +msgid "The certificate for %(ca)s is not available on this server." msgstr "Le caractère « %(char)r » n'est pas autorisé." -#, python-format -msgid "must be '%(value)s'" -msgstr "doit être « %(value)s »" - -#, python-format -msgid "must be one of %(values)s" -msgstr "doit être une valeur parmi %(values)s" - -msgid "must be datetime value" -msgstr "doit être une valeur date/heure" - -msgid "does not match any of accepted formats: " -msgstr "ne correspond à aucun des formats acceptés :" - -msgid "incomplete time value" -msgstr "valeur de temps incomplète" - -msgid "must be DNS name" -msgstr "doit être un nom de DNS" - -msgid "must be absolute" -msgstr "doit être absolu" - -msgid "must be relative" -msgstr "doit être relatif" - -msgid "must be dictionary" -msgstr "doit être un dictionnaire" - -#, fuzzy -#| msgid "Kerberos principal" -msgid "must be Kerberos principal" -msgstr "Principal Kerberos" - -#, fuzzy, python-format -#| msgid "Malformed principal" -msgid "Malformed principal: '%(value)s'" -msgstr "Principal malformé" - -#, fuzzy -#| msgid "Service principal alias" -msgid "Service principal is required" -msgstr "Alias de principal de service" - -#, fuzzy, python-format -#| msgid "File %(file)s not found" -msgid "%(filename)s: file not found" -msgstr "Fichier %(file)s introuvable" - -#, fuzzy, python-brace-format -#| msgid "Unable to parse principal\n" -msgid "Unable to parse option {item}" -msgstr "Impossible d'analyser le principal\n" - -msgid "any of the configured servers" -msgstr "n'importe quel serveur configuré" - -#, fuzzy -#| msgid "The number of times to retry authentication" -msgid "Exceeded number of tries to forward a request." -msgstr "Le nombre de fois autorisées pour tenter une authentification" - msgid "Filename is empty" msgstr "Le nom de fichier est vide" @@ -17314,6 +17304,20 @@ msgstr "" msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "%(filename)s: file not found" +msgstr "Fichier %(file)s introuvable" + +#, fuzzy, python-brace-format +#| msgid "Unable to parse principal\n" +msgid "Unable to parse option {item}" +msgstr "Impossible d'analyser le principal\n" + +#, python-format +msgid "objectclass %s not found" +msgstr "classe d'objet %s introuvable" + #, python-format msgid "Retrieving CA cert chain failed: %s" msgstr "Échec de la récupération de la chaîne de certificat de l'AC : %s" @@ -17330,10 +17334,6 @@ msgstr "Échec de la récupération de l'état de l'AC : %s" msgid "Retrieving CA status failed with status %d" msgstr "Échec de la récupération de l'état de l'AC avec l'état %d" -#, python-format -msgid "objectclass %s not found" -msgstr "classe d'objet %s introuvable" - #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "Impossible de communiquer avec le CMS (état %d)" @@ -17467,184 +17467,13 @@ msgid_plural "%(count)d automount keys matched" msgstr[0] "%(count)d clé « automount » correspondante" msgstr[1] "%(count)d clés « automount » correspondantes" +#, python-format msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" -"\n" -"Gestion des profils de certificats\n" -"\n" -"Les profils de certificats sont utilisés par l'autorité de certification " -"(AC) dans\n" -"la signature de certificats afin de déterminer si une demande de signature " -"de\n" -"certificat (Certificate Signing Request, CSR) est acceptable, et si oui, " -"quelles\n" -"fonctionnalités et extensions doivent figurer dans le certificat.\n" -"\n" -"Le format du profil de certificat est un format de liste de propriétés qui " -"sera\n" -"compris par une autorité de certification Dogtag ou Red Hat Certificate " -"System.\n" -"\n" -"SYNTAXE DE L'IDENTIFIANT DE PROFIL :\n" -"\n" -"Un identifiant de profil est une chaîne de caractères sans espaces ni " -"caractère de\n" -"ponctuation débutant par une lettre suivie d'une séquence de lettres, de " -"chiffres et\n" -"de caractère souligné (« _ »).\n" -"\n" -"EXEMPLES :\n" -"\n" -" Importer un profil qui ne stockera pas les certificats émis :\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --summary \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Supprimer un profil de certificat :\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Afficher les informations sur un profil :\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Enregistrer la configuration du profil dans un fichier :\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Rechercher des profils ne stockant pas les certificats :\n" -" ipa certprofile-find --store=false\n" -"\n" -"FORMAT DE LA CONFIGURATION DE PROFIL :\n" -"\n" -"Le format de configuration de profil est un format brut de liste de \n" -"propriété utilisé par Dogtag Certificate System. Le format XML n'est\n" -"pas pris en charge.\n" -"\n" -"Les restrictions suivantes s'appliquent aux profils gérés par IPA :\n" -"\n" -"- Lors de l'import d'un profil, le champ « profileId » s'il est présent " -"doit\n" -" correspondre à l'identifiant donné sur la ligne de commande.\n" -"\n" -"- Le champ « classId » doit être « caEnrollImpl »\n" -"\n" -"- Le champ « auth.instance_id  doit être « raCertAuth »\n" -"\n" -"- Les classe d'entrée « certReqInputImpl » et de sortie « certOutputImpl » " -"doivent \n" -" être utilisées.\n" - -msgid "CA is not configured" -msgstr "L'AC n'est pas configurée" - -msgid "invalid Profile ID" -msgstr "Identifiant de profil invalide" - -msgid "Certificate Profile" -msgstr "Profil de certificat" - -msgid "Certificate Profiles" -msgstr "Profils de certificats" - -msgid "Profile configuration" -msgstr "Configuration de profil" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "%(count)d profil correspondant" -msgstr[1] "%(count)d profils correspondants" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "Profil « %(value)s » importé" - -#, fuzzy, python-format -#| msgid "Input data specified multiple times" -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "Les données en entrée ont été indiquées plusieurs fois" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" -"L'identifiant de profil « %(cli_value)s » ne correspond pas aux données du " -"profil « %(file_value)s »" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Profil « %(value)s » supprimé" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "Le profil prédéfini « %(profile_id)s » ne peut être supprimé" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "Profil de certificat « %(value)s » modifié" - -msgid "Certificate profiles cannot be renamed" -msgstr "Les profils de certificats ne peuvent être renommés" - -#, fuzzy -#| msgid "" -#| "Insufficient privilege to create a certificate with subject alt name '%s'." -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" -"Privilège insuffisant pour créer un certificat avec le nom de sujet « %s » " -"alternatif." +"Privilège « write » insuffisant pour l'attribut « krbLastPwdChange » de " +"l'entrée « %s »." #, fuzzy #| msgid "" @@ -17953,27 +17782,5986 @@ msgstr "%i AC supprimée." msgid "%i CAs removed." msgstr "%i AC supprimées." -#, fuzzy, python-brace-format -#| msgid "" -#| "Domain Level cannot be raised to {0}, server {1} does not support it." msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." +"\n" +"Auto Membership Rule.\n" msgstr "" -"Le niveau actuel du domaine ne peut être relevé à {0}, le serveur {1} ne le " -"prend pas en charge." +"\n" +"Règle d'adhésion automatique.\n" -msgid "Server does not support domain level functionality" +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" +"\n" +"Clarifie l'adhésion d'hôtes et d'utilisateurs en configurant des motifs\n" +"« regex » d'inclusion ou exclusion à assigner automatiquement aux nouvelles\n" +"entrées dans un groupe ou un groupe d'hôtes selon l'information d'attribut.\n" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" +"\n" +"Une règle est directement associée à un groupe par le nom, donc il n'est " +"pas\n" +"possible de créer une règle sans groupe ou groupe d'hôtes d'accompagnement.\n" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" +"\n" +"Une condition est une expression rationnelle dont se sert « 389-ds » pour\n" +"associer nouvelle entrée et règle d'adhésion. Si l'entrée correspond à une\n" +"règle d'inclusion, elle est ajoutée au groupe ou groupe d'hôte approprié.\n" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" +"\n" +"Un groupe ou groupe d'hôte par défaut peut être défini pour des entrées ne\n" +"correspondant à aucune règle. Tout utilisateur a ce groupe comme repli, car\n" +"il est par défaut membre du groupe indiqué dans la configuration de IPA.\n" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" +"\n" +"« automember-rebuild » s'utilise pour appliquer rétroactivement les règles\n" +"d'adhésion automatique aux entrées présentes, et ainsi revoir leur " +"adhésion.\n" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" +"\n" +" Ajouter le groupe ou le groupe d'hôtes initial :\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" +"\n" +" Ajouter la règle initiale :\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" +"\n" +" Ajouter une condition à la règle :\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" +"\n" +" Ajouter une condition d'exclusion à la règle pour empêcher l'auto-" +"assignation :\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" +"\n" +" Ajouter un hôte :\n" +" ipa host-add web1.example.com\n" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" +"\n" +" Ajouter un utilisateur :\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" +"\n" +" Vérifier une adhésion automatique :\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" +"\n" +" Supprimer une condition de la règle :\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" +"\n" +" Modifier la règle d'adhésion automatique :\n" +" ipa automember-mod\n" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" +"\n" +" Définir le groupe cible par défaut (recours) :\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" +"\n" +" Supprimer le groupe cible par défaut (repli) ::\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" +"\n" +" Afficher le groupe cible par défaut (repki) :\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" +"\n" +" Retrouver toutes les règles d'adhésion automatique :\n" +" ipa automember-find\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Delete an automember rule:\n" +#| " ipa automember-del --type=hostgroup webservers\n" +#| " ipa automember-del --type=group devel\n" +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" +"\n" +" Supprimer une règle d'adhésion automatique :\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" +"\n" +" Afficher une règle d'adhésion automatique :\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" +"\n" +" Supprimer une règle d'adhésion automatique :\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" +"\n" +" Reconstruire l'appartenance de tous les utilisateurs :\n" +" ipa automember-rebuild --type=group\n" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" +"\n" +" Reconstruire l'appartenance de tous les hôtes :\n" +" ipa automember-rebuild --type=hostgroup\n" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" +"\n" +" Reconstruire l'appartenance d'utilisateurs donnés :\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" +"\n" +" Reconstruire l'appartenance d'hôtes donnés :\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" + +msgid "Auto Membership Rule" +msgstr "Règle d'appartenance automatique" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "« %(oname)s » de « %(otype)s » introuvable" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "%s n'est pas un attribut valide." + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" +"\n" +" Ajouter une règle d'auto-adhésion.\n" +" " + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "Règle d'auto-adhésion « %(value)s » ajoutée" + +msgid "Auto Membership is not configured" +msgstr "L'auto-adhésion n'est pas configurée" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" +"\n" +" Ajouter des conditions à une règle d'auto-adhésion.\n" +" " + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Condition(s) ajoutées à « %(value)s »" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "Règle d'auto-adhésion : %s introuvable !" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" +"\n" +" Surcharger ceci afin de pouvoir ajouter réussites et échecs aux\n" +" résultats renvoyés.\n" +" " + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" +"\n" +" Supprimer des conditions d'une règle d'auto-adhésion.\n" +" " + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Conditions supprimées de « %(value)s »" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" +"\n" +" Surcharger ceci afin de pouvoir définir réussites et échecs.\n" +" " + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" +"\n" +" Modifier une règle d'auto-adhésion.\n" +" " + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "Règle d'auto-adhésion « %(value)s » modifiée" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" +"\n" +" Supprimer une règle d'auto-adhésion.\n" +" " + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Règle d'auto-adhésion « %(value)s » supprimée" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" +"\n" +" Rechercher des règles d'auto-adhésion.\n" +" " + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "%(count)d règle correspondante" +msgstr[1] "%(count)d règles correspondantes" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" +"\n" +" Afficher des informations au sujet d'une règle d'auto-adhésion.\n" +" " + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" +"\n" +" Définit un groupe par défaut (repli) pour toutes les entrées sans " +"correspondance.\n" +" " + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" +"Définir le groupe « %(value)s » par défaut (repli) pour l'auto-adhésion" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" +"\n" +" Supprimer le groupe par défaut (repli) pour toute entrée sans " +"correspondance.\n" +" " + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "Groupe « %(value)s » par défaut (repli) supprimé pour l'auto-adhésion" + +msgid "No default (fallback) group set" +msgstr "Pas de groupe par défaut (repli) défini" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" +"\n" +" Afficher des informations pour les groupes d'auto-adhésion par défaut " +"(repli).\n" +" " + +msgid "Task DN" +msgstr "DN de la tâche" + +msgid "DN of the started task" +msgstr "DN de la tâche lancée" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" +"au moins une des options « type », « users » ou « hosts » doit être indiquée" + +msgid "users and hosts cannot both be set" +msgstr "impossible de définir à la fois des utilisateurs et des hôtes" + +msgid "hosts cannot be set when type is 'group'" +msgstr "des hôtes ne peuvent pas être définis quand le type est « group »" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "impossible de définir des utilisateurs quand le type est « hostgroup »" + +msgid "Automember rebuild membership task started" +msgstr "" +"Tâche de reconstruction de l'appartenance avec adhésion automatique démarrée" + +msgid "Automember rebuild membership task completed" +msgstr "La tâche de reconstruction des appartenances automatiques est terminée" + +#, python-format +msgid "Task DN = '%s'" +msgstr "DN de la tâche = « %s »" + +msgid "Automember" +msgstr "Auto-adhésion" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " msgstr "" -msgid "Domain Level cannot be lowered." -msgstr "Le niveau du domaine ne peut être redescendu." +#, fuzzy +#| msgid "Remove conditions from an automember rule." +msgid "Remove orphan automember rules" +msgstr "Supprimer des conditions d'une règle d'auto-adhésion. " + +#, fuzzy +#| msgid "" +#| "\n" +#| "Groups of users\n" +#| "\n" +#| "Manage groups of users. By default, new groups are POSIX groups. You\n" +#| "can add the --nonposix option to the group-add command to mark a new " +#| "group\n" +#| "as non-POSIX. You can use the --posix argument with the group-mod " +#| "command\n" +#| "to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +#| "converted to non-POSIX groups.\n" +#| "\n" +#| "Every group must have a description.\n" +#| "\n" +#| "POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +#| "supported but can have an impact on your file permissions. It is not " +#| "necessary\n" +#| "to supply a GID when creating a group. IPA will generate one " +#| "automatically\n" +#| "if it is not provided.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new group:\n" +#| " ipa group-add --desc='local administrators' localadmins\n" +#| "\n" +#| " Add a new non-POSIX group:\n" +#| " ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +#| "\n" +#| " Convert a non-POSIX group to posix:\n" +#| " ipa group-mod --posix remoteadmins\n" +#| "\n" +#| " Add a new POSIX group with a specific Group ID number:\n" +#| " ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +#| "\n" +#| " Add a new POSIX group and let IPA assign a Group ID number:\n" +#| " ipa group-add --desc='printer admins' printeradmins\n" +#| "\n" +#| " Remove a group:\n" +#| " ipa group-del unixadmins\n" +#| "\n" +#| " To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +#| " ipa group-add-member --groups=remoteadmins localadmins\n" +#| "\n" +#| " Add multiple users to the \"localadmins\" group:\n" +#| " ipa group-add-member --users=test1 --users=test2 localadmins\n" +#| "\n" +#| " Remove a user from the \"localadmins\" group:\n" +#| " ipa group-remove-member --users=test2 localadmins\n" +#| "\n" +#| " Display information about a named group.\n" +#| " ipa group-show localadmins\n" +#| "\n" +#| "External group membership is designed to allow users from trusted " +#| "domains\n" +#| "to be mapped to local POSIX groups in order to actually use IPA " +#| "resources.\n" +#| "External members should be added to groups that specifically created as\n" +#| "external and non-POSIX. Such group later should be included into one of " +#| "POSIX\n" +#| "groups.\n" +#| "\n" +#| "An external group member is currently a Security Identifier (SID) as " +#| "defined by\n" +#| "the trusted domain. When adding external group members, it is possible " +#| "to\n" +#| "specify them in either SID, or DOM\n" +#| "ame, or name@domain format. IPA will attempt\n" +#| "to resolve passed name to SID with the use of Global Catalog of the " +#| "trusted domain.\n" +#| "\n" +#| "Example:\n" +#| "\n" +#| "1. Create group for the trusted domain admins' mapping and their local " +#| "POSIX group:\n" +#| "\n" +#| " ipa group-add --desc=' admins external map' " +#| "ad_admins_external --external\n" +#| " ipa group-add --desc=' admins' ad_admins\n" +#| "\n" +#| "2. Add security identifier of Domain Admins of the to the " +#| "ad_admins_external\n" +#| " group:\n" +#| "\n" +#| " ipa group-add-member ad_admins_external --external 'AD\\Domain " +#| "Admins'\n" +#| "\n" +#| "3. Allow members of ad_admins_external group to be associated with " +#| "ad_admins POSIX group:\n" +#| "\n" +#| " ipa group-add-member ad_admins --groups ad_admins_external\n" +#| "\n" +#| "4. List members of external members of ad_admins_external group to see " +#| "their SIDs:\n" +#| "\n" +#| " ipa group-show ad_admins_external\n" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" +"\n" +"Groupes d'utilisateurs\n" +"\n" +"Gérer des groupes d'utilisateurs. Par défaut, tout nouveau groupe est " +"POSIX.\n" +"On peut ajouter l'option « --nonposix » à la commande « group-add » pour\n" +"marquer un nouveau groupe comme non-POSIX et utiliser l'option « --posix »\n" +"de la commande « group-mod » pour convertir un groupe non-POSIX en groupe\n" +"POSIX. Les groupes POSIX ne peuvent pas être convertis en groupes non-" +"POSIX.\n" +"\n" +"Chaque groupe doit avoir une description.\n" +"\n" +"Les groupes POSIX doivent avoir un numéro d'ID de groupe (GID). Modifier un\n" +"GID est faisable, mais cela peut avoir un impact sur vos droits d'accès aux\n" +"fichiers. Il n'est pas nécessaire d'indiquer un GID à la création du " +"groupe.\n" +"IPA en générera un automatiquement s'il n'est pas fourni.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau groupe :\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Ajouter un nouveau groupe non-POSIX :\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convertir un groupe non-POSIX en groupe POSIX :\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Ajouter un nouveau groupe POSIX avec un numéro d'ID de groupe donné :\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Ajouter un nouveau groupe POSIX et laisser IPA assigner un numéro d'ID de " +"groupe :\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Supprimer un groupe :\n" +" ipa group-del unixadmins\n" +"\n" +" Ajouter le groupe « remoteadmins » au groupe « localadmins » :\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Ajouter plusieurs utilisateurs au groupe « localadmins » :\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Supprimer un utilisateur du groupe « localadmins » :\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Afficher des informations à propos d'un groupe donné :\n" +" ipa group-show localadmins\n" +"\n" +"L'adhésion à un groupe externe est conçue pour permettre aux utilisateurs " +"de\n" +"domaines approuvés d'être assimilés aux groupes POSIX locaux pour pouvoir\n" +"utiliser réellement les ressources IPA. Des membres externes peuvent être\n" +"ajoutés aux groupes spécifiquement crées comme externes et non-POSIX. Un " +"tel\n" +"groupe peut plus tard être incorporé dans un des groupes POSIX\n" +"\n" +"Un membre de groupe externe est actuellement identifié par un « Security\n" +"Identifier (SID) » tel que défini pour le domaine approuvé. Pour ajouter\n" +"un membre de groupe externe, il est possible de le définir, soit au format\n" +"SID, soit DOM\\name, soit name@domain. IPA essayera de résoudre le nom " +"passé\n" +"en SID en se servant du « Global Catalog » des domaines approuvés.\n" +"\n" +"Exemple:\n" +"\n" +"1. Créer un groupe par assimilation au domaine approuvé « admins »\n" +" et à leur groupe POSIX local :\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Ajouter l'identifiant de sécurité de « Domain Admins » au\n" +" groupe externe « ad_admins_external » :\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Autoriser des membres du groupe « ad_admins_external » à être associés " +"au\n" +" groupe POSIX « ad_admins » :\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Lister les membres externes du groupe « ad_admins_external » pour voir\n" +" leur SID :\n" +"\n" +" ipa group-show ad_admins_external\n" + +msgid "groups" +msgstr "groupes" + +msgid "User Group" +msgstr "Groupe d'Utilisateurs" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Groupe « %(value)s » créé" + +msgid "gid cannot be set for external group" +msgstr "l'identifiant de groupe ne peut être défini pour un groupe externe" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Groupe « %(value)s » supprimé" + +msgid "privileged group" +msgstr "groupe avec privilèges" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Groupe « %(value)s » modifié" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d groupe correspondant" +msgstr[1] "%(count)d groupes correspondants" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Impossible de réaliser la validation de membre externe sans installer " +"Samba 4. Assurez-vous d'avoir installé le sous-paquet « IPAserver-trust-ad » " +"sur le serveur" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Impossible de rejoindre un domaine sans avoir au préalable configuré son " +"propre domaine. Assurez-vous d'avoir lancé « ipa-adtrust-install » au " +"préalable sur le serveur" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Groupe « %(value)s » détaché de l'utilisateur « %(value)s »" + +msgid "not allowed to modify user entries" +msgstr "modification des entrées d'un utilisateur interdite" + +msgid "not allowed to modify group entries" +msgstr "modification des entrées de groupe interdite" + +msgid "Not a managed group" +msgstr "Pas un groupe administré" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this group." +msgstr "Ajouter des utilisateurs pouvant gérer ce jeton." + +#, fuzzy +#| msgid "Remove users that can manage this token." +msgid "Remove users that can manage members of this group." +msgstr "Supprimer des utilisateurs pouvant gérer ce jeton." + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" +"\n" +"Configuration du serveur DNS\n" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" +"\n" +"Manipulation de la configuration du serveur DNS\n" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" +"\n" +"Afficher la configuration d'un serveur DNS spécifique :\n" +" ipa dnsserver-show\n" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" +"\n" +" Modifier la configuration d'un serveur DNS spécifique :\n" +" ipa dnsserver-mod\n" + +msgid "DNS server" +msgstr "Serveur DNS" + +msgid "DNS servers" +msgstr "Serveurs DNS" + +msgid "DNS Servers" +msgstr "Serveurs DNS" + +msgid "DNS Server" +msgstr "Serveur DNS" + +msgid "DNS Server name" +msgstr "Nom du serveur DNS" + +#, fuzzy +#| msgid "Add a new ID override." +msgid "SOA mname override" +msgstr "Ajouter une nouvelle surcharge d'identifiant." + +#, fuzzy +#| msgid "Authoritative nameserver domain name" +msgid "SOA mname (authoritative server) override" +msgstr "Nom de domaine du serveur de nom faisant autorité" + +msgid "Forwarders" +msgstr "Redirecteurs de zone" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Redirecteurs par serveur. Un port personnalisé peut être indiqué pour chaque " +"redirecteur avec le format standard « adresse_IP port PORT »" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" +"Politique de redirection conditionnelle par serveur. Mettre à « none » pour " +"désactiver la redirection vers un redireteur global pour cette zone. Dans ce " +"cas, les redirecteurs de zone conditionnels sont ignorés." + +msgid "DNS is not configured" +msgstr "Le DNS n'est pas configuré" + +msgid "Modify DNS server configuration" +msgstr "Modifier la configuration du serveur DNS" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "Serveur DNS « %(value)s » modifié" + +msgid "Search for DNS servers." +msgstr "Rechercher des serveurs DNS." + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "%(count)d serveur DNS correspondant" +msgstr[1] "%(count)d serveurs DNS correspondants" + +#, fuzzy +#| msgid "KRA service is not enabled" +msgid "IPA DNS Server is not installed" +msgstr "Le service KRA est désactivé" + +msgid "Display configuration of a DNS server." +msgstr "Afficher la configuration d'un nouveau serveur DNS." + +msgid "Add a new DNS server." +msgstr "Ajouter un nouveau serveur DNS." + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "Nouveau serveur DNS « %(value)s » ajouté" + +msgid "Delete a DNS server" +msgstr "Supprimer un serveur DNS" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Serveur DNS « %(value)s » supprimé" + +msgid "Host-based access control commands" +msgstr "Commandes de contrôle d'accès basé sur l'hôte" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" +"\n" +"Services HBAC\n" +"\n" +"Les services PAM dont le système HBAC peut contrôler l'accès. Le nom " +"utilisé\n" +"ici doit correspondre au nom du service analysé par PAM.\n" +"EXEMPLES:\n" +"\n" +" Ajouter un nouveau service HBAC :\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modifier un service HBAC existant :\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Chercher des services HBAC. Cet exemple renvoie deux résultats, le service\n" +" FTP et le service tftp nouvellement ajouté :\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Supprimer un service HBAC :\n" +" ipa hbacsvc-del tftp\n" +"\n" + +msgid "HBAC services" +msgstr "Services HBAC" + +msgid "HBAC Services" +msgstr "Services HBAC" + +msgid "HBAC Service" +msgstr "Service HBAC" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "Service HBAC « %(value)s » ajouté" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Service HBAC « %(value)s » supprimé" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "Service HBAC « %(value)s » modifié" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "%(count)d service HBAC correspondant" +msgstr[1] "%(count)d services HBAC correspondant" + +msgid "HBAC service group" +msgstr "Groupe de services HBAC" + +msgid "HBAC service groups" +msgstr "Groupes de services HBAC" + +msgid "HBAC Service Groups" +msgstr "Groupes de services HBAC" + +msgid "HBAC Service Group" +msgstr "Groupe de services HBAC" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Groupe de services HBAC « %(value)s » ajouté" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "Groupe de services HBAC « %(value)s » supprimé" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "Groupe de services HBAC « %(value)s » modifié" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "%(count)d groupe de services HBAC correspondant" +msgstr[1] "%(count)d groupes de services HBAC correspondant" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" +"\n" +"Utilisateur de base\n" +"\n" +"Ceci contient les définitions communes pour les utilisateurs et utilisateurs " +"en attente\n" + +msgid "must be TRUE or FALSE" +msgstr "doit être « TRUE » ou « FALSE »" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +#, fuzzy +#| msgid "Principal name" +msgid "Principal alias" +msgstr "Nom principal" + +#, fuzzy +#| msgid "Password expiration" +msgid "User password expiration" +msgstr "Expiration de mot de passe" + +msgid "SSH public key fingerprint" +msgstr "Empreinte de clé publique SSH" + +msgid "Base-64 encoded user certificate" +msgstr "Certificat de l'utilisateur encodé en Base-64" + +#, fuzzy +#| msgid "Certificate Association Data" +msgid "Certificate mapping data" +msgstr "Donnée associée au certificat" + +msgid "SMB logon script path" +msgstr "" + +#, fuzzy +#| msgid "%i profile added." +msgid "SMB profile path" +msgstr "%i profil ajouté." + +#, fuzzy +#| msgid "Home directory" +msgid "SMB Home Directory" +msgstr "Répertoire personnel" + +#, fuzzy +#| msgid "Home directory base" +msgid "SMB Home Directory Drive" +msgstr "Base du répertoire utilisateur" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "format d'e-mail invalide : %(email)s" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "responsable %(manager)s introuvable" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "doit contenir au plus %(len)d caractères" + +msgid "Issuer" +msgstr "Émetteur" + +#, fuzzy +#| msgid "file to store certificate in" +msgid "Issuer of the certificate" +msgstr "fichier où stocker le certificat" + +msgid "Subject" +msgstr "Sujet" + +#, fuzzy +#| msgid "File to store the certificate in." +msgid "Subject of the certificate" +msgstr "Fichier dans lequel stocker le certificat." + +#, fuzzy +#| msgid "cannot be empty" +msgid "cannot have an empty subject" +msgstr "ne peut pas être vide" + +#, fuzzy +#| msgid "cannot specify both raw certificate and file" +msgid "cannot specify both subject/issuer and certificate" +msgstr "impossible d'indiquer à la fois certificat brut et un nom de fichier" + +#, fuzzy +#| msgid "cannot specify both raw certificate and file" +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "impossible d'indiquer à la fois certificat brut et un nom de fichier" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificate mappings to the user entry." +msgstr "Ajouter un ou plusieurs certificats à l'entrée utilisateur" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificate mappings from the user entry." +msgstr "Supprimer les certificats de l'entrée de l'utilisateur" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "Certificats supprimés de l'utilisateur « %(value)s »" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "doit contenir un tuple (liste, dict)" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "{role}: role not found" +msgstr "{role} : rôle introuvable" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "{attr} : attribut introuvable" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" msgstr "" -"Le niveau actuel du domaine ne peut être relevé à {0}, le serveur {1} ne le " -"prend pas en charge." +"\n" +"Topologie\n" +"\n" +"Gestion de la topologie de réplication.\n" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" +"\n" +"Les données des serveurs IPA sont enregistrées dans le serveur LDAP\n" +"sous deux suffixes :\n" +"* le suffixe de domain, par exemple « dc=example,dc=com », qui contient " +"toutes\n" +" les informations relatives au domaine ;\n" +"* le suffixe ca, « o=ipaca », qui n'est présent que sur les serveurs où " +"l'autorité de certification\n" +" est installée. Il contient les données nécessaire au composant " +"Certificate Server\n" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" +"\n" +"Les données enregistrées dans les serveurs IPA sont répliquées vers les " +"autres\n" +"serveurs IPA. Les agréments de réplication définissent la manière dont la \n" +"réplication s'opère. Les agréments de réplication doivent être définis " +"pour \n" +"les deux suffixes de manière séparée. Sur les domaines de niveau 0, ils " +"sont\n" +"gérés par les outils ipa-replica-manage et ipa-csreplica-manage tools. Sur \n" +"les domaines de niveau 1, ils sont gérés de manière centralisée par les " +"commandes\n" +"« ipa topology* ».\n" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" +"\n" +"Les agréments sont représentés par des segments de topologie. Un segment de " +"topologie\n" +"représente par défaut deux agréments de réplication, un pour chaque " +"direction, par exemple\n" +"de A vers B et de B vers A. La création de segments unidirectionnels n'est " +"pas permise.\n" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" +"\n" +"Afin de vérifier qu'aucun serveur n'est déconnecté dans la topologie d'un\n" +"suffixe donné, utiliser :\n" +" ipa topologysuffix-verify $suffix\n" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +"\n" +"Exemples :\n" +" Trouver tous les serveurs :\n" +" ipa server-find\n" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" +"\n" +" Trouver tous les suffixes :\n" +" ipa topologysuffix-find\n" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" +"\n" +" Ajouter un segment de topologie au suffixe du domaine :\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" +"\n" +" Ajouter un segment de topologie au suffixe « ca » :\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" +"\n" +" Énumérer tous les segments de topologie dans le suffixe du domaine :\n" +" ipa topologysegment-find domain\n" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" +"\n" +" Énumérer tous les segments de topologie dans le suffixe « ca » :\n" +" ipa topologysegment-find ca\n" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" +"\n" +" Supprimer un segment de topologie du suffixe du domaine :\n" +" ipa topologysegment-del domain segment_name\n" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" +"\n" +" Supprimer un segment de topologie du suffixe « ca » :\n" +" ipa topologysegment-del ca segment_name\n" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" +"\n" +" Vérification de la topologie du suffixe du domaine :\n" +" ipa topologysuffix-verify domain\n" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" +"\n" +" Vérification de la topologie du suffixe « ca » :\n" +" ipa topologysuffix-verify ca\n" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "La gestion de la topologie nécessite le niveau de domaine minimal {0}" + +msgid "segment" +msgstr "segment" + +msgid "segments" +msgstr "segments" + +msgid "Topology Segments" +msgstr "Segments de topologie" + +msgid "Topology Segment" +msgstr "Segment de topologie" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "le nœud de gauche n'est pas un nœud de la topologie : %(leftnode)s" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "le nœud de droite n'est pas un nœud de la topologie : %(rightnode)s" + +msgid "left node and right node must not be the same" +msgstr "les nœuds de gauche et de droite ne peuvent être identiques" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "%(count)d segment correspondant" +msgstr[1] "%(count)d segment correspondants" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "Segment « %(value)s » ajouté" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "Segment « %(value)s » supprimé" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "Segment « %(value)s » modifié" + +#, python-format +msgid "%(value)s" +msgstr "%(value)s" + +msgid "left or right node has to be specified" +msgstr "le nœud de gauche ou de droite doit être indiqué" + +msgid "only one node can be specified" +msgstr "seul un nœud peut être indiqué" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" +"Raffraichissement demandé pour la réplication via le segment « %(pkey)s »." + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" +"Arrêt du raffraichissement demandé pour la réplication via le segment « " +"%(pkey)s »." + +msgid "suffixes" +msgstr "suffixes" + +msgid "Topology suffixes" +msgstr "Suffixes de topologie" + +msgid "Topology suffix" +msgstr "Suffixe de topologie" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "%(count)d suffixe de topologie correspondant" +msgstr[1] "%(count)d suffixes de topologie correspondants" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Suffixe de topologie « %(value)s » supprimé" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "Suffixe de topologie « %(value)s » ajouté" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Suffixe de topologie « %(value)s » modifié" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" +"\n" +"Vérifier la topologie de réplication pour le suffixe.\n" +"\n" +"Vérifications effectuées :\n" +" 1. vérfier si la topologie n'est pas déconnectée. En d'autres mots, si des " +"chemins\n" +" de réplication existent bien entre tous les serveurs.\n" +" 2. vérifier si tous les serveurs n'ont pas un nombre supérieur à celui " +"recommandé\n" +" d'agrément de réplication.\n" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" +"\n" +"Migration vers IPA\n" +"\n" +"Migration d'utilisateurs et de groupes d'un serveur LDAP vers IPA.\n" +"\n" +"Ceci réalise une requête LDAP sur le serveur distant pour rechercher\n" +"utilisateurs et groupes dans un conteneur. Pour faire migrer les mots de\n" +"passe, vous devez vous connecter en tant qu'utilisateur capable de lire\n" +"l'attribut « userPassword » sur le serveur distant : chose généralement\n" +"réservée aux administrateurs de haut niveau comme « cn=Directory Manager »\n" +"dans 389-ds (utilisateur de la connexion par défaut).\n" +"\n" +"Par défaut, le conteneur utilisateur est ou=People.\n" +"\n" +"Par défaut, le conteneur groupe est ou=Groups.\n" +"\n" +"Utilisateurs et groupes préexistants sur le serveur IPA ne sont pas " +"touchés.\n" +"\n" +"Deux schémas LDAP définissent comment les membres d'un groupe sont\n" +"enregistrés : RFC2307 et RFC2307bis. RFC2307bis utilise « member » et\n" +"« uniquemember » pour définir les membres d'un groupe, RFC2307 utilise\n" +"« memberUid ». Le schéma par défaut est RFC2307bis.\n" +"\n" +"La fonctionnalité « compat » du schéma autorise IPA à formater à nouveau\n" +"les données pour les systèmes ne prenant pas en charge RFC2307bis. Il est\n" +"recommandé de désactiver cette fonction pendant la migration pour éviter\n" +"de surcharger le système. Vous la réactiverez après migration. Pour faire\n" +"la migration avec la fonction activée,utilisez l'option « --with-compat ».\n" +"\n" +"Les utilisateurs migrés n'ont pas de référence Kerberos, ils n'ont que leur\n" +"mot de passe LDAP. Pour achever le processus de migration, les utilisateurs\n" +"doivent aller à la page http://ipa.example.com/ipa/migration et\n" +"s'authentifier en utilisant leur mot de passe LDAP pour générer leur\n" +"justificatif d'identité Kerberos.\n" +"\n" +"Par défaut, la migration est désactivée. Utilisez la commande\n" +"« ipa config-mod » pour l'activer :\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"Si un DN de base n'est pas indiqué avec « --basedn », IPA utilise alors,\n" +"soit la valeur de « defaultNamingContext » si elle est définie, soit la\n" +"première valeur fixée dans « namingContexts » dans la racine du serveur " +"LDAP\n" +"distant.\n" +"\n" +"Les utilisateurs sont ajoutés comme membres du groupe utilisateur par " +"défaut.\n" +"Cela peut être une tâche demandant du temps, ainsi pendant la migration " +"cela\n" +"se fait en mode « batch » par tranches de 100 utilisateurs. Il y aura donc\n" +"une fenêtre dans laquelle les utilisateurs seront ajoutés à IPA, mais\n" +"ne seront pas encore membres du groupe d'utilisateurs par défaut.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Migration la plus simple, acceptant tous les paramètres par défaut :\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" En précisant le conteneur utilisateur et groupe. S'utilise pour migrer les\n" +"données utilisateur et groupe d'un serveur IPA v1 :\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Comme un serveur IPA v2 comporte déjà des groupes prédéfinis pouvant " +"entrer\n" +"en conflit avec des groupes du serveur (IPA v1) migré (par exemple admins,\n" +"ipausers), des utilisateurs dans un groupe en conflit comme groupe " +"principal\n" +"peuvent se voir rattachés à un groupe inconnu sur le nouveau serveur IPA " +"v2.\n" +" Utilisez l'option « --group-overwrite-gid » pour écraser le GID des " +"groupes\n" +"préexistants afin d'éviter ce problème :\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Utilisateurs ou groupes migrés peuvent avoir des classes d'objets et\n" +"attributs associés inconnus du serveur IPA v2. Ces classes d'objets et\n" +"attributs doivent être tenus en dehors du processus de migration :\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"JOURNALISATION\n" +"\n" +"La migration inscrit des avertissements et des erreurs sur le journal\n" +"d'erreurs Apache. Ce fichier devra être examiné après la migration pour\n" +"corriger ou enquêter sur tout problème qui serait mentionné.\n" +"\n" +"Tous les 100 utilisateurs migrés un message de niveau info est affiché\n" +"indiquant l'avancement en cours et la durée écoulée pour permettre un suivi\n" +"du processus de progression de la migration.\n" +"\n" +"Si le niveau de journalisation est « debug », en définissant « debug=True »\n" +"soit dans « /etc/ipa/default.conf », soit dans « /etc/ipa/server.conf »,\n" +"alors une entrée est inscrite pour chaque utilisateur ajouté, plus un\n" +"résumé quand le groupe utilisateur par défaut est mis à jour.\n" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" +"Le principal Kerberos %s existe déjà. Utiliser la commande « ipa user-mod » " +"pour le définir manuellement." + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" +"Impossible de savoir si le principal Kerberos %s existe déjà. Utiliser la " +"commande 'ipa user-mod' pour le définir manuellement." + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" +"Échec à l'ajout de l'utilisateur dans le groupe par défaut. Utiliser la " +"commande « ipa group-add-member » pour l'ajouter manuellement." + +msgid "Migration of LDAP search reference is not supported." +msgstr "" +"La migration des références des recherches LDAP n'est pas prise en charge." + +msgid "Malformed DN" +msgstr "DN mal formé" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "%(user)s n'est pas un utilisateur POSIX" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" +". Vérifier le GID du groupe existant. Utiliser l'option « --group-overwrite-" +"gid » pour surcharger le GID" + +msgid "Invalid LDAP URI." +msgstr "URI LDAP invalide." + +#, python-format +msgid "%s to exclude from migration" +msgstr "%s à exclure de la migration" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" +"les résultats des recherches sur les objets\n" +"à migrer ont été tronquées par le serveur ;\n" +"le processus de migration peut être incomplet\n" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" +"La recherche LDAP %(container)s ne renvoie aucun résultat (base de " +"recherche : %(search_base)s, classe d'objet : %(objectclass)s)" + +msgid "Default group for new users not found" +msgstr "Groupe par défaut pour les nouveaux utilisateurs introuvable" + +msgid "netgroups" +msgstr "groupes réseau" + +msgid "Netgroups" +msgstr "Groupes réseau" + +msgid "Netgroup" +msgstr "Groupe réseau" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "Groupe réseau « %(value)s » ajouté" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"Un groupe d'hôtes nommé « %s » existe déjà. Les groupes d'hôtes et les " +"groupes réseau partagent le même espace de nommage" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Groupe réseau « %(value)s » supprimé" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "Groupe réseau « %(value)s » supprimé" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "%(count)d groupe réseau correspondant" +msgstr[1] "%(count)d groupes réseau correspondant" + +msgid "One time password commands" +msgstr "Commandes mots de passe à usage unique (OTP)" + +msgid "OTP configuration options" +msgstr "Options de configuration pour les mots de passe à usage unique" + +msgid "OTP Configuration" +msgstr "Configuration pour les mots de passe à usage unique" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Mot de passe modifié pour « %(value)s »" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "« pkinit »" + +msgid "PKINIT" +msgstr "PKINIT" + +#, fuzzy +#| msgid "Trust status" +msgid "PKINIT status" +msgstr "État de la confiance" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "Whether PKINIT is enabled or disabled" +msgstr "Cette entrée ne peut être activée ou désactivée" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)s server role matched" +#| msgid_plural "%(count)s server roles matched" +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)s rôle serveur correspondant" +msgstr[1] "%(count)s rôles serveur correspondants" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" +"\n" +"Serveurs mandataires RADIUS\n" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" +"\n" +"Gestion des serveurs mandataires RADIUS.\n" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" +"\n" +"IPA prend en charge l'utilisation d'un serveur mandataire externe RADIUS\n" +"pour des authentifications OTP « krb5 ». Cela procure une grande souplesse\n" +"pour l'intégration des services d'authentification tierce partie.\n" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" +"\n" +" Ajouter un nouveau serveur :\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" +"\n" +" Trouver tous serveurs dont les entrées incluent la chaîne « example." +"com » :\n" +" ipa radiusproxy-find example.com\n" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" +"\n" +" Examiner la configuration :\n" +" ipa radiusproxy-show MyRADIUS\n" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" +"\n" +" Changer le secret :\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" +"\n" +" Supprimer une configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" + +msgid "invalid attribute name" +msgstr "nom d'attribut invalide" + +msgid "invalid port number" +msgstr "numéro de port invalide" + +msgid "RADIUS proxy server" +msgstr "Serveur mandataire RADIUS" + +msgid "RADIUS proxy servers" +msgstr "Serveurs mandataires RADIUS" + +msgid "RADIUS Servers" +msgstr "Serveurs RADIUS" + +msgid "RADIUS Server" +msgstr "Serveur RADIUS" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "Serveur mandataire RADIUS « %(value)s » ajouté" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "Serveur mandataire RADIUS « %(value)s » supprimé" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "Serveur mandataire RADIUS « %(value)s » modifié" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "%(count)d serveur mandataire RADIUS correspondant" +msgstr[1] "%(count)d serveurs mandataires RADIUS correspondant" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" +"impossible d'ajouter la permission « %(perm)s » avec le type de liaison " +"« %(bindtype)s » à un privilège" + +msgid "Privilege" +msgstr "Privilège" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "Privilège « %(value)s » ajouté" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "Privilège « %(value)s » supprimé" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "Privilège « %(value)s » supprimé" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d privilège correspondant" +msgstr[1] "%(count)d privilèges correspondant" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" +"la priorité doit être une valeur unique (%(prio)d est déjà utilisé par " +"%(gname)s)" + +msgid "Add Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Delete an IPA service." +msgid "Delete Class of Service entry" +msgstr "Supprimer un service IPA." + +#, fuzzy +#| msgid "Modify an HBAC service group." +msgid "Modify Class of Service entry" +msgstr "Supprimer un groupe de services HBAC." + +msgid "Display Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Search for an HBAC service group." +msgid "Search for Class of Service entry" +msgstr "Rechercher des groupes de services HBAC." + +msgid "password policy" +msgstr "politique de mots de passe" + +msgid "password policies" +msgstr "politiques de mot de passe" + +msgid "Password Policies" +msgstr "Politiques de mot de passe" + +msgid "Password Policy" +msgstr "Politique de gestion des mots de passe" + +#, fuzzy +#| msgid "Max renew" +msgid "Max repeat" +msgstr "Renouvellement max." + +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of same consecutive characters" +msgstr "Nombre maximal d'entrées renvoyées" + +#, fuzzy +#| msgid "Max renew" +msgid "Max sequence" +msgstr "Renouvellement max." + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "Nom d'utilisateur" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" +"La durée de vie maximale du mot de passe doit être supérieure au minimum." + +msgid "cannot delete global password policy" +msgstr "impossible de supprimer une politique de mot de passe globale" + +msgid "priority cannot be set on global policy" +msgstr "la priorité ne peut être définie sur la politique globale" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Realm domains\n" +#| "\n" +#| "Manage the list of domains associated with IPA realm.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Display the current list of realm domains:\n" +#| " ipa realmdomains-show\n" +#| "\n" +#| " Replace the list of realm domains:\n" +#| " ipa realmdomains-mod --domain=example.com\n" +#| " ipa realmdomains-mod --domain={example1.com,example2.com,example3." +#| "com}\n" +#| "\n" +#| " Add a domain to the list of realm domains:\n" +#| " ipa realmdomains-mod --add-domain=newdomain.com\n" +#| "\n" +#| " Delete a domain from the list of realm domains:\n" +#| " ipa realmdomains-mod --del-domain=olddomain.com\n" +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" +"\n" +"Domaines du royaume\n" +"\n" +"Gérer la liste des domaines associés au royaume IPA.\n" +"\n" +"EXEMPLES:\n" +"\n" +" Afficher la liste actuelle des domaines du royaume :\n" +" ipa realmdomains-show\n" +"\n" +" Remplacer la liste des domaines du royaume :\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Ajouter un domaine à la liste des domaines du royaume :\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Supprimer un domaine de la liste des domaines du royaume :\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" + +msgid "Realm domains" +msgstr "Domaines du royaume" + +msgid "Realm Domains" +msgstr "Domaines pour le royaume" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" +"La zone DNS de chaque domaine Kerberos doit contenir des enregistrements SOA " +"et NS. Aucun enregistrement trouvé pour : %s" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" +"Les domaines suivants n'appartiennent pas à ce domaine Kerberos : %(domains)s" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" +"Le domaine Kerberos des domaines suivants ne peuvent être détectés : " +"%(domains)s. S'il existe des domaines appartenant à ce royaume, merci de " +"créer un enregistrement TXT kerberos contenant « %(realm)s » dans chacun " +"d'entre eux." + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" +"L'option « --domain » ne peut être utilisée conjointement avec les options " +"« --add-domain » or « --del-domain ». Utilisez « --domain » pour indiquer " +"explicitement la liste complète des domaines du royaume, utilisez « --add-" +"domain » et « --del-domain » pour ajouter et supprimer les domaines de " +"manière individuelle." + +msgid "IPA server domain cannot be omitted" +msgstr "Le domaine du serveur IPA ne peut être omis" + +msgid "IPA server domain cannot be deleted" +msgstr "Le domaine du serveur IPA ne peut être supprimé" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Service Constrained Delegation\n" +#| "\n" +#| "Manage rules to allow constrained delegation of credentials so\n" +#| "that a service can impersonate a user when communicating with another\n" +#| "service without requiring the user to actually forward their TGT.\n" +#| "This makes for a much better method of delegating credentials as it\n" +#| "prevents exposure of the short term secret of the user.\n" +#| "\n" +#| "The naming convention is to append the word \"target\" or \"targets\" to\n" +#| "a matching rule name. This is not mandatory but helps conceptually\n" +#| "to associate rules and targets.\n" +#| "\n" +#| "A rule consists of two things:\n" +#| " - A list of targets the rule applies to\n" +#| " - A list of memberPrincipals that are allowed to delegate for\n" +#| " those targets\n" +#| "\n" +#| "A target consists of a list of principals that can be delegated.\n" +#| "\n" +#| "In English, a rule says that this principal can delegate as this\n" +#| "list of principals, as defined by these targets.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new constrained delegation rule:\n" +#| " ipa servicedelegationrule-add ftp-delegation\n" +#| "\n" +#| " Add a new constrained delegation target:\n" +#| " ipa servicedelegationtarget-add ftp-delegation-target\n" +#| "\n" +#| " Add a principal to the rule:\n" +#| " ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +#| "com ftp-delegation\n" +#| "\n" +#| " Add our target to the rule:\n" +#| " ipa servicedelegationrule-add-target --" +#| "servicedelegationtargets=ftp-delegation-target ftp-delegation\n" +#| "\n" +#| " Add a principal to the target:\n" +#| " ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +#| "com ftp-delegation-target\n" +#| "\n" +#| " Display information about a named delegation rule and target:\n" +#| " ipa servicedelegationrule_show ftp-delegation\n" +#| " ipa servicedelegationtarget_show ftp-delegation-target\n" +#| "\n" +#| " Remove a constrained delegation:\n" +#| " ipa servicedelegationrule-del ftp-delegation-target\n" +#| " ipa servicedelegationtarget-del ftp-delegation\n" +#| "\n" +#| "In this example the ftp service can get a TGT for the ldap service on\n" +#| "the bound user's behalf.\n" +#| "\n" +#| "It is strongly discouraged to modify the delegations that ship with\n" +#| "IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +#| "ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +#| "to delegate, causing the framework to stop functioning.\n" +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" +"\n" +"Délégation contrainte de services\n" +"\n" +"Gérez les règles permettant la délégation contrainte d'informations\n" +"d'authentification de façon à ce qu'un service puisse se faire passer\n" +"pour un utilisateur lors de la communication avec un service sans\n" +"que cela ne nécessite de la part de l'utilisateur de transmettre son TGT.\n" +"Cela constitue une méthode bien meilleure de délégation d'identification\n" +"car elle évite l'exposition du secret court terme de l'utilisateur.\n" +"\n" +"La convention de nommage est d'ajouter le mot « target » ou « targets »\n" +"au nom de la règle de correspondance. Ce poitn n'est pas obligatoire mais\n" +"aide à visualiser l'association entre règles et cibles.\n" +"\n" +"Une règle est constituée de deux choses :\n" +" - une liste de cibles auxquelles la règle s'applique,\n" +" - une liste de memberPrincipals qui sont autorisés à leur déléguer\n" +" leurs droits.\n" +"\n" +"Une cible consiste en une liste de principaux qui peuvent être délégués.\n" +"\n" +"En anglais, une règle que ce principal peut déléguer comme cette liste\n" +"de principaux, tels que définis par ces cibles.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter une nouvelle règle de délégation contrainte :\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Ajouter une nouvelle cible de délégation contrainte :\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Ajouter un principal à la règle :\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Ajouter notre cible à la règle :\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add un principal à la cible :\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Afficher les informations au sujet d'une règle de délégation et sa cible :\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Supprimer une délégation contrainte :\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"Dans cet exemple, le service ftp peut obtenir un TGT pour le service ldap\n" +"au nom de l'utilisateur associé.\n" +"\n" +"Il est fortement découragé de modifier les délégations livrées avec IPA,\n" +"ipa-http-delegation et ses cibles ipa-cifs-delegation-targets et\n" +"ipa-ldap-delegation-targets. Des modifications erronées peuvent obérer\n" +"la capacité de délégation, en provoquant l'arrêt de fonctionnement du\n" +"moteur.\n" + +msgid "Allowed to Impersonate" +msgstr "Autorisé à prendre l'identité" + +msgid "Member principals" +msgstr "Principaux membres de" + +#, fuzzy, python-format +#| msgid "Malformed principal" +msgid "Malformed principal: %(error)s" +msgstr "Principal malformé" + +msgid "Add target to a named service delegation." +msgstr "Ajouter des cibles à une délégation de service nommé" + +#, python-format +msgid "member %s" +msgstr "%s membre" + +msgid "Remove member from a named service delegation." +msgstr "Retirer des membres d'une délégation de service nommé" + +msgid "service delegation rule" +msgstr "règle de délégation de service" + +msgid "service delegation rules" +msgstr "règles de délégation de service" + +msgid "Service delegation rules" +msgstr "Règles de délégation de service" + +msgid "Service delegation rule" +msgstr "Règle de délégation de service" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Règle de délégation de service « %(value)s » ajoutée" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Règle de délégation de service « %(value)s » supprimée" + +msgid "privileged service delegation rule" +msgstr "règle de délégation de service privilégié" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "%(count)d règle de délégation de service correspondante" +msgstr[1] "%(count)d règles de délégation de service correspondantes" + +msgid "service delegation target" +msgstr "cible de délégation de service" + +msgid "service delegation targets" +msgstr "cibles de délégation de service" + +msgid "Service delegation targets" +msgstr "Cibles de délégation de service" + +msgid "Service delegation target" +msgstr "Cible de délégation de service" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "Cible de délégation de service « %(value)s » ajoutée" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Cible de délégation de service « %(value)s » supprimée" + +msgid "privileged service delegation target" +msgstr "cible de délégation de service privilégiée" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "%(count)d cible de délégation de service correspondante" +msgstr[1] "%(count)d cibles de délégation de service correspondantes" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" +"\n" +"Utilisateurs en attente\n" +"\n" +"Gestion des entrées des utilisateurs en attente (« stage users »).\n" +"\n" +"Les entrées des utilisateurs en attente sont situées directement dans le \n" +"conteneur « cn=stage users, cn=accounts, cn=provisioning, SUFFIXE x.\n" +"Les utilisateurs ne peuvent utiliser ces entrées pour s'authentifier (même\n" +"si les entrées contiennent des données d'authentification) et ne sont que\n" +"candidates à devenir des entrées actives.\n" +"\n" +"Les entrées d'utilisateurs actifs sont des utilisateurs Posix situées dans " +"le \n" +"conteneur « cn=accounts, SUFFIXE ». Les utilisateurs peuvent les utiliser " +"pour \n" +"s'authentifier à la condition qu'elles comportent des données " +"d'authentification.\n" +"\n" +"Les entrées d'utilisateurs supprimés sont des entrées d'utilisateurs Posix " +"situées\n" +"dans le conteneur « cn=deleted users, cn=accounts, cn=provisioning, " +"SUFFIXE ».\n" +"Un utilisateur ne peut s'authentifier à l'aide de ces entrées , même si " +"elles contiennent\n" +"des données d'authentification valides.\n" +"\n" +"Le conteneur d'entrées utilisateurs en attente contient des entrées :\n" +" - créées par les commandes « stageuser-add », qui sont des utilisateurs " +"Posix,\n" +" - créées par des systèmes d'approvisionnement externes.\n" +"\n" +"Un utilisateur en attente valide DOIT posséder les propriétés suivantes :\n" +" - le RDN de l'entrée est « uid »\n" +" - l'attribut « ipaUniqueID » est « autogenerate »\n" +"\n" +"IPA prend en charge une grande variété de formats de noms d'utilisateurs, " +"mais\n" +"il est important de savoir que des restrictions peuvent s'appliquer dans un " +"environnement\n" +"particulier. Ainsi, les noms d'utilisateurs débutant par un chiffre ou ceux " +"excédant une \n" +"certaine taille peuvent poser problème sur certains systèmes UNIX.\n" +"Utiliser la commande « ipa config-mod » pour modifier le format autorisé par " +"les outils IPA.\n" +"\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouvel utilisateur en attente :\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Ajouter un utilisateur en attente depuis le conteneur des utilisateurs " +"supprimés :\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" + +msgid "Stage Users" +msgstr "Mettre en attente les utilisateurs" + +msgid "Stage User" +msgstr "Mettre en attente l'utilisateur" + +msgid "stage user" +msgstr "utilis" + +msgid "stage users" +msgstr "utilisateurs en attente" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "Utilisateur en attente « %(value)s » ajouté" + +msgid "givenname is required" +msgstr "givenname est requis" + +msgid "sn is required" +msgstr "sn est requis" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "Utilisateur en attente « %(value)s » supprimé" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "Utilisateur en attente « %(value)s » modifié" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d utilisateur correspondant" +msgstr[1] "%(count)d utilisateurs correspondant" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "Activer un utilisateur en attente « %(value)s »" + +msgid "Entry RDN is not 'uid'" +msgstr "Le RDN de l'entrée n'est pas l'attribut « uid »" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "L'entrée ne possède aucun attribut « %(attribute)s »" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "L'utilisateur actif nommé « %(user)s » existe déjà" + +#, python-format +msgid "Stage user %s activated" +msgstr "Utilisateur en attente %s activé" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificates to the stageuser entry" +msgstr "Ajouter un ou plusieurs certificats à l'entrée utilisateur" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificates to the stageuser entry" +msgstr "Supprimer les certificats de l'entrée de l'utilisateur" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "Certificats supprimés de l'utilisateur « %(value)s »" + +#, fuzzy +#| msgid "Add new principal alias to host entry" +msgid "Add new principal alias to the stageuser entry" +msgstr "Ajouter un nouvel alias de principal à l'entrée de l'hôte" + +#, fuzzy, python-format +#| msgid "Added new aliases to host \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "Alias ajoutés à l'hôte « %(value)s »" + +#, fuzzy +#| msgid "Remove principal alias from a host entry" +msgid "Remove principal alias from the stageuser entry" +msgstr "Supprimer un alias de principal de l'entrée d'un hôte" + +#, fuzzy, python-format +#| msgid "Removed aliases from host \"%(value)s\"" +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "Alias supprimés pour l'hôte « %(value)s »" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "Ajouter un ou plusieurs certificats à l'entrée utilisateur" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "Supprimer les certificats de l'entrée de l'utilisateur" + +msgid "pyhbac is not installed." +msgstr "" + +#, fuzzy +#| msgid "Certificate Authorities" +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "Autorités de certification" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +#, fuzzy +#| msgid "Retrieve an existing certificate." +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "Récupérer un certificat existant." + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +#, fuzzy +#| msgid "Check the status of a certificate signing request." +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "Vérifier l'état d'une demande de signature de certificat." + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +#| "revocation reason details. " +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" +"Raison de la révocation du certificat (1-10). Utilisez « ipa help cert » " +"pour plus d'informations sur les raisons de révocation." + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Unspecified" +msgid " * 0 - unspecified\n" +msgstr "Non-spécifié" + +#, fuzzy +#| msgid "Key Compromise" +msgid " * 1 - keyCompromise\n" +msgstr "Clé compromise" + +#, fuzzy +#| msgid "AA Compromise" +msgid " * 2 - cACompromise\n" +msgstr "AA compromis" + +#, fuzzy +#| msgid "Affiliation Changed" +msgid " * 3 - affiliationChanged\n" +msgstr "Affiliation modifiée" + +msgid " * 4 - superseded\n" +msgstr "" + +#, fuzzy +#| msgid "Cessation of Operation" +msgid " * 5 - cessationOfOperation\n" +msgstr "Cessation d'activité" + +#, fuzzy +#| msgid "Certificate Hold" +msgid " * 6 - certificateHold\n" +msgstr "Certificat bloqué" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +#, fuzzy +#| msgid "Privilege Withdrawn" +msgid " * 9 - privilegeWithdrawn\n" +msgstr "Privilège retiré" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "L'AC n'est pas configurée" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" +"Le principal '%(principal)s' n'est pas autorisé à utiliser l'AC '%(ca)s' " +"avec le profil '%(profile_id)s' pour l'émission de certificat." + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Host '%(host)s' not found" +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "Hôte « %(host)s » introuvable" + +msgid "Issuing CA" +msgstr "AC émettrice" + +msgid "Name of issuing CA" +msgstr "Nom de l'AC émettrice" + +#, fuzzy +#| msgid "Base-64 encoded host certificate" +msgid "Base-64 encoded certificate." +msgstr "Certificat de l'hôte encodé en Base-64" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate chain" +msgstr "Certificat" + +#, fuzzy +#| msgid "CA certificate" +msgid "X.509 certificate chain" +msgstr "Certificat d'AC" + +#, fuzzy +#| msgid "Email address" +msgid "Subject email address" +msgstr "Adresse courriel" + +#, fuzzy +#| msgid "Subject DN" +msgid "Subject DNS name" +msgstr "DN de l'objet" + +#, fuzzy +#| msgid "Street address" +msgid "Subject X.400 address" +msgstr "Adresse" + +#, fuzzy +#| msgid "Home directory base" +msgid "Subject directory name" +msgstr "Base du répertoire utilisateur" + +msgid "Subject EDI Party name" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject URI" +msgstr "Sujet" + +#, fuzzy +#| msgid "A IP Address" +msgid "Subject IP Address" +msgstr "A Adresse IP" + +#, fuzzy +#| msgid "Subject DN" +msgid "Subject OID" +msgstr "DN de l'objet" + +#, fuzzy +#| msgid "Subject DN" +msgid "Subject UPN" +msgstr "DN de l'objet" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Subject Kerberos principal name" +msgstr "Principal Kerberos" + +#, fuzzy +#| msgid "Subject Distinguished Name" +msgid "Subject Other Name" +msgstr "Nom distinctif de l'objet" + +msgid "Issuer DN" +msgstr "DN de l'émetteur" + +msgid "Not Before" +msgstr "Pas avant" + +msgid "Not After" +msgstr "Pas après" + +msgid "Fingerprint (SHA1)" +msgstr "Empreinte (SHA1)" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "Fingerprint (SHA256)" +msgstr "Empreinte (SHA1)" + +msgid "Serial number (hex)" +msgstr "Numéro de série (hex)" + +msgid "Request status" +msgstr "État de la demande" + +msgid "Include certificate chain in output" +msgstr "" + +#, fuzzy +#| msgid "automatically add the principal if it doesn't exist" +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "ajoute automatiquement le principal s'il n'existe pas" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "Aucun « Common Name » n'a été trouvé dans le sujet de cette demande." + +#, fuzzy, python-format +#| msgid "" +#| "hostname in subject of request '%(cn)s' does not match principal hostname " +#| "'%(hostname)s'" +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" +"Le nom d'hôte indiqué dans le sujet de la demande « %(cn)s » ne correspond " +"pas au nom d'hôte du principal « %(hostname)s »" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" +"Le nom d'hôte indiqué dans le sujet de la demande « %(cn)s » ne correspond " +"pas au nom d'hôte du principal « %(hostname)s »" + +msgid "DN commonName does not match user's login" +msgstr "" +"Le « commonName » du DN ne correspond pas à l'identifiant de connexion de " +"l'utilisateur" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" +"L'adresse email du DN ne correspond à aucune des adresses email de " +"l'utilisateur" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" +"Privilège « write » insuffisant sur l'attribut « userCertificate » de " +"l'entrée « %s »." + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" +"Il est interdit d'utiliser un « subject alt name » (nom alternatif) de type " +"%s pour les principaux d'utilisateurs." + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" +"Le principal du service pour le nom %s alternatif du sujet dans la demande " +"de certificat n'existe pas" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" +"Privilège insuffisant pour créer un certificat avec le nom de sujet « %s » " +"alternatif." + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" +"Le principal « %s » du nom alternatif ne correspond pas au principal demandé" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" +"L'attribut RFC822Name ne correspond à aucune des adresses email de " +"l'utilisateur" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" +"Il est interdit d'utiliser un « subject alt name » (nom alternatif) de type " +"%s pour les principaux autres qu'utilisateurs." + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "Le type %s de nom alternatif de sujet est interdit" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "L'autorité de certification « %s » est désactivée" + +#, fuzzy +#| msgid "Sudo Option" +msgid "'add' option" +msgstr "Option sudo" + +msgid "The principal for this request doesn't exist." +msgstr "Le principal pour cette demande n'existe pas." + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "État" + +msgid "Revoked" +msgstr "Révoqué" + +msgid "Revocation reason" +msgstr "Raison de la révocation" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" +"Raison de la révocation du certificat (1-10). Utilisez « ipa help cert » " +"pour plus d'informations sur les raisons de révocation." + +#, python-format +msgid "Owner %s" +msgstr "%s propriétaire" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" +"Certificat de l'AC « %(ca)s » avec le numéro de série %(serial)s introuvable" + +msgid "7 is not a valid revocation reason" +msgstr "7 n'est pas une raison de révocation valide" + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"name\")" +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« name »)" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "%(count)d certificat correspondant" +msgstr[1] "%(count)d certificats correspondants" + +#, fuzzy, python-format +#| msgid "Search for netgroups with these member hosts." +msgid "Search for certificates with these owner %s." +msgstr "Rechercher des groupes réseaux dont les membres sont ces hôtes." + +#, fuzzy, python-format +#| msgid "Search for netgroups without these member hosts." +msgid "Search for certificates without these owner %s." +msgstr "Rechercher des groupes réseaux dont les membres ne sont pas ces hôtes." + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" +"\n" +"Commandes sudo\n" +"\n" +"Commandes utilisées en tant que briques de base pour sudo\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter une nouvelle commande\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Supprimer une commande\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "commande sudo" + +msgid "sudo commands" +msgstr "commandes sudo" + +msgid "Sudo Commands" +msgstr "Commandes sudo" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Commande sudo « %(value)s » ajoutée" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Commande sudo « %(value)s » supprimée" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Commande sudo « %(value)s » modifiée" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "%(count)d commande sudo correspondant" +msgstr[1] "%(count)d commandes sudo correspondant" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" +"\n" +"Règles sudo\n" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" +"\n" +"Sudo (su « do ») autorise un administrateur système à déléguer la " +"possibilité\n" +" à certains utilisateurs (ou groupes d'utilisateurs) d'exécuter certaines\n" +" (ou toutes) commandes en tant qu'administrateur ou autre utilisateur, tout\n" +" en donnant des moyens de contrôle des commandes et de leurs arguments.\n" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" +"\n" +"IPA offre les moyens de configurer les divers aspects de sudo :\n" +" Users : utilisateur/groupe autorisés à invoquer sudo.\n" +" Hosts : hôte/groupe d'hôte dont l'utilisateur peut invoquer sudo.\n" +" Allow Command : commande donnée pouvant être exécutée via sudo.\n" +" Deny Command : commande donnée interdite d'exécution avec sudo.\n" +" RunAsUser : utilisateur ou groupe dont les droits sudo pourront être " +"invoqués.\n" +" RunAsGroup : groupe dont les droits sudo associés au GID pourront être " +"invoqués.\n" +" Options : les diverses options de sudoers pouvant modifier le " +"comportement de sudo.\n" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" +"\n" +"Il est possible d'ajouter aux règles sudo l'indication de l'ordre dans\n" +"lequel elles doivent être examinées (si le client le prend en charge).\n" +"Cet ordre est défini par un entier, qui doit être unique.\n" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" +"\n" +"IPA permet la désignation d'un « binddn » à utiliser avec sudo situé à :\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" +"\n" +"Pour activer « binddn », exécuter la commande pour fixer le mot de passe :\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" +"\n" +" Création d'une nouvelle règle :\n" +" ipa sudorule-add readfiles\n" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" +"\n" +" Ajout d'un objet de commande sudo et ajout en tant que commande autorisée " +"dans la règle :\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" +"\n" +" Ajout d'un hôte à la règle :\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" +"\n" +" Ajout d'un utilisateur à la règle :\n" +" ipa sudorule-add-user readfiles --users jsmith\n" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" +"\n" +" Ajout d'une règle sudo spéciale pour la configuration du serveur sudo par " +"défaut :\n" +" ipa sudorule-add defaults\n" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" +"\n" +" Définition d'une option par défaut pour sudo :\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "cette option a été abandonnée." + +msgid "sudo rules" +msgstr "règles sudo" + +msgid "Sudo Rules" +msgstr "Règles sudo" + +msgid "Sudo Rule" +msgstr "Règle sudo" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" +"le rang doit être une valeur unique (%(order)d déjà utilisée par %(rule)s)" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Règle sudo « %(value)s » ajoutée" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Règle sudo « %(value)s » supprimée" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Règle sudo « %(value)s » modifiée" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" +"la catégorie %(type)s ne peut pas être définie à « all » tant que sont " +"alloués %(objects)s" + +msgid "users" +msgstr "utilisateurs" + +msgid "command" +msgstr "commande" + +msgid "commands" +msgstr "commandes" + +msgid "runAs user" +msgstr "utilisateur runAs" + +msgid "runAs users" +msgstr "utilisateurs runAs" + +msgid "group runAs" +msgstr "groupe runAs" + +msgid "runAs groups" +msgstr "groupes runAs" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "%(count)d règle sudo correspondant" +msgstr[1] "%(count)d règles sudo correspondant" + +msgid "commands cannot be added when command category='all'" +msgstr "" +"des commandes ne peuvent pas être ajoutées quand la catégorie de commande " +"est « all »" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" +"des utilisateurs ne peuvent pas être ajoutés quand la catégorie « RunAs " +"User » ou « RunAs Group » est « all »" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "« RunAsUser » n'accepte pas « %(name)s » comme nom d'utilisateur" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "« RunAsUser » n'accepte pas « %(name)s » comme nom de groupe" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "« RunAsGroup » n'accepte pas « %(name)s » comme nom de groupe" + +msgid "operation not defined" +msgstr "opération non définie" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "non autorisé à effectuer l'opération : %s" + +msgid "No such virtual command" +msgstr "Commande virtuelle inconnue" + +msgid "commands for controlling sudo configuration" +msgstr "commandes pour contrôler la configuration sudo" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" +"\n" +"Groupes de commandes sudo\n" +"\n" +"Administre les groupes de commandes sudo.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau groupe de commandes sudo :\n" +" ipa sudocmdgroup-add --desc='commandes administrateurs' admincmds\n" +"\n" +" Supprimer un groupe de commandes sudo :\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Gérer les commandes, l'appartenance d'un groupe de commandes sudo :\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Administrer les commandes, l'appartenance d'un groupe de commandes sudo :\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Afficher un groupe de commandes sudo :\n" +" ipa sudocmdgroup-show admincmds\n" + +msgid "sudo command group" +msgstr "groupe de commandes sudo" + +msgid "sudo command groups" +msgstr "groupes de commandes sudo" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Groupe de commandes sudo « %(value)s » ajouté" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Groupe de commandes sudo « %(value)s » supprimé" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Groupe de commandes sudo « %(value)s » modifié." + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "%(count)d groupe de commandes Sudo correspondant" +msgstr[1] "%(count)d groupes de commandes Sudo correspondant" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Cross-realm trusts\n" +#| "\n" +#| "Manage trust relationship between IPA and Active Directory domains.\n" +#| "\n" +#| "In order to allow users from a remote domain to access resources in IPA\n" +#| "domain, trust relationship needs to be established. Currently IPA " +#| "supports\n" +#| "only trusts between IPA and Active Directory domains under control of " +#| "Windows\n" +#| "Server 2008 or later, with functional level 2008 or later.\n" +#| "\n" +#| "Please note that DNS on both IPA and Active Directory domain sides should " +#| "be\n" +#| "configured properly to discover each other. Trust relationship relies on\n" +#| "ability to discover special resources in the other domain via DNS " +#| "records.\n" +#| "\n" +#| "Examples:\n" +#| "\n" +#| "1. Establish cross-realm trust with Active Directory using AD " +#| "administrator\n" +#| " credentials:\n" +#| "\n" +#| " ipa trust-add --type=ad --admin " +#| "--password\n" +#| "\n" +#| "2. List all existing trust relationships:\n" +#| "\n" +#| " ipa trust-find\n" +#| "\n" +#| "3. Show details of the specific trust relationship:\n" +#| "\n" +#| " ipa trust-show \n" +#| "\n" +#| "4. Delete existing trust relationship:\n" +#| "\n" +#| " ipa trust-del \n" +#| "\n" +#| "Once trust relationship is established, remote users will need to be " +#| "mapped\n" +#| "to local POSIX groups in order to actually use IPA resources. The mapping " +#| "should\n" +#| "be done via use of external membership of non-POSIX group and then this " +#| "group\n" +#| "should be included into one of local POSIX groups.\n" +#| "\n" +#| "Example:\n" +#| "\n" +#| "1. Create group for the trusted domain admins' mapping and their local " +#| "POSIX group:\n" +#| "\n" +#| " ipa group-add --desc=' admins external map' " +#| "ad_admins_external --external\n" +#| " ipa group-add --desc=' admins' ad_admins\n" +#| "\n" +#| "2. Add security identifier of Domain Admins of the to the " +#| "ad_admins_external\n" +#| " group:\n" +#| "\n" +#| " ipa group-add-member ad_admins_external --external 'AD\\Domain " +#| "Admins'\n" +#| "\n" +#| "3. Allow members of ad_admins_external group to be associated with " +#| "ad_admins POSIX group:\n" +#| "\n" +#| " ipa group-add-member ad_admins --groups ad_admins_external\n" +#| "\n" +#| "4. List members of external members of ad_admins_external group to see " +#| "their SIDs:\n" +#| "\n" +#| " ipa group-show ad_admins_external\n" +#| "\n" +#| "\n" +#| "GLOBAL TRUST CONFIGURATION\n" +#| "\n" +#| "When IPA AD trust subpackage is installed and ipa-adtrust-install is " +#| "run,\n" +#| "a local domain configuration (SID, GUID, NetBIOS name) is generated. " +#| "These\n" +#| "identifiers are then used when communicating with a trusted domain of " +#| "the\n" +#| "particular type.\n" +#| "\n" +#| "1. Show global trust configuration for Active Directory type of trusts:\n" +#| "\n" +#| " ipa trustconfig-show --type ad\n" +#| "\n" +#| "2. Modify global configuration for all trusts of Active Directory type " +#| "and set\n" +#| " a different fallback primary group (fallback primary group GID is used " +#| "as\n" +#| " a primary user GID if user authenticating to IPA domain does not have " +#| "any other\n" +#| " primary GID already set):\n" +#| "\n" +#| " ipa trustconfig-mod --type ad --fallback-primary-group \"alternative " +#| "AD group\"\n" +#| "\n" +#| "3. Change primary fallback group back to default hidden group (any group " +#| "with\n" +#| " posixGroup object class is allowed):\n" +#| "\n" +#| " ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " +#| "Group\"\n" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" +"\n" +"Relations d'approbation entre domaines\n" +"\n" +"Gestion des relations d'approbation entre les domaines IPA et Active " +"Directory.\n" +"\n" +"Pour permettre aux utilisateurs d'un domaine distant l'accès aux ressources\n" +"d'un domaine IPA, des relations d'approbation doivent être établies.\n" +"Actuellement IPA ne prend en charge que les relations d'approbation entre " +"des\n" +"domaines IPA et Active Directory sous le contrôle de Windows Server 2008 ou\n" +"ultérieur, avec le niveau fonctionnel 2008 ou ultérieur.\n" +"\n" +"Veuillez noter que DNS doit être correctement configuré à la fois côté\n" +"domaine IPA et côté Active Directory pour une découverte mutuelle. La\n" +"relation de confiance repose sur la capacité à repérer des ressources\n" +"spéciales dans l'autre domaine via des enregistrements DNS.\n" +"\n" +"Exemples :\n" +"\n" +"1. Établir des relations d'approbation croisées entre royaumes avec Active\n" +"Directory avec les autorisations d'accès d'un administrateur AD :\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. Lister toutes les relations d'approbation existantes :\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Voir les détails d'une relation de confiance donnée :\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Supprimer une relation de confiance existante :\n" +"\n" +" ipa trust-del \n" +"\n" +"Une fois la relation de confiance établie, les utilisateurs distants " +"doivent\n" +"être mis en relation avec des groupes POSIX locaux pour utiliser réellement\n" +"des ressources IPA. La relation doit se faire via l'appartenance à un " +"groupe\n" +"non-POSIX externe, puis ce groupe doit être intégré dans l'un des groupes\n" +"POSIX locaux.\n" +"\n" +"Exemples :\n" +"\n" +"1. Créer un groupe pour la mise en relation avec le domaine approuvé\n" +" « admins » et leur groupe POSIX local :\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Ajouter un identifiant de sécurité de de Domain Admins au\n" +" groupe « ad_admins_external » :\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Autoriser des membres du groupe « ad_admins_external » à s'associer\n" +" avec le groupe POSIX ad_admins :\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Lister les membres externes du groupe externe « ad_admins_external »\n" +" pour voir leur SID :\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"CONFIGURATION D'UNE CONFIANCE GLOBALE\n" +"\n" +"Une fois le sous-paquet « IPA AD trust » installé et « ipa-adtrust-" +"install »\n" +"exécuté, une configuration de domaine local (SID, GUID, nom NetBIOS) est\n" +"créée. Ces identifiants sont alors utilisés lors de communications avec un\n" +"domaine approuvé de type particulier.\n" +"\n" +"1. Afficher la configuration de confiance globale pour les types de\n" +" confiance Active Directory :\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modifier la configuration globale de toutes les confiances de type\n" +" Active Directory et définir un groupe principal de recours (le GID du\n" +" groupe principal de recours est utilisé comme GID d'utilisateur " +"principal\n" +" si l'utilisateur s'authentifiant auprès du domaine IPA n'a pas d'autre\n" +" GID principal déjà défini) :\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Revenir au groupe caché par défaut comme groupe de recours principal\n" +" (tout groupe de la classe objet « posixGroup » est autorisé) :\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" +" De manière alternative, les serveurs suivants sont capables d'exécuter " +"cette commande : %(masters)s" + +msgid "AD Trust setup" +msgstr "Configuration de la confiance AD" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" +"Impossible d'effectuer la commande sélectionnée sans installation de " +"Samba 4. Assurez-vous de bien avoir installé sur le serveur le paquet IPA " +"« server-trust-ad »." + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" +"Impossible d'effectuer la commande sélectionnée sans configuration de Samba " +"4. Assurez-vous de bien avoir configuré ce serveur avec la commande « ipa-" +"adtrust-install »." + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Impossible d'effectuer une recherche sur les domaines approuvés sans avoir " +"au préalable configuré son propre domaine. Assurez-vous d'avoir au préalable " +"lancé « ipa-adtrust-install » sur le serveur" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" +"Échec de la récupération des domaines depuis la forêt approuvée. Voir les " +"informations détaillées dans le journal d'erreur." + +msgid "trust" +msgstr "confiance" + +msgid "trusts" +msgstr "confiances" + +msgid "Trusts" +msgstr "Confiances" + +msgid "Trust" +msgstr "Confiance" + +#, fuzzy +#| msgid "SID blacklist incoming" +msgid "SID blocklist incoming" +msgstr "Entrant dans liste noire de SID" + +#, fuzzy +#| msgid "SID blacklist outgoing" +msgid "SID blocklist outgoing" +msgstr "Sortant de liste noire de SID" + +msgid "Trust direction" +msgstr "Sens de la confiance" + +msgid "Trust type" +msgstr "Type de confiance" + +msgid "Trust status" +msgstr "État de la confiance" + +msgid "UPN suffixes" +msgstr "Suffixes UPN" + +#, fuzzy, python-brace-format +#| msgid "invalid Profile ID" +msgid "invalid SID: {SID}" +msgstr "Identifiant de profil invalide" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Add new trust to use.\n" +#| "\n" +#| "This command establishes trust relationship to another domain\n" +#| "which becomes 'trusted'. As result, users of the trusted domain\n" +#| "may access resources of this domain.\n" +#| "\n" +#| "Only trusts to Active Directory domains are supported right now.\n" +#| "\n" +#| "The command can be safely run multiple times against the same domain,\n" +#| "this will cause change to trust relationship credentials on both\n" +#| "sides.\n" +#| " " +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" +"\n" +"Ajout d'une nouvelle relation de confiance.\n" +"\n" +"Cette commande établit une relation de confiance avec un autre domaine\n" +"qui ainsi devient « de confiance ». En conséquence, des utilisateurs du\n" +"domaine approuvé peuvent avoir accès aux ressources de ce domaine.\n" +"\n" +"Actuellement, seules les relations d'approbation avec les domaines\n" +"Active Directory sont prises en charge.\n" +"\n" +"Cette commande peut être lancée plusieurs fois en toute sécurité à\n" +"l'encontre du même domaine, elle modifiera les références de la relation de\n" +"confiance des deux côtés.\n" +" " + +msgid "Active Directory domain range" +msgstr "Plage pour les domaines Active Directory" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" +"Plage pour les relations d'approbation Active Directory avec attributs POSIX" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "Relation d'approbation externe" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" +"Établit une relation d'approbation externe vers un domaine dans une autre " +"forêt. La relation n'est pas transitive au delà du domaine." + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "Confiance Active Directory ajoutée pour le royaume « %(value)s »" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Rétablissement de la confiance pour le domaine « %(value)s »" + +msgid "missing base_id" +msgstr "« base_id » manquant" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" +"« pysss_murmur » non disponible sur le serveur et aucun « base-id » fourni." + +msgid "trust type" +msgstr "type de confiance" + +msgid "only \"ad\" is supported" +msgstr "seul « ad » est pris en charge" + +msgid "domain" +msgstr "domaine" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" +"Impossible d'établir une relation d'approbation vers un AD déployé dans le " +"même domaine que IPA. Une telle configuration ne peut être prise en charge." + +msgid "Realm-domain mismatch" +msgstr "Incohérence domaine-royaume" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" +"Pour établir la confiance avec Active Directory, le nom de domaine et le nom " +"de royaume du serveur IPA doivent correspondre" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" +"Le domaine approuvé %(domain)s est inclus parmi les royaumes de domaines " +"IPA. Il doit être retiré de manière préalable à l'établissement de la " +"relation d'approbation. Cf. la commande « ipa realmdomains-mod --del-" +"domain »." + +msgid "Trusted domain and administrator account use different realms" +msgstr "" +"Le domaine approuvé et le compte administrateur utilisent des domaines " +"différents" + +msgid "Realm administrator password should be specified" +msgstr "Le mot de passe de l'administrateur du domaine doit être indiqué" + +msgid "id range type" +msgstr "type de plage d'id" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" +"Seules les valeurs « ipa-ad-trust » et « ipa-ad-trust-posix » sont " +"autorisées pour « --range-type » lors de l'ajout d'une relation de confiance " +"AD." + +msgid "id range" +msgstr "plage id" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" +"Une plage d'identifiants existe déjà pour cette relation de confiance. Vous " +"devez soit supprimer l'ancienne plage, soit exclure les options « --base-" +"id » ou « --range-size » de la commande." + +msgid "range exists" +msgstr "la plage existe" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" +"Une plage d'ID avec le même nom, mais pour un SID de domaine différent " +"existe déjà. La plage d'ID pour le nouveau domaine approuvé doit être créée " +"manuellement." + +msgid "range type change" +msgstr "modifier le type de plage" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" +"La plage ID existe déjà pour ce domaine approuvé, mais est d'un type " +"différent. Vous devez soit supprimer l'ancienne plage manuellement, soit ne " +"pas forcer le type via l'option « --range-type »." + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" +"La politique de redirection est définie pour lui dans le DNS d'IPA, peut-" +"être le redirecteur pointe-t'il vers un hôte incorrect ?" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "Impossible de vérifier les permissions en écriture vers AD" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "Arguments insuffisants pour établir la relation de confiance" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "Confiance « %(value)s » supprimée" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" +"\n" +" Modifier la confiance (pour utilisation future).\n" +"\n" +" Actuellement seule l'option par défaut pour modifier les attributs LDAP\n" +" est disponible. D'autres options particulières seront ajoutées\n" +" dans les versions à venir.\n" +" " + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" +"Relation de confiance « %(value)s » modifiée (la modification sera effective " +"dans 60 secondes)" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d confiance correspondante" +msgstr[1] "%(count)d confiances correspondantes" + +msgid "trust configuration" +msgstr "configuration des relations d'approbation" + +msgid "Global Trust Configuration" +msgstr "Configuration globale des relations d'approbation" + +msgid "IPA AD trust agents" +msgstr "Agents IPA de relation d'approbation AD" + +msgid "IPA servers configured as AD trust agents" +msgstr "Serveurs IPA configurés comme agents de relation d'approbation AD" + +msgid "IPA AD trust controllers" +msgstr "Contrôleurs IPA de relation d'approbation AD" + +msgid "IPA servers configured as AD trust controllers" +msgstr "Serveurs IPA configurés comme contrôleurs de relation d'approbation AD" + +msgid "unsupported trust type" +msgstr "type de relation de confiance non pris en charge" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "Configuration de la relation de confiance « %(value)s » modifiée." + +msgid "Name" +msgstr "Nom" + +msgid "SID" +msgstr "SID" + +msgid "sidgen_was_run" +msgstr "« sidgen_was_run »" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" +"Cette commande s'appuie sur l'existence du groupe « editors », mais ce " +"groupe n'a pas été trouvé." + +msgid "trust domain" +msgstr "domaine approuvé" + +msgid "trust domains" +msgstr "domaines approuvés" + +msgid "Trusted domains" +msgstr "domaines approuvés" + +msgid "Trusted domain" +msgstr "domaine approuvé" + +msgid "Domain enabled" +msgstr "Domaine activé" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "Informations sur le domaine approuvé « %(value)s » supprimées" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"impossible de supprimer le domaine racine de la relation de confiance, " +"utiliser la commande « trust-del » pour supprimer la relation de confiance" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" +"Liste des domaines approuvés rafraîchie avec succès. Utiliser la commande " +"« trustdomain-find » pour les énumérer." + +#, fuzzy +#| msgid "IPA servers configured as AD trust agents" +msgid "Configure this server as a trust agent." +msgstr "Serveurs IPA configurés comme agents de relation d'approbation AD" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "doit être « %s »" + +#, fuzzy +#| msgid "not allowed to modify user entries" +msgid "not allowed to remotely add agent" +msgstr "modification des entrées d'un utilisateur interdite" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Activation du domaine approuvé « %(value)s »" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" +"Le domaine racine de la relation de confiance est toujours activé pour la " +"confiance existante" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "domaine approuvé « %(value)s » désactivé" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"impossible de désactiver le domaine racine de la relation de confiance, " +"utiliser la commande « trust-del » pour supprimer la relation de confiance " +"elle-même" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +#, fuzzy +#| msgid "User object class" +msgid "Object class name" +msgstr "Classe d'objets utilisateur" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" +"\n" +"Rôles serveurs IPA\n" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" +"\n" +"Obtenir l'état des rôles (serveur DNS, AC, etc. )fournis par les maîtres " +"IPA.\n" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" +"\n" +" Afficher l'état du rôle « Serveur DNS » d'un serveur :\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Show status of all configured roles on a server:\n" +#| " ipa server-role-find ipa.example.com\n" +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" +"\n" +" Afficher l'état de tous les rôles configurés sur un serveur :\n" +" ipa server-role-find ipa.example.com\n" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" +"\n" +" Afficher l'état de tous les rôles configurés sur un serveur :\n" +" ipa server-role-find ipa.example.com\n" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "rôle serveur" + +msgid "server roles" +msgstr "rôles serveur" + +msgid "IPA Server Roles" +msgstr "Rôles serveur IPA" + +msgid "IPA Server Role" +msgstr "Rôle serveur IPA" + +msgid "IPA server role name" +msgstr "Nom du rôle serveur IPA" + +msgid "Role status" +msgstr "État du rôle" + +msgid "Status of the role" +msgstr "État du rôle" + +msgid "Show role status on a server" +msgstr "Afficher l'état du rôle sur un serveur" + +msgid "Find a server role on a server(s)" +msgstr "Trouver les rôles serveur de serveurs" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "%(count)s rôle serveur correspondant" +msgstr[1] "%(count)s rôles serveur correspondants" + +#, fuzzy +#| msgid "Included attributes" +msgid "Include IPA master entries" +msgstr "Attributs inclus" + +msgid "roles" +msgstr "rôles" + +msgid "IPA role name" +msgstr "Nom du rôle IPA" + +msgid "" +"\n" +"Vaults\n" +msgstr "" +"\n" +"Coffres-forts (vaults)\n" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" +"\n" +"Gestion des coffres-forts.\n" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" +"\n" +"Il existe trois types de coffres-forts en fonction de leur propriété :\n" +"* coffre utilisateur/privé\n" +"* coffre de service\n" +"* coffre-fort partagé (shared)\n" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" +"\n" +"Les coffres-forts utilisateurs sont des coffres appartenant à un " +"utilisateur\n" +"en particulier. Les coffres privés appartiennent à l'utilisateur courant. " +"Les\n" +"coffres de services appartiennent à un service. Les coffres partagés \n" +"appartiennent à l'administrateur, mais peuvent être utilisés par d'autres\n" +"utilisateurs ou services.\n" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" +"\n" +"Il existe trois types de coffres-forts en fonction de leur mécanisme\n" +"de sécurité :\n" +"* coffre-fort standard\n" +"* coffre-fort symétrique\n" +"* coffre-fort asymétrique\n" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" +"\n" +"Le coffre-fort standard utilise un mécanisme sécurisé pour le\n" +"transport et le stockage du secret. Le secret ne peut être récupéré\n" +"que par les utilisateurs ayant accès au coffre.\n" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" +"\n" +"Le coffre-fort symétrique est similaire au coffre standard, mais il \n" +"pré-chiffre le secret à l'aide d'un mot de passe avant son transport.\n" +"Le secret ne peut être récupéré qu'à l'aide du même mot de passe.\n" +"\n" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" +"\n" +"Le coffre-fort asymétrique est similaire au coffre standard, mais il \n" +"pré-chiffre le secret à l'aide d'une clé publique avant son transport.\n" +"Le secret ne peut être récupéré qu'avec la clé privée correspondante.\n" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Énumérer les coffres-forts pour un service :\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" +"\n" +" Ajouter un coffre-fort standard :\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" +"\n" +" Ajouter un coffre-fort symétrique :\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file mot_de_passe.txt\n" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" +"\n" +" Ajouter un coffre-fort symétrique :\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --public-key-file public.pem\n" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Afficher un coffre-fort :\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" +"\n" +" Modifier la description d'un coffre-fort :\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" +"\n" +" Modifier le type d'un coffre-fort :\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [ancient mot de passe/clé privée]\n" +" [nouveau mot de passe/clé publique]\n" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" +"\n" +" Modifier un coffre-fort symétrique :\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" +"\n" +" Modifier les clés d'un coffre-fort asymétrique :\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Supprimer un coffre-fort :\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" +"\n" +" Afficher la configuration des coffres-forts :\n" +" ipa vaultconfig-show\n" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Archiver des données dans un coffre-fort standard :\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Archiver des données dans un coffre-fort symétrique :\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file mot_de_passe.txt\n" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Archiver des données dans un coffre-fort asymétrique :\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" +"\n" +" Récupérer des données d'un coffre-fort standard :\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Récupérer des données d'un coffre-fort symétrique :\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file mot_de_passe.txt\n" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" +"\n" +" Récupérer des données d'un coffre-fort asymétrique :\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file clé_privée.pem\n" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Ajouter des propriétaires à un coffre-fort :\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services " +"]\n" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Supprimer des propriétaires d'un coffre-fort :\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services " +"]\n" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Ajouter des membres à un coffre-fort :\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services " +"]\n" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Supprimer des membres d'un coffre-fort :\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services " +"]\n" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" +"\n" +" Objet conteneur de coffre-fort.\n" +" " + +msgid "vaultcontainer" +msgstr "vaultcontainer" + +msgid "vaultcontainers" +msgstr "vaultcontainers" + +msgid "Vault Containers" +msgstr "Conteneurs de coffres-forts" + +msgid "Vault Container" +msgstr "Conteneur de coffres-forts" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" +"Les options de service, d'utilisateur ou de coffre-fort partagé ne peuvent " +"être utilisées simultanément" + +msgid "Host is not supported" +msgstr "L'hôte n'est pas pris en charge" + +msgid "KRA service is not enabled" +msgstr "Le service KRA est désactivé" + +msgid "Deleted vault container" +msgstr "Conteneur de coffre-fort supprimé" + +#, python-format +msgid "owner %s" +msgstr "propriétaire %s" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" +"\n" +" Objet coffre-fort.\n" +" " + +msgid "vault" +msgstr "coffre-fort" + +msgid "vaults" +msgstr "coffres-forts" + +msgid "Vaults" +msgstr "Coffres-forts" + +msgid "Vault" +msgstr "Coffre-fort" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" +"Les options de service, de partage et d'utilisateur ne peuvent être " +"utilisées simultanément." + +#, fuzzy +#| msgid "Modify a vault." +msgid "Add a vault." +msgstr "Modifier un coffre-fort." + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "Ajout de « %(value)s » au coffre" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "Valeur « %(value)s » supprimée du coffre" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "%(count)d coffre-fort correspondant" +msgstr[1] "%(count)d coffre-forts correspondants" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" +"Les options de service(s), d'utilisateur(s) ou de coffres-forts partagé(s) " +"ne peuvent être utilisées simultanément" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "Coffre-fort « %(value)s » modifié" + +msgid "Vault configuration" +msgstr "Configuration du coffre-fort" + +msgid "IPA KRA servers" +msgstr "Serveurs KRA IPA" + +msgid "IPA servers configured as key recovery agents" +msgstr "Serveurs IPA configurés comme agents de recouvrement de clés" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "Données archivées dans le coffre-fort « %(value)s »" + +#, fuzzy +#| msgid "Retrieve a data from a vault." +msgid "Retrieve data from a vault." +msgstr "Récupérer une donnée depuis un coffre-fort" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Donnée récupérée depuis le coffre-fort « %(value)s »" + +msgid "No archived data." +msgstr "Aucune donnée archivée." + +#, fuzzy +#| msgid "Checks if any of the servers has the CA service enabled." +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" +"Vérifier si l'un des serveurs a activé le service autorité de certification." + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" +"\n" +"Gestion des profils de certificats\n" +"\n" +"Les profils de certificats sont utilisés par l'autorité de certification " +"(AC) dans\n" +"la signature de certificats afin de déterminer si une demande de signature " +"de\n" +"certificat (Certificate Signing Request, CSR) est acceptable, et si oui, " +"quelles\n" +"fonctionnalités et extensions doivent figurer dans le certificat.\n" +"\n" +"Le format du profil de certificat est un format de liste de propriétés qui " +"sera\n" +"compris par une autorité de certification Dogtag ou Red Hat Certificate " +"System.\n" +"\n" +"SYNTAXE DE L'IDENTIFIANT DE PROFIL :\n" +"\n" +"Un identifiant de profil est une chaîne de caractères sans espaces ni " +"caractère de\n" +"ponctuation débutant par une lettre suivie d'une séquence de lettres, de " +"chiffres et\n" +"de caractère souligné (« _ »).\n" +"\n" +"EXEMPLES :\n" +"\n" +" Importer un profil qui ne stockera pas les certificats émis :\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --summary \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Supprimer un profil de certificat :\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Afficher les informations sur un profil :\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Enregistrer la configuration du profil dans un fichier :\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Rechercher des profils ne stockant pas les certificats :\n" +" ipa certprofile-find --store=false\n" +"\n" +"FORMAT DE LA CONFIGURATION DE PROFIL :\n" +"\n" +"Le format de configuration de profil est un format brut de liste de \n" +"propriété utilisé par Dogtag Certificate System. Le format XML n'est\n" +"pas pris en charge.\n" +"\n" +"Les restrictions suivantes s'appliquent aux profils gérés par IPA :\n" +"\n" +"- Lors de l'import d'un profil, le champ « profileId » s'il est présent " +"doit\n" +" correspondre à l'identifiant donné sur la ligne de commande.\n" +"\n" +"- Le champ « classId » doit être « caEnrollImpl »\n" +"\n" +"- Le champ « auth.instance_id  doit être « raCertAuth »\n" +"\n" +"- Les classe d'entrée « certReqInputImpl » et de sortie « certOutputImpl » " +"doivent \n" +" être utilisées.\n" + +msgid "invalid Profile ID" +msgstr "Identifiant de profil invalide" + +msgid "Certificate Profile" +msgstr "Profil de certificat" + +msgid "Certificate Profiles" +msgstr "Profils de certificats" + +msgid "Profile configuration" +msgstr "Configuration de profil" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d profil correspondant" +msgstr[1] "%(count)d profils correspondants" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "Profil « %(value)s » importé" + +#, fuzzy, python-format +#| msgid "Input data specified multiple times" +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "Les données en entrée ont été indiquées plusieurs fois" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" +"L'identifiant de profil « %(cli_value)s » ne correspond pas aux données du " +"profil « %(file_value)s »" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "Profil « %(value)s » supprimé" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "Le profil prédéfini « %(profile_id)s » ne peut être supprimé" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Profil de certificat « %(value)s » modifié" + +msgid "Certificate profiles cannot be renamed" +msgstr "Les profils de certificats ne peuvent être renommés" + +#, fuzzy +#| msgid "" +#| "Insufficient privilege to create a certificate with subject alt name '%s'." +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" +"Privilège insuffisant pour créer un certificat avec le nom de sujet « %s » " +"alternatif." + +#, fuzzy +#| msgid "" +#| "\n" +#| "Groups of hosts.\n" +#| "\n" +#| "Manage groups of hosts. This is useful for applying access control to a\n" +#| "number of hosts by using Host-based Access Control.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new host group:\n" +#| " ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +#| "\n" +#| " Add another new host group:\n" +#| " ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +#| "\n" +#| " Add members to the hostgroup (using Bash brace expansion):\n" +#| " ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +#| "\n" +#| " Add a hostgroup as a member of another hostgroup:\n" +#| " ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +#| "\n" +#| " Remove a host from the hostgroup:\n" +#| " ipa hostgroup-remove-member --hosts=box2 baltimore\n" +#| "\n" +#| " Display a host group:\n" +#| " ipa hostgroup-show baltimore\n" +#| "\n" +#| " Delete a hostgroup:\n" +#| " ipa hostgroup-del baltimore\n" +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" +"\n" +"Groupes d'hôtes.\n" +"\n" +"Gestion des groupes d'hôtes. Permet d'appliquer des contrôles d'accès\n" +"à plusieurs hôtes en utilisant HBAC (Host-based Access Control).\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau groupe d'hôtes :\n" +" ipa hostgroup-add --desc=\"Systèmes de Baltimore\" baltimore\n" +"\n" +" Ajouter un nouveau groupe d'hôtes :\n" +" ipa hostgroup-add --desc=\"Systèmes du Maryland\" maryland\n" +"\n" +" Ajouter des membres à un groupe d'hôtes :\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Ajouter un groupe d'hôtes en tant que membre d'un autre groupe d'hôtes :\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Supprimer un hôte d'un groupe :\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Afficher un groupe d'hôtes :\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Supprimer un groupe d'hôtes :\n" +" ipa hostgroup-del baltimore\n" + +msgid "host groups" +msgstr "groupes d'hôtes" + +msgid "Host Group" +msgstr "Groupe d'hôtes" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Groupe d'hôtes « %(value)s » ajouté" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"Un groupe réseau nommé « %s » existe déjà. Les groupes d'hôtes et les " +"groupes réseau partagent un même espace de noms." + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Groupe d'hôtes « %(value)s » supprimé" + +msgid "hostgroup" +msgstr "groupe d'hôtes" + +msgid "privileged hostgroup" +msgstr "groupe d'hôtes privilégiés" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Groupe d'hôtes « %(value)s » modifié" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "%(count)d groupe d'hôtes correspondant" +msgstr[1] "%(count)d groupes d'hôtes correspondant" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this hostgroup." +msgstr "Ajouter des utilisateurs pouvant gérer ce jeton." + +#, fuzzy +#| msgid "Remove users that can manage this token." +msgid "Remove users that can manage members of this hostgroup." +msgstr "Supprimer des utilisateurs pouvant gérer ce jeton." + +msgid "kerberos ticket policy settings" +msgstr "réglages de la politique de tickets Kerberos" + +msgid "Kerberos Ticket Policy" +msgstr "Politique de tickets Kerberos" + +#, fuzzy +#| msgid "Max life" +msgid "OTP max life" +msgstr "Vie max." + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "OTP token maximum ticket life (seconds)" +msgstr "Durée de vie maximale (secondes)" + +#, fuzzy +#| msgid "Max renew" +msgid "OTP max renew" +msgstr "Renouvellement max." + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "Durée maximale de la période de renouvellement (secondes)" + +#, fuzzy +#| msgid "Max life" +msgid "RADIUS max life" +msgstr "Vie max." + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "RADIUS maximum ticket life (seconds)" +msgstr "Durée de vie maximale (secondes)" + +#, fuzzy +#| msgid "RADIUS proxy server name" +msgid "RADIUS max renew" +msgstr "Nom du serveur mandataire RADIUS" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "Durée maximale de la période de renouvellement (secondes)" + +#, fuzzy +#| msgid "Max life" +msgid "PKINIT max life" +msgstr "Vie max." + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "PKINIT maximum ticket life (seconds)" +msgstr "Durée de vie maximale (secondes)" + +#, fuzzy +#| msgid "Max renew" +msgid "PKINIT max renew" +msgstr "Renouvellement max." + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "Durée maximale de la période de renouvellement (secondes)" + +msgid "Hardened max life" +msgstr "" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "Durée de vie maximale (secondes)" + +msgid "Hardened max renew" +msgstr "" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "Durée maximale de la période de renouvellement (secondes)" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "La politique de ticket pour %s ne peut pas être lue" + +msgid "Default ticket policy could not be read" +msgstr "La politique de ticket par défaut ne peut pas être lue" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" +"Impossible de lire « originfilter » de « UPG Definition ». Vérifiez vos " +"permissions." + +msgid "" +"\n" +"IPA locations\n" +msgstr "" +"\n" +"Emplacements IPA\n" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" +"\n" +"Manipulation des emplacements DNS\n" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" +"\n" +" Trouver tous les emplacements :\n" +" ipa location-find\n" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" +"\n" +" Afficher un emplacement spécifique :\n" +" ipa location-show location\n" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" +"\n" +" Ajouter un emplacement :\n" +" ipa location-add location --description 'Mon emplacement'\n" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" +"\n" +" Supprimer un emplacement :\n" +" ipa location-del location\n" + +msgid "location" +msgstr "emplacement" + +msgid "locations" +msgstr "emplacements" + +msgid "IPA Locations" +msgstr "Emplacements IPA" + +msgid "IPA Location" +msgstr "Emplacement IPA" + +msgid "Location name" +msgstr "Nom de l'emplacement" + +msgid "IPA location name" +msgstr "Nom de l'emplacement IPA" + +msgid "IPA Location description" +msgstr "Description de l'emplacement IPA" + +msgid "Servers" +msgstr "Serveurs" + +msgid "Servers that belongs to the IPA location" +msgstr "Serveurs appartenants à l'emplacement IPA" + +msgid "Advertised by servers" +msgstr "Publié par les serveurs" + +msgid "List of servers which advertise the given location" +msgstr "Liste des serveurs qui publient un emplacement donné" + +msgid "Add a new IPA location." +msgstr "Ajouter un nouvel emplacement IPA." + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "Emplacement IPA « %(value)s » ajouté" + +msgid "Delete an IPA location." +msgstr "Supprimer un emplacement IPA." + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Emplacement IPA « %(value)s » supprimé" + +msgid "IPA Server" +msgstr "Serveur IPA" + +msgid "Modify information about an IPA location." +msgstr "Modifier les informations d'un emplacement IPA." + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "Emplacement IPA « %(value)s » modifié" + +msgid "Search for IPA locations." +msgstr "Rechercher des emplacements IPA." + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "%(count)d emplacement IPA correspondant" +msgstr[1] "%(count)d emplacements IPA correspondants" + +msgid "Display information about an IPA location." +msgstr "Afficher les informations d'un emplacement IPA." + +msgid "Servers in location" +msgstr "Serveurs situés à l'emplacement" + +msgid "Role" +msgstr "Rôle" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "Rôle « %(value)s » ajouté" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "Rôle « %(value)s » supprimé" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "Rôle « %(value)s » modifié" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d rôle correspondant" +msgstr[1] "%(count)d rôles correspondant" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Utilisateur « %(value)s » ajouté" + +msgid "Default group for new users is not POSIX" +msgstr "Le groupe par défaut des nouveaux utilisateurs n'est pas POSIX" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Utilisateur « %(value)s » supprimé" + +#, python-format +msgid "%s: user is already preserved" +msgstr "%s : l'utilisateur est déjà préservé" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Utilisateur « %(value)s » modifié" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "Compte utilisateur « %(value)s » restauré" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "l'utilisateur « %s » est déjà actif" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "Compte utilisateur en attente « %(value)s »" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "Compte utilisateur « %(value)s » désactivé" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "Compte utilisateur « %(value)s » activé" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" +"\n" +" Déverrouiller un compte utilisateur\n" +"\n" +" Un compte utilisateur peut se verrouiller si le mot de passe n'est pas\n" +" saisi correctement plusieurs fois de suite dans un laps de temps donné\n" +" défini par la politique du mot de passe. Le verrouillage d'un compte " +"est\n" +" un état temporaire ; il peut être déverrouillé par un administrateur." + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "Compte utilisateur « %(value)s » déverrouillé" + +msgid "Failed logins" +msgstr "Connexions ayant échoué" + +msgid "Last successful authentication" +msgstr "Dernière authentification réussie" + +msgid "Last failed authentication" +msgstr "Dernière authentification ayant échoué" + +msgid "Time now" +msgstr "Heure actuelle" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" +"\n" +" État verrouillé d'un compte utilisateur\n" +"\n" +" Un compte peut être verrouillé si un mot de passe incorrect est entre à\n" +" plusieurs reprises dans un laps de temps donnée selon la politique de\n" +" contrôle des mots de passe. Le verrouillage du compte est un état\n" +" temporaire ; le compte peut être déverrouillé par un administrateur.\n" +"\n" +" Ce dernier se connecte sur l'IPA maître et affiche l'état du\n" +" verrouillage de chacun.\n" +"\n" +" Pour savoir si un compte est verrouillé sur un serveur donné, vous " +"devez\n" +" comparer le nombre d'échecs de connexion et l'heure du dernier échec.\n" +" Pour qu'un compte soit verrouillé, le nombre d'échecs doit dépasser le\n" +" maximum autorisé dans l'intervalle de temps donné tel que défini dans " +"la\n" +" politique de mot de passe propre à l'utilisateur.\n" +"\n" +" Le compteur d'échecs de connexion n'est incrémenté que lorsqu'un\n" +" utilisateur tente une connexion, il est donc possible qu'un compte\n" +" paraisse bloqué mais que la dernière tentative de connexion soit\n" +" antérieure à la durée de verrouillage de la règle. Cela\n" +" signifie que l'utilisateur peut tenter de se connecter à nouveau." + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "%(host)s en échec : %(error)s" + +#, python-format +msgid "%(host)s failed" +msgstr "%(host)s en échec" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "Compte désactivé : %(disabled)s" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Certificats supprimés de l'utilisateur « %(value)s »" + +#, fuzzy +#| msgid "Add new principal alias to host entry" +msgid "Add new principal alias to the user entry" +msgstr "Ajouter un nouvel alias de principal à l'entrée de l'hôte" + +#, fuzzy, python-format +#| msgid "Added new aliases to host \"%(value)s\"" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Alias ajoutés à l'hôte « %(value)s »" + +#, fuzzy +#| msgid "Remove principal alias from a host entry" +msgid "Remove principal alias from the user entry" +msgstr "Supprimer un alias de principal de l'entrée d'un hôte" + +#, fuzzy, python-format +#| msgid "Removed aliases from host \"%(value)s\"" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Alias supprimés pour l'hôte « %(value)s »" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" +"\n" +"Jetons OTP\n" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"Gérer les jetons OTP.\n" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" +"\n" +"IPA prend en charge l'utilisation de jetons OTP pour une authentification\n" +"à facteurs multiples. Ce code active la gestion des jetons OTP.\n" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" +"\n" +" Ajouter un nouveau jeton :\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Examiner un jeton :\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" +"\n" +" Modifier le fournisseur :\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Supprimer un jeton :\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "OTP token" +msgstr "jeton OTP" + +msgid "OTP tokens" +msgstr "jetons OTP" + +msgid "OTP Tokens" +msgstr "Jetons OTP" + +msgid "OTP Token" +msgstr "Jeton OTP" + +msgid "URI" +msgstr "URI" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "Jeton OTP « %(value)s » ajouté" + +msgid "cannot be empty" +msgstr "ne peut pas être vide" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Jeton OTP « %(value)s » supprimé" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Jeton OTP « %(value)s » modifié" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d jeton OTP correspond" +msgstr[1] "%(count)d jetons OTP correspondant" + +msgid "A list of ACI values" +msgstr "Une liste de valeurs d'ACI" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" +"« type », « filter », « subtree » et « targetgroup » s'excluent mutuellement" + +msgid "ACI prefix is required" +msgstr "Un préfixe ACI est requis" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"au moins un parmi « type », « filter », « subtree », « targetgroup », " +"« attrs » ou « memberof » est requis" + +msgid "filter and memberof are mutually exclusive" +msgstr "« filter » et « memberof » s'excluent mutuellement" + +msgid "group, permission and self are mutually exclusive" +msgstr "« group », « permission » et « self » s'excluent mutuellement" + +msgid "One of group, permission or self is required" +msgstr "Un parmi « group », « permission » ou « self » est requis" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "Le groupe « %s » n'existe pas" + +msgid "empty filter" +msgstr "filtre vide" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Erreur de syntaxe : %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "DN invalide (%s)" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "ACI de nom « %s » introuvable" + +#, fuzzy +#| msgid "IPA object" +msgid "ACI object." +msgstr "objet IPA" + +msgid "ACIs" +msgstr "ACI" + +msgid "ACI" +msgstr "ACI" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "ACI « %(value)s » créée" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "ACI « %(value)s » supprimée" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "ACI « %(value)s » modifiée" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d ACI correspondant" +msgstr[1] "%(count)d ACI correspondant" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "ACI renommée en « %(value)s »" msgid "" "\n" @@ -18787,9 +24575,6 @@ msgstr "" msgid "Managedby permission" msgstr "Permission « managedby »" -msgid "DNS is not configured" -msgstr "Le DNS n'est pas configuré" - #, fuzzy #| msgid "hosts cannot be set when type is 'group'" msgid "cannot be used when a zone is specified" @@ -19038,1928 +24823,965 @@ msgstr "Essai à blanc" msgid "Do not update records only return expected records" msgstr "" +#, fuzzy, python-brace-format +#| msgid "" +#| "Domain Level cannot be raised to {0}, server {1} does not support it." msgid "" -"\n" -"DNS server configuration\n" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." msgstr "" -"\n" -"Configuration du serveur DNS\n" +"Le niveau actuel du domaine ne peut être relevé à {0}, le serveur {1} ne le " +"prend pas en charge." + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "Le niveau du domaine ne peut être redescendu." + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" +"Le niveau actuel du domaine ne peut être relevé à {0}, le serveur {1} ne le " +"prend pas en charge." msgid "" "\n" -"Manipulate DNS server configuration\n" +"API Schema\n" msgstr "" "\n" -"Manipulation de la configuration du serveur DNS\n" +"Schéma de l'API\n" msgid "" "\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" +"Provides API introspection capabilities.\n" msgstr "" "\n" -"Afficher la configuration d'un serveur DNS spécifique :\n" -" ipa dnsserver-show\n" +"Fournit des capacités d'introspection de l'API.\n" msgid "" "\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" +" Show user-find details:\n" +" ipa command-show user-find\n" msgstr "" "\n" -" Modifier la configuration d'un serveur DNS spécifique :\n" -" ipa dnsserver-mod\n" +" Afficher les informations sur user-find :\n" +" ipa command-show user-find\n" -msgid "DNS server" -msgstr "Serveur DNS" +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" +"\n" +" Trouver les arguments disponibles pour user-find :\n" +" ipa param-find user-find\n" -msgid "DNS servers" -msgstr "Serveurs DNS" +msgid "Documentation" +msgstr "Documentation" -msgid "DNS Servers" -msgstr "Serveurs DNS" +msgid "Exclude from" +msgstr "Exclure de" -msgid "DNS Server" -msgstr "Serveur DNS" +msgid "Include in" +msgstr "Inclure dans" -msgid "DNS Server name" -msgstr "Nom du serveur DNS" +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« %s »)" + +msgid "Help topic" +msgstr "Sujet de l'aide" + +msgid "Version" +msgstr "Version" + +msgid "Parameters" +msgstr "Paramètres" + +msgid "Method of" +msgstr "" #, fuzzy -#| msgid "Add a new ID override." -msgid "SOA mname override" -msgstr "Ajouter une nouvelle surcharge d'identifiant." +#| msgid "Record name" +msgid "Method name" +msgstr "Nom d'enregistrement" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s : %(oname)s introuvable" + +msgid "Display information about a command." +msgstr "Afficher des informations sur une commande." + +msgid "Search for commands." +msgstr "Rechercher des commandes." #, fuzzy -#| msgid "Authoritative nameserver domain name" -msgid "SOA mname (authoritative server) override" -msgstr "Nom de domaine du serveur de nom faisant autorité" - -msgid "Forwarders" -msgstr "Redirecteurs de zone" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Redirecteurs par serveur. Un port personnalisé peut être indiqué pour chaque " -"redirecteur avec le format standard « adresse_IP port PORT »" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" -"Politique de redirection conditionnelle par serveur. Mettre à « none » pour " -"désactiver la redirection vers un redireteur global pour cette zone. Dans ce " -"cas, les redirecteurs de zone conditionnels sont ignorés." - -msgid "Modify DNS server configuration" -msgstr "Modifier la configuration du serveur DNS" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "Serveur DNS « %(value)s » modifié" - -msgid "Search for DNS servers." -msgstr "Rechercher des serveurs DNS." - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "%(count)d serveur DNS correspondant" -msgstr[1] "%(count)d serveurs DNS correspondants" +#| msgid "Run Commands" +msgid "Return command defaults" +msgstr "Exécute les commandes" #, fuzzy -#| msgid "KRA service is not enabled" -msgid "IPA DNS Server is not installed" -msgstr "Le service KRA est désactivé" - -msgid "Display configuration of a DNS server." -msgstr "Afficher la configuration d'un nouveau serveur DNS." - -msgid "Add a new DNS server." -msgstr "Ajouter un nouveau serveur DNS." - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "Nouveau serveur DNS « %(value)s » ajouté" - -msgid "Delete a DNS server" -msgstr "Supprimer un serveur DNS" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Serveur DNS « %(value)s » supprimé" - -msgid "REST API is not logged in." -msgstr "L'API REST n'est pas connectée." - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" -"Réponse non 2xx reçue de l'API REST de l'AC : %(status)d. %(explanation)s" - -msgid "Unable to communicate with CMS" -msgstr "Impossible de communiquer avec le CMS" - -msgid "Response from CA was not valid JSON" -msgstr "La réponse de l'AC n'est pas dans un format JSON valide" - -msgid "Host-based access control commands" -msgstr "Commandes de contrôle d'accès basé sur l'hôte" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" -"\n" -"Services HBAC\n" -"\n" -"Les services PAM dont le système HBAC peut contrôler l'accès. Le nom " -"utilisé\n" -"ici doit correspondre au nom du service analysé par PAM.\n" -"EXEMPLES:\n" -"\n" -" Ajouter un nouveau service HBAC :\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modifier un service HBAC existant :\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Chercher des services HBAC. Cet exemple renvoie deux résultats, le service\n" -" FTP et le service tftp nouvellement ajouté :\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Supprimer un service HBAC :\n" -" ipa hbacsvc-del tftp\n" -"\n" - -msgid "HBAC services" -msgstr "Services HBAC" - -msgid "HBAC Services" -msgstr "Services HBAC" - -msgid "HBAC Service" -msgstr "Service HBAC" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "Service HBAC « %(value)s » ajouté" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Service HBAC « %(value)s » supprimé" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "Service HBAC « %(value)s » modifié" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "%(count)d service HBAC correspondant" -msgstr[1] "%(count)d services HBAC correspondant" - -msgid "HBAC service group" -msgstr "Groupe de services HBAC" - -msgid "HBAC service groups" -msgstr "Groupes de services HBAC" - -msgid "HBAC Service Groups" -msgstr "Groupes de services HBAC" - -msgid "HBAC Service Group" -msgstr "Groupe de services HBAC" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Groupe de services HBAC « %(value)s » ajouté" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "Groupe de services HBAC « %(value)s » supprimé" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "Groupe de services HBAC « %(value)s » modifié" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "%(count)d groupe de services HBAC correspondant" -msgstr[1] "%(count)d groupes de services HBAC correspondant" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" -"\n" -"Utilisateurs en attente\n" -"\n" -"Gestion des entrées des utilisateurs en attente (« stage users »).\n" -"\n" -"Les entrées des utilisateurs en attente sont situées directement dans le \n" -"conteneur « cn=stage users, cn=accounts, cn=provisioning, SUFFIXE x.\n" -"Les utilisateurs ne peuvent utiliser ces entrées pour s'authentifier (même\n" -"si les entrées contiennent des données d'authentification) et ne sont que\n" -"candidates à devenir des entrées actives.\n" -"\n" -"Les entrées d'utilisateurs actifs sont des utilisateurs Posix situées dans " -"le \n" -"conteneur « cn=accounts, SUFFIXE ». Les utilisateurs peuvent les utiliser " -"pour \n" -"s'authentifier à la condition qu'elles comportent des données " -"d'authentification.\n" -"\n" -"Les entrées d'utilisateurs supprimés sont des entrées d'utilisateurs Posix " -"situées\n" -"dans le conteneur « cn=deleted users, cn=accounts, cn=provisioning, " -"SUFFIXE ».\n" -"Un utilisateur ne peut s'authentifier à l'aide de ces entrées , même si " -"elles contiennent\n" -"des données d'authentification valides.\n" -"\n" -"Le conteneur d'entrées utilisateurs en attente contient des entrées :\n" -" - créées par les commandes « stageuser-add », qui sont des utilisateurs " -"Posix,\n" -" - créées par des systèmes d'approvisionnement externes.\n" -"\n" -"Un utilisateur en attente valide DOIT posséder les propriétés suivantes :\n" -" - le RDN de l'entrée est « uid »\n" -" - l'attribut « ipaUniqueID » est « autogenerate »\n" -"\n" -"IPA prend en charge une grande variété de formats de noms d'utilisateurs, " -"mais\n" -"il est important de savoir que des restrictions peuvent s'appliquer dans un " -"environnement\n" -"particulier. Ainsi, les noms d'utilisateurs débutant par un chiffre ou ceux " -"excédant une \n" -"certaine taille peuvent poser problème sur certains systèmes UNIX.\n" -"Utiliser la commande « ipa config-mod » pour modifier le format autorisé par " -"les outils IPA.\n" -"\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouvel utilisateur en attente :\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Ajouter un utilisateur en attente depuis le conteneur des utilisateurs " -"supprimés :\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" - -msgid "Stage Users" -msgstr "Mettre en attente les utilisateurs" - -msgid "Stage User" -msgstr "Mettre en attente l'utilisateur" - -msgid "stage user" -msgstr "utilis" - -msgid "stage users" -msgstr "utilisateurs en attente" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Utilisateur en attente « %(value)s » ajouté" - -msgid "givenname is required" -msgstr "givenname est requis" - -msgid "sn is required" -msgstr "sn est requis" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "doit contenir au plus %(len)d caractères" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Utilisateur en attente « %(value)s » supprimé" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Utilisateur en attente « %(value)s » modifié" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d utilisateur correspondant" -msgstr[1] "%(count)d utilisateurs correspondant" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Activer un utilisateur en attente « %(value)s »" - -msgid "Entry RDN is not 'uid'" -msgstr "Le RDN de l'entrée n'est pas l'attribut « uid »" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "L'entrée ne possède aucun attribut « %(attribute)s »" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "L'utilisateur actif nommé « %(user)s » existe déjà" - -#, python-format -msgid "Stage user %s activated" -msgstr "Utilisateur en attente %s activé" +#| msgid "Display information about a host." +msgid "Display information about a class." +msgstr "Afficher les informations sur un hôte." #, fuzzy -#| msgid "Add one or more certificates to the user entry" -msgid "Add one or more certificates to the stageuser entry" -msgstr "Ajouter un ou plusieurs certificats à l'entrée utilisateur" +#| msgid "Search for roles." +msgid "Search for classes." +msgstr "Rechercher des rôles." + +msgid "Display information about a help topic." +msgstr "Afficher les informations sur un sujet de l'aide." + +msgid "Search for help topics." +msgstr "Rechercher des sujets de l'aide." + +msgid "Required" +msgstr "Requis" + +msgid "Multi-value" +msgstr "Multi-valué" + +msgid "Always ask" +msgstr "Toujours demander" + +msgid "CLI metavar" +msgstr "Metavariable CLI" + +msgid "CLI name" +msgstr "Nom CLI" + +msgid "Confirm (password)" +msgstr "Confirmer le mot de passe" + +msgid "Default" +msgstr "Par défaut" + +msgid "Default from" +msgstr "Valeur par défaut depuis" + +msgid "Label" +msgstr "Étiquette" + +msgid "Convert on server" +msgstr "Convertir sur le serveur" + +msgid "Option group" +msgstr "Groupe d'options" + +msgid "Sensitive" +msgstr "Sensible" + +#, fuzzy +#| msgid "Positional arguments" +msgid "Positional argument" +msgstr "Arguments positionnels" #, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(parent)s : %(oname)s introuvable" -#, fuzzy -#| msgid "Remove one or more certificates to the user entry" -msgid "Remove one or more certificates to the stageuser entry" -msgstr "Supprimer les certificats de l'entrée de l'utilisateur" +msgid "Display information about a command parameter." +msgstr "Afficher des informations sur un paramètre de commande." + +msgid "Search command parameters." +msgstr "Rechercher des paramètres de commandes." #, fuzzy, python-format -#| msgid "Removed certificates from user \"%(value)s\"" -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "Certificats supprimés de l'utilisateur « %(value)s »" +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(parent)s : %(oname)s introuvable" + +msgid "Display information about a command output." +msgstr "Afficher les informations sur une sortie de commande." + +msgid "Search for command outputs." +msgstr "Rechercher des sorties de commande." + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "Member service groups" +msgstr "Groupes de services membres" + +msgid "Member HBAC service groups" +msgstr "Groupes de services HBAC membres" #, fuzzy -#| msgid "Add new principal alias to host entry" -msgid "Add new principal alias to the stageuser entry" -msgstr "Ajouter un nouvel alias de principal à l'entrée de l'hôte" +#| msgid "User ID overrides" +msgid "Member ID user overrides" +msgstr "Surcharges d'identifiants utilisateurs" + +#, fuzzy +#| msgid "Indirect Member users" +msgid "Indirect Member ID user overrides" +msgstr "Utilisateurs membres indirects" + +msgid "Indirect Member permissions" +msgstr "Droits d'accès de membre indirect" + +msgid "Indirect Member HBAC service" +msgstr "Service HBAC de membre indirect" + +msgid "Indirect Member HBAC service group" +msgstr "Groupe de services de membre indirect" + +msgid "Invalid format. Should be name=value" +msgstr "Format invalide. Doit être nom=valeur" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Un serveur maître IPA ne peut ni être supprimé ni désactivé" + +msgid "entry" +msgstr "entrée" + +msgid "entries" +msgstr "entrées" + +msgid "Entry" +msgstr "Entrée" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "entrée conteneur (%(container)s) introuvable" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s : %(oname)s introuvable" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "L'objet %(oname)s avec le nom « %(pkey)s » existe déjà" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "l'attribut « %(attribute)s » n'est pas autorisé" + +#, fuzzy, python-format +#| msgid "attribute \"%s\" not allowed" +msgid "these attributes are not allowed: %(attrs)s" +msgstr "attribut « %s » interdit" + +msgid "attribute is not configurable" +msgstr "l'attribut n'est pas configurable" + +msgid "No such attribute on this entry" +msgstr "Pas d'attribut de ce type sur cette entrée" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "Renomme l'objet %(ldap_obj_name)s" + +msgid "the entry was deleted while being modified" +msgstr "cette entrée a été supprimée pendant sa modification" + +#, python-format +msgid "%s" +msgstr "%s" + +#, python-format +msgid "%s to add" +msgstr "%s à ajouter" + +#, python-format +msgid "%s to remove" +msgstr "%s à supprimer" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" +"Recherche des %(searched_object)s avec ceux de %(ldap_object)s de " +"%(relationship)s." + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" +"Recherche des %(searched_object)s sans ceux de %(ldap_object)s de " +"%(relationship)s." #, fuzzy, python-format #| msgid "Added new aliases to host \"%(value)s\"" -msgid "Added new aliases to stageuser \"%(value)s\"" +msgid "added attribute value to entry %(value)s" msgstr "Alias ajoutés à l'hôte « %(value)s »" -#, fuzzy -#| msgid "Remove principal alias from a host entry" -msgid "Remove principal alias from the stageuser entry" -msgstr "Supprimer un alias de principal de l'entrée d'un hôte" - #, fuzzy, python-format #| msgid "Removed aliases from host \"%(value)s\"" -msgid "Removed aliases from stageuser \"%(value)s\"" +msgid "removed attribute values from entry %(value)s" msgstr "Alias supprimés pour l'hôte « %(value)s »" -#, fuzzy -#| msgid "Add one or more certificates to the user entry" -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "Ajouter un ou plusieurs certificats à l'entrée utilisateur" +msgid "one or more values to remove" +msgstr "une ou plusieurs valeurs à supprimer" + +msgid "The deny type has been deprecated." +msgstr "Le type « deny » est obsolète." + +msgid "HBAC rules" +msgstr "Règles HBAC" + +msgid "HBAC Rules" +msgstr "Règles HBAC" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "Règle HBAC « %(value)s » ajoutée" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "Règle HBAC « %(value)s » supprimée" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "Règle HBAC « %(value)s » modifiée" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "%(count)d règle HBAC correspondante" +msgstr[1] "%(count)d règles HBAC correspondantes" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "Règle HBAC « %(value)s » activée" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "Règle HBAC « %(value)s » désactivée" + +msgid "Access time" +msgstr "Horaire d'accès" #, fuzzy -#| msgid "Remove one or more certificates to the user entry" -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "Supprimer les certificats de l'entrée de l'utilisateur" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" -"\n" -"Topologie\n" -"\n" -"Gestion de la topologie de réplication.\n" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" -"\n" -"Les données des serveurs IPA sont enregistrées dans le serveur LDAP\n" -"sous deux suffixes :\n" -"* le suffixe de domain, par exemple « dc=example,dc=com », qui contient " -"toutes\n" -" les informations relatives au domaine ;\n" -"* le suffixe ca, « o=ipaca », qui n'est présent que sur les serveurs où " -"l'autorité de certification\n" -" est installée. Il contient les données nécessaire au composant " -"Certificate Server\n" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" -"\n" -"Les données enregistrées dans les serveurs IPA sont répliquées vers les " -"autres\n" -"serveurs IPA. Les agréments de réplication définissent la manière dont la \n" -"réplication s'opère. Les agréments de réplication doivent être définis " -"pour \n" -"les deux suffixes de manière séparée. Sur les domaines de niveau 0, ils " -"sont\n" -"gérés par les outils ipa-replica-manage et ipa-csreplica-manage tools. Sur \n" -"les domaines de niveau 1, ils sont gérés de manière centralisée par les " -"commandes\n" -"« ipa topology* ».\n" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" -"\n" -"Les agréments sont représentés par des segments de topologie. Un segment de " -"topologie\n" -"représente par défaut deux agréments de réplication, un pour chaque " -"direction, par exemple\n" -"de A vers B et de B vers A. La création de segments unidirectionnels n'est " -"pas permise.\n" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" -"\n" -"Afin de vérifier qu'aucun serveur n'est déconnecté dans la topologie d'un\n" -"suffixe donné, utiliser :\n" -" ipa topologysuffix-verify $suffix\n" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -"\n" -"Exemples :\n" -" Trouver tous les serveurs :\n" -" ipa server-find\n" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" -"\n" -" Trouver tous les suffixes :\n" -" ipa topologysuffix-find\n" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" -"\n" -" Ajouter un segment de topologie au suffixe du domaine :\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" -"\n" -" Ajouter un segment de topologie au suffixe « ca » :\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" -"\n" -" Énumérer tous les segments de topologie dans le suffixe du domaine :\n" -" ipa topologysegment-find domain\n" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" -"\n" -" Énumérer tous les segments de topologie dans le suffixe « ca » :\n" -" ipa topologysegment-find ca\n" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" -"\n" -" Supprimer un segment de topologie du suffixe du domaine :\n" -" ipa topologysegment-del domain segment_name\n" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" -"\n" -" Supprimer un segment de topologie du suffixe « ca » :\n" -" ipa topologysegment-del ca segment_name\n" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" -"\n" -" Vérification de la topologie du suffixe du domaine :\n" -" ipa topologysuffix-verify domain\n" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" -"\n" -" Vérification de la topologie du suffixe « ca » :\n" -" ipa topologysuffix-verify ca\n" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "La gestion de la topologie nécessite le niveau de domaine minimal {0}" - -msgid "segment" -msgstr "segment" - -msgid "segments" -msgstr "segments" - -msgid "Topology Segments" -msgstr "Segments de topologie" - -msgid "Topology Segment" -msgstr "Segment de topologie" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "le nœud de gauche n'est pas un nœud de la topologie : %(leftnode)s" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "le nœud de droite n'est pas un nœud de la topologie : %(rightnode)s" - -msgid "left node and right node must not be the same" -msgstr "les nœuds de gauche et de droite ne peuvent être identiques" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "%(count)d segment correspondant" -msgstr[1] "%(count)d segment correspondants" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Segment « %(value)s » ajouté" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Segment « %(value)s » supprimé" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Segment « %(value)s » modifié" - -#, python-format -msgid "%(value)s" -msgstr "%(value)s" - -msgid "left or right node has to be specified" -msgstr "le nœud de gauche ou de droite doit être indiqué" - -msgid "only one node can be specified" -msgstr "seul un nœud peut être indiqué" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" -"Raffraichissement demandé pour la réplication via le segment « %(pkey)s »." - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" -"Arrêt du raffraichissement demandé pour la réplication via le segment « " -"%(pkey)s »." - -msgid "suffixes" -msgstr "suffixes" - -msgid "Topology suffixes" -msgstr "Suffixes de topologie" - -msgid "Topology suffix" -msgstr "Suffixe de topologie" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "%(count)d suffixe de topologie correspondant" -msgstr[1] "%(count)d suffixes de topologie correspondants" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Suffixe de topologie « %(value)s » supprimé" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "Suffixe de topologie « %(value)s » ajouté" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Suffixe de topologie « %(value)s » modifié" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" -"\n" -"Vérifier la topologie de réplication pour le suffixe.\n" -"\n" -"Vérifications effectuées :\n" -" 1. vérfier si la topologie n'est pas déconnectée. En d'autres mots, si des " -"chemins\n" -" de réplication existent bien entre tous les serveurs.\n" -" 2. vérifier si tous les serveurs n'ont pas un nombre supérieur à celui " -"recommandé\n" -" d'agrément de réplication.\n" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" -"Privilège « write » insuffisant pour l'attribut « krbLastPwdChange » de " -"l'entrée « %s »." +#| msgid "Add target hosts and hostgroups to an HBAC rule." +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "Ajouter des hôtes et des groupes d'hôtes cibles à une règle HBAC." #, fuzzy #| msgid "" #| "\n" -#| "Groups of hosts.\n" +#| "Simulate use of Host-based access controls\n" #| "\n" -#| "Manage groups of hosts. This is useful for applying access control to a\n" -#| "number of hosts by using Host-based Access Control.\n" +#| "HBAC rules control who can access what services on what hosts.\n" +#| "You can use HBAC to control which users or groups can access a service,\n" +#| "or group of services, on a target host.\n" +#| "\n" +#| "Since applying HBAC rules implies use of a production environment,\n" +#| "this plugin aims to provide simulation of HBAC rules evaluation without\n" +#| "having access to the production environment.\n" +#| "\n" +#| " Test user coming to a service on a named host against\n" +#| " existing enabled rules.\n" +#| "\n" +#| " ipa hbactest --user= --host= --service=\n" +#| " [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +#| " [--sizelimit= ]\n" +#| "\n" +#| " --user, --host, and --service are mandatory, others are optional.\n" +#| "\n" +#| " If --rules is specified simulate enabling of the specified rules and " +#| "test\n" +#| " the login of the user using only these rules.\n" +#| "\n" +#| " If --enabled is specified, all enabled HBAC rules will be added to " +#| "simulation\n" +#| "\n" +#| " If --disabled is specified, all disabled HBAC rules will be added to " +#| "simulation\n" +#| "\n" +#| " If --nodetail is specified, do not return information about rules " +#| "matched/not matched.\n" +#| "\n" +#| " If both --rules and --enabled are specified, apply simulation to --rules " +#| "_and_\n" +#| " all IPA enabled rules.\n" +#| "\n" +#| " If no --rules specified, simulation is run against all IPA enabled " +#| "rules.\n" +#| " By default there is a IPA-wide limit to number of entries fetched, you " +#| "can change it\n" +#| " with --sizelimit option.\n" #| "\n" #| "EXAMPLES:\n" #| "\n" -#| " Add a new host group:\n" -#| " ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +#| " 1. Use all enabled HBAC rules in IPA database to simulate:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Not matched rules: my-second-rule\n" +#| " Not matched rules: my-third-rule\n" +#| " Not matched rules: myrule\n" +#| " Matched rules: allow_all\n" #| "\n" -#| " Add another new host group:\n" -#| " ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +#| " 2. Disable detailed summary of how rules were applied:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" #| "\n" -#| " Add members to the hostgroup (using Bash brace expansion):\n" -#| " ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +#| " 3. Test explicitly specified HBAC rules:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +#| " --rules=myrule --rules=my-second-rule\n" +#| " ---------------------\n" +#| " Access granted: False\n" +#| " ---------------------\n" +#| " Not matched rules: my-second-rule\n" +#| " Not matched rules: myrule\n" #| "\n" -#| " Add a hostgroup as a member of another hostgroup:\n" -#| " ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +#| " 4. Use all enabled HBAC rules in IPA database + explicitly specified " +#| "rules:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +#| " --rules=myrule --rules=my-second-rule --enabled\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Not matched rules: my-second-rule\n" +#| " Not matched rules: my-third-rule\n" +#| " Not matched rules: myrule\n" +#| " Matched rules: allow_all\n" #| "\n" -#| " Remove a host from the hostgroup:\n" -#| " ipa hostgroup-remove-member --hosts=box2 baltimore\n" +#| " 5. Test all disabled HBAC rules in IPA database:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +#| " ---------------------\n" +#| " Access granted: False\n" +#| " ---------------------\n" +#| " Not matched rules: new-rule\n" #| "\n" -#| " Display a host group:\n" -#| " ipa hostgroup-show baltimore\n" +#| " 6. Test all disabled HBAC rules in IPA database + explicitly " +#| "specified rules:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +#| " --rules=myrule --rules=my-second-rule --disabled\n" +#| " ---------------------\n" +#| " Access granted: False\n" +#| " ---------------------\n" +#| " Not matched rules: my-second-rule\n" +#| " Not matched rules: my-third-rule\n" +#| " Not matched rules: myrule\n" #| "\n" -#| " Delete a hostgroup:\n" -#| " ipa hostgroup-del baltimore\n" -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" -"\n" -"Groupes d'hôtes.\n" -"\n" -"Gestion des groupes d'hôtes. Permet d'appliquer des contrôles d'accès\n" -"à plusieurs hôtes en utilisant HBAC (Host-based Access Control).\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau groupe d'hôtes :\n" -" ipa hostgroup-add --desc=\"Systèmes de Baltimore\" baltimore\n" -"\n" -" Ajouter un nouveau groupe d'hôtes :\n" -" ipa hostgroup-add --desc=\"Systèmes du Maryland\" maryland\n" -"\n" -" Ajouter des membres à un groupe d'hôtes :\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Ajouter un groupe d'hôtes en tant que membre d'un autre groupe d'hôtes :\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Supprimer un hôte d'un groupe :\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Afficher un groupe d'hôtes :\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Supprimer un groupe d'hôtes :\n" -" ipa hostgroup-del baltimore\n" - -msgid "host groups" -msgstr "groupes d'hôtes" - -msgid "Host Group" -msgstr "Groupe d'hôtes" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Groupe d'hôtes « %(value)s » ajouté" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"Un groupe réseau nommé « %s » existe déjà. Les groupes d'hôtes et les " -"groupes réseau partagent un même espace de noms." - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Groupe d'hôtes « %(value)s » supprimé" - -msgid "hostgroup" -msgstr "groupe d'hôtes" - -msgid "privileged hostgroup" -msgstr "groupe d'hôtes privilégiés" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Groupe d'hôtes « %(value)s » modifié" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "%(count)d groupe d'hôtes correspondant" -msgstr[1] "%(count)d groupes d'hôtes correspondant" - -#, fuzzy -#| msgid "Add users that can manage this token." -msgid "Add users that can manage members of this hostgroup." -msgstr "Ajouter des utilisateurs pouvant gérer ce jeton." - -#, fuzzy -#| msgid "Remove users that can manage this token." -msgid "Remove users that can manage members of this hostgroup." -msgstr "Supprimer des utilisateurs pouvant gérer ce jeton." - -msgid "" -"\n" -"Vaults\n" -msgstr "" -"\n" -"Coffres-forts (vaults)\n" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" -"\n" -"Gestion des coffres-forts.\n" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" -"\n" -"Il existe trois types de coffres-forts en fonction de leur propriété :\n" -"* coffre utilisateur/privé\n" -"* coffre de service\n" -"* coffre-fort partagé (shared)\n" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" -"\n" -"Les coffres-forts utilisateurs sont des coffres appartenant à un " -"utilisateur\n" -"en particulier. Les coffres privés appartiennent à l'utilisateur courant. " -"Les\n" -"coffres de services appartiennent à un service. Les coffres partagés \n" -"appartiennent à l'administrateur, mais peuvent être utilisés par d'autres\n" -"utilisateurs ou services.\n" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" -"\n" -"Il existe trois types de coffres-forts en fonction de leur mécanisme\n" -"de sécurité :\n" -"* coffre-fort standard\n" -"* coffre-fort symétrique\n" -"* coffre-fort asymétrique\n" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" -"\n" -"Le coffre-fort standard utilise un mécanisme sécurisé pour le\n" -"transport et le stockage du secret. Le secret ne peut être récupéré\n" -"que par les utilisateurs ayant accès au coffre.\n" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" -"\n" -"Le coffre-fort symétrique est similaire au coffre standard, mais il \n" -"pré-chiffre le secret à l'aide d'un mot de passe avant son transport.\n" -"Le secret ne peut être récupéré qu'à l'aide du même mot de passe.\n" -"\n" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" -"\n" -"Le coffre-fort asymétrique est similaire au coffre standard, mais il \n" -"pré-chiffre le secret à l'aide d'une clé publique avant son transport.\n" -"Le secret ne peut être récupéré qu'avec la clé privée correspondante.\n" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Énumérer les coffres-forts pour un service :\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" -"\n" -" Ajouter un coffre-fort standard :\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" -"\n" -" Ajouter un coffre-fort symétrique :\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file mot_de_passe.txt\n" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" -"\n" -" Ajouter un coffre-fort symétrique :\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --public-key-file public.pem\n" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Afficher un coffre-fort :\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" -"\n" -" Modifier la description d'un coffre-fort :\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" -"\n" -" Modifier le type d'un coffre-fort :\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [ancient mot de passe/clé privée]\n" -" [nouveau mot de passe/clé publique]\n" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" -"\n" -" Modifier un coffre-fort symétrique :\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" -"\n" -" Modifier les clés d'un coffre-fort asymétrique :\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Supprimer un coffre-fort :\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" -"\n" -" Afficher la configuration des coffres-forts :\n" -" ipa vaultconfig-show\n" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" -"\n" -" Archiver des données dans un coffre-fort standard :\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Archiver des données dans un coffre-fort symétrique :\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file mot_de_passe.txt\n" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" -"\n" -" Archiver des données dans un coffre-fort asymétrique :\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" -"\n" -" Récupérer des données d'un coffre-fort standard :\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Récupérer des données d'un coffre-fort symétrique :\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file mot_de_passe.txt\n" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" -"\n" -" Récupérer des données d'un coffre-fort asymétrique :\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file clé_privée.pem\n" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Ajouter des propriétaires à un coffre-fort :\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services " -"]\n" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Supprimer des propriétaires d'un coffre-fort :\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services " -"]\n" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Ajouter des membres à un coffre-fort :\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services " -"]\n" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Supprimer des membres d'un coffre-fort :\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services " -"]\n" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" -"\n" -" Objet conteneur de coffre-fort.\n" -" " - -msgid "vaultcontainer" -msgstr "vaultcontainer" - -msgid "vaultcontainers" -msgstr "vaultcontainers" - -msgid "Vault Containers" -msgstr "Conteneurs de coffres-forts" - -msgid "Vault Container" -msgstr "Conteneur de coffres-forts" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" -"Les options de service, d'utilisateur ou de coffre-fort partagé ne peuvent " -"être utilisées simultanément" - -msgid "Host is not supported" -msgstr "L'hôte n'est pas pris en charge" - -msgid "KRA service is not enabled" -msgstr "Le service KRA est désactivé" - -msgid "Deleted vault container" -msgstr "Conteneur de coffre-fort supprimé" - -#, python-format -msgid "owner %s" -msgstr "propriétaire %s" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" -"\n" -" Objet coffre-fort.\n" -" " - -msgid "vault" -msgstr "coffre-fort" - -msgid "vaults" -msgstr "coffres-forts" - -msgid "Vaults" -msgstr "Coffres-forts" - -msgid "Vault" -msgstr "Coffre-fort" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" -"Les options de service, de partage et d'utilisateur ne peuvent être " -"utilisées simultanément." - -#, fuzzy -#| msgid "Modify a vault." -msgid "Add a vault." -msgstr "Modifier un coffre-fort." - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "Ajout de « %(value)s » au coffre" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "Valeur « %(value)s » supprimée du coffre" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d coffre-fort correspondant" -msgstr[1] "%(count)d coffre-forts correspondants" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" -"Les options de service(s), d'utilisateur(s) ou de coffres-forts partagé(s) " -"ne peuvent être utilisées simultanément" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "Coffre-fort « %(value)s » modifié" - -msgid "Vault configuration" -msgstr "Configuration du coffre-fort" - -msgid "IPA KRA servers" -msgstr "Serveurs KRA IPA" - -msgid "IPA servers configured as key recovery agents" -msgstr "Serveurs IPA configurés comme agents de recouvrement de clés" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "Données archivées dans le coffre-fort « %(value)s »" - -#, fuzzy -#| msgid "Retrieve a data from a vault." -msgid "Retrieve data from a vault." -msgstr "Récupérer une donnée depuis un coffre-fort" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Donnée récupérée depuis le coffre-fort « %(value)s »" - -msgid "No archived data." -msgstr "Aucune donnée archivée." - -#, fuzzy -#| msgid "Checks if any of the servers has the CA service enabled." -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" -"Vérifier si l'un des serveurs a activé le service autorité de certification." - -msgid "netgroups" -msgstr "groupes réseau" - -msgid "Netgroups" -msgstr "Groupes réseau" - -msgid "Netgroup" -msgstr "Groupe réseau" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Groupe réseau « %(value)s » ajouté" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"Un groupe d'hôtes nommé « %s » existe déjà. Les groupes d'hôtes et les " -"groupes réseau partagent le même espace de nommage" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Groupe réseau « %(value)s » supprimé" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Groupe réseau « %(value)s » supprimé" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d groupe réseau correspondant" -msgstr[1] "%(count)d groupes réseau correspondant" - -msgid "One time password commands" -msgstr "Commandes mots de passe à usage unique (OTP)" - -msgid "OTP configuration options" -msgstr "Options de configuration pour les mots de passe à usage unique" - -msgid "OTP Configuration" -msgstr "Configuration pour les mots de passe à usage unique" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Mot de passe modifié pour « %(value)s »" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "« pkinit »" - -msgid "PKINIT" -msgstr "PKINIT" - -#, fuzzy -#| msgid "Trust status" -msgid "PKINIT status" -msgstr "État de la confiance" - -#, fuzzy -#| msgid "This entry cannot be enabled or disabled" -msgid "Whether PKINIT is enabled or disabled" -msgstr "Cette entrée ne peut être activée ou désactivée" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)s server role matched" -#| msgid_plural "%(count)s server roles matched" -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)s rôle serveur correspondant" -msgstr[1] "%(count)s rôles serveur correspondants" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" -"\n" -"Serveurs mandataires RADIUS\n" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" -"\n" -"Gestion des serveurs mandataires RADIUS.\n" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" -"\n" -"IPA prend en charge l'utilisation d'un serveur mandataire externe RADIUS\n" -"pour des authentifications OTP « krb5 ». Cela procure une grande souplesse\n" -"pour l'intégration des services d'authentification tierce partie.\n" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" -"\n" -" Ajouter un nouveau serveur :\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" -"\n" -" Trouver tous serveurs dont les entrées incluent la chaîne « example." -"com » :\n" -" ipa radiusproxy-find example.com\n" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" -"\n" -" Examiner la configuration :\n" -" ipa radiusproxy-show MyRADIUS\n" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" -"\n" -" Changer le secret :\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" -"\n" -" Supprimer une configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" - -msgid "invalid attribute name" -msgstr "nom d'attribut invalide" - -msgid "invalid port number" -msgstr "numéro de port invalide" - -msgid "RADIUS proxy server" -msgstr "Serveur mandataire RADIUS" - -msgid "RADIUS proxy servers" -msgstr "Serveurs mandataires RADIUS" - -msgid "RADIUS Servers" -msgstr "Serveurs RADIUS" - -msgid "RADIUS Server" -msgstr "Serveur RADIUS" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "Serveur mandataire RADIUS « %(value)s » ajouté" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "Serveur mandataire RADIUS « %(value)s » supprimé" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "Serveur mandataire RADIUS « %(value)s » modifié" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "%(count)d serveur mandataire RADIUS correspondant" -msgstr[1] "%(count)d serveurs mandataires RADIUS correspondant" - -msgid "A list of ACI values" -msgstr "Une liste de valeurs d'ACI" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" -"« type », « filter », « subtree » et « targetgroup » s'excluent mutuellement" - -msgid "ACI prefix is required" -msgstr "Un préfixe ACI est requis" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" -"au moins un parmi « type », « filter », « subtree », « targetgroup », " -"« attrs » ou « memberof » est requis" - -msgid "filter and memberof are mutually exclusive" -msgstr "« filter » et « memberof » s'excluent mutuellement" - -msgid "group, permission and self are mutually exclusive" -msgstr "« group », « permission » et « self » s'excluent mutuellement" - -msgid "One of group, permission or self is required" -msgstr "Un parmi « group », « permission » ou « self » est requis" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "Le groupe « %s » n'existe pas" - -msgid "empty filter" -msgstr "filtre vide" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Erreur de syntaxe : %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "DN invalide (%s)" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "ACI de nom « %s » introuvable" - -#, fuzzy -#| msgid "IPA object" -msgid "ACI object." -msgstr "objet IPA" - -msgid "ACIs" -msgstr "ACI" - -msgid "ACI" -msgstr "ACI" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "ACI « %(value)s » créée" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "ACI « %(value)s » supprimée" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "ACI « %(value)s » modifiée" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d ACI correspondant" -msgstr[1] "%(count)d ACI correspondant" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "ACI renommée en « %(value)s »" - -#, fuzzy -#| msgid "" +#| " 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +#| " --enabled --disabled\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Not matched rules: my-second-rule\n" +#| " Not matched rules: my-third-rule\n" +#| " Not matched rules: myrule\n" +#| " Not matched rules: new-rule\n" +#| " Matched rules: allow_all\n" #| "\n" -#| "Server configuration\n" #| "\n" -#| "Manage the default values that IPA uses and some of its tuning " -#| "parameters.\n" +#| "HBACTEST AND TRUSTED DOMAINS\n" #| "\n" -#| "NOTES:\n" +#| "When an external trusted domain is configured in IPA, HBAC rules are also " +#| "applied\n" +#| "on users accessing IPA resources from the trusted domain. Trusted domain " +#| "users and\n" +#| "groups (and their SIDs) can be then assigned to external groups which can " +#| "be\n" +#| "members of POSIX groups in IPA which can be used in HBAC rules and thus " +#| "allowing\n" +#| "access to resources protected by the HBAC system.\n" #| "\n" -#| "The password notification value (--pwdexpnotify) is stored here so it " -#| "will\n" -#| "be replicated. It is not currently used to notify users in advance of an\n" -#| "expiring password.\n" +#| "hbactest plugin is capable of testing access for both local IPA users and " +#| "users\n" +#| "from the trusted domains, either by a fully qualified user name or by " +#| "user SID.\n" +#| "Such user names need to have a trusted domain specified as a short name\n" +#| "(DOMAIN\\Administrator) or with a user principal name (UPN), " +#| "Administrator@ad.test.\n" #| "\n" -#| "Some attributes are read-only, provided only for information purposes. " -#| "These\n" -#| "include:\n" -#| "\n" -#| "Certificate Subject base: the configured certificate subject base,\n" -#| " e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -#| "Password plug-in features: currently defines additional hashes that the\n" -#| " password will generate (there may be other conditions).\n" -#| "\n" -#| "When setting the order list for mapping SELinux users you may need to\n" -#| "quote the value so it isn't interpreted by the shell.\n" +#| "Please note that hbactest executed with a trusted domain user as --user " +#| "parameter\n" +#| "can be only run by members of \"trust admins\" group.\n" #| "\n" #| "EXAMPLES:\n" #| "\n" -#| " Show basic server configuration:\n" -#| " ipa config-show\n" +#| " 1. Test if a user from a trusted domain specified by its shortname " +#| "matches any\n" +#| " rule:\n" #| "\n" -#| " Show all configuration options:\n" -#| " ipa config-show --all\n" +#| " $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +#| "service sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Matched rules: allow_all\n" +#| " Matched rules: can_login\n" #| "\n" -#| " Change maximum username length to 99 characters:\n" -#| " ipa config-mod --maxusername=99\n" +#| " 2. Test if a user from a trusted domain specified by its domain name " +#| "matches\n" +#| " any rule:\n" #| "\n" -#| " Increase default time and size limits for maximum IPA server search:\n" -#| " ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +#| " $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +#| "service sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Matched rules: allow_all\n" +#| " Matched rules: can_login\n" #| "\n" -#| " Set default user e-mail domain:\n" -#| " ipa config-mod --emaildomain=example.com\n" +#| " 3. Test if a user from a trusted domain specified by its SID matches " +#| "any rule:\n" #| "\n" -#| " Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -#| " ipa config-mod --enable-migration=TRUE\n" +#| " $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 " +#| "\\\n" +#| " --host `hostname` --service sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Matched rules: allow_all\n" +#| " Matched rules: can_login\n" #| "\n" -#| " Define SELinux user map order:\n" -#| " ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:" -#| "s0-s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +#| " 4. Test if other user from a trusted domain specified by its SID " +#| "matches any rule:\n" +#| "\n" +#| " $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 " +#| "\\\n" +#| " --host `hostname` --service sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Matched rules: allow_all\n" +#| " Not matched rules: can_login\n" +#| "\n" +#| " 5. Test if other user from a trusted domain specified by its shortname " +#| "matches\n" +#| " any rule:\n" +#| "\n" +#| " $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +#| "sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Matched rules: allow_all\n" +#| " Not matched rules: can_login\n" msgid "" "\n" -"Server configuration\n" +"Simulate use of Host-based access controls\n" "\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"NOTES:\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" "\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" "\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" +" --user, --host, and --service are mandatory, others are optional.\n" "\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" "\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" "\n" -"Configuration du serveur\n" +"Simuler l'utilisation des contrôles d'accès fondés sur l'hôte\n" "\n" -"Gérer les valeurs par défaut utilisées par IPA ainsi que certains de ses\n" -"paramètres d'ajustement.\n" +"Les règles HBAC contrôlent qui peut accéder à quel service sur quels hôtes.\n" +"Vous pouvez utiliser HBAC pour contrôler quels utilisateurs ou quels " +"groupes\n" +"ont accés à un service ou à un groupe de services, sur un hôte cible.\n" "\n" -"NOTES :\n" +"L'application de règles HBAC présuppose un environnement de production ;\n" +"ce greffon a pour objet de fournir une simulation de l'évaluation des " +"règles\n" +"HBAC sans nécessiter d'accès à cet environnement.\n" "\n" -"La valeur de notification du mot de passe (--pwdexpnotify) est stockée ici\n" -"en vue de sa réplication. Elle n'est pas actuellement utilisée pour " -"notifier\n" -"par avance aux utilisateurs l'expiration de leur mot de passe.\n" +" Tester l'arrivée d'un utilisateur dans un service sur un hôte donné\n" +" vis à vis des règles actives existantes.\n" "\n" -"Certains attributs sont en lecture seule, fournis à titre d'information ;\n" -"ils comprennent :\n" +"ipa hbactest --user= --host= --service=\\\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\\\n" +" [--sizelimit= ]\n" "\n" -"* la base sujet de certificat : la base de sujet de certificat configuré,\n" -" ex. O=EXAMPLE.COM, configurable uniquement à l'installation.\n" -"* les fonctions du greffon mots de passe : définit les hachages " -"additionnels\n" -" qu'un mot de passe va générer (d'autres conditions peuvent s'appliquer).\n" +"--user, --host et --service sont obligatoires, les autres sont " +"optionnelles.\n" "\n" -"En fixant la liste ordonnée pour le mappage des utilisateurs SELinux, vous\n" -"devez mettre entre guillemets les valeurs pour éviter leur interprétation.\n" +" Si --rules est défini, simule l'activation des règles « rules-list » et\n" +" teste la connexion de l'utilisateur uniquement sur ces règles.\n" +"\n" +" Si --enabled est défini, toutes les règles HBAC activées sont ajoutées à\n" +" la simulation\n" +"\n" +" Si --disabled est défini, toutes les règles HBAC désactivées sont ajoutées\n" +" à la simulation\n" +"\n" +" Si --nodetail est défini, il n'est pas renvoyé d'information sur les " +"règles satisfaites ou non satisfaites.\n" +"\n" +" Si --rules et --enabled sont définis tous deux, la simulation est " +"appliquée\n" +" à --rules _et_ à tous les règles IPA activées.\n" +"\n" +" Si --rules n'est pas défini, la simulation est lancée vis à sis de toutes\n" +" les règles IPA activées.\n" +" Par défaut, il y a une limite globale IPA pour le nombre d'entrées\n" +" renvoyées, vous pouvez la modifier avec l'option « --sizelimit ».\n" "\n" "EXEMPLES :\n" "\n" -" Afficher la configuration de base du serveur :\n" -" ipa config-show\n" +" 1. Utiliser toutes les règles HBAC activées dans la base de données IPA\n" +" pour la simulation :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" "\n" -" Afficher toutes les options de configuration :\n" -" ipa config-show --all\n" +" 2. Désactiver le résumé détaillé sur l'application des règles :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -" Modifier la longueur maximale d'un nom d'utilisateur à 99 caractères :\n" -" ipa config-mod --maxusername=99\n" +" 3. Tester explicitement les règles HBAC indiquées :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" +"--rules=my-second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" "\n" -" Augmenter délais et limites de taille des recherches sur le serveur IPA :\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 4. Utiliser toutes les règles HBAC activées de la base de données IPA\n" +" plus les règles explicitement définies :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" +"--rules=my-second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" "\n" -" Définir le domaine pour les courriels de l'utilisateur par défaut :\n" -" ipa config-mod --emaildomain=example.com\n" +" 5. Tester toutes les règles HBAC désactivées de la base de données " +"IPA :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" "\n" -" Activer le mode migration pour que « ipa migrate-ds » soit opérationelle :\n" -" ipa config-mod --enable-migration=TRUE\n" +" 6. Tester toutes les règles HBAC désactivées de la base de données IPA\n" +" plus les règles explicitement définies :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" +"--rules=my-second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" "\n" -" Définir l'ordre de la mappe des utilisateurs SELinux :\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +" 7. Tester toutes les règles HBAC (activées et désactivées) de la base\n" +" de données IPA :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +"\n" +"\n" +"TEST HBAC ET domaines approuvés\n" +"\n" +"Si un domaine approuvé externe est configuré dans IPA, les règles HBAC\n" +"sont aussi appliquées aux utilisateurs accédant aux ressources IPA à partir\n" +"du domaine approuvé. Les utilisateurs des domaines approuvés et les\n" +"groupes (et leur SID) peuvent être assignés à des groupes externes pouvant\n" +"être membres de groupes POSIX d'IPA éligibles aux règles HBAC, ce qui\n" +"autorise un accès aux ressources protégées par le système HBAC.\n" +"\n" +"Le greffon « hbactest » peut tester des accès, à la fois d'utilisateurs\n" +"IPA locaux et d'utilisateurs de domaines approuvés à partir, soit du\n" +"nom d'utilisateur pleinement qualifié, soit du SID utilisateur. De tels " +"noms\n" +"d'utilisateur doivent avoir un domaine approuvé précisé comme nom court\n" +"(DOMAINE\\Administrateur) ou avec un nom de principal d'utilisateur (UPN),\n" +"Administrator@ad.test.\n" +"\n" +"Veuillez noter que « hbactest » exécuté avec un utilisateur de domaine de\n" +"confiance en tant que paramètre --user ne peut être lancé que par des\n" +"membres du groupe des « administrateurs de confiance ».\n" +"\n" +"EXEMPLES :\n" +"\n" +" 1. Tester si un utilisateur d'un domaine approuvé défini par son\n" +" nom court satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Tester si un utilisateur d'un domaine approuvé défini par son\n" +" nom de domaine satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Tester si un utilisateur d'un domaine approuvé défini par son\n" +" SID satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Tester si un autre utilisateur d'un domaine approuvé défini\n" +" par son SID satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Tester si un autre utilisateur d'un domaine approuvé défini par\n" +" son nom court satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" -#, fuzzy -#| msgid "must be at least %(minvalue)d" -msgid "must be at least 10" -msgstr "doit être supérieur ou égal à %(minvalue)d" +msgid "Unresolved rules in --rules" +msgstr "Règles non résolues dans « --rules »" -msgid "configuration options" -msgstr "options de configuration" +#, python-format +msgid "Access granted: %s" +msgstr "Accès autorisé : %s" -msgid "Configuration" -msgstr "Configuration" +msgid "ID View" +msgstr "Vue d'identifiants" -#, fuzzy -#| msgid "Maximum username length" -msgid "Maximum hostname length" -msgstr "Longueur maximale du nom d'utilisateur" +msgid "system ID View" +msgstr "Vue d'identifiants du système" -msgid "IPA masters" -msgstr "Maîtres IPA" +msgid "ID Views" +msgstr "Vues d'identifiants" -msgid "List of all IPA masters" -msgstr "Liste des maîtres IPA" +msgid "User object overrides" +msgstr "Surcharges des objets utilisateurs" -#, fuzzy -#| msgid "IPA masters" -msgid "Hidden IPA masters" -msgstr "Maîtres IPA" +msgid "Group object overrides" +msgstr "Surcharges des objets groupes" -#, fuzzy -#| msgid "List of all IPA masters" -msgid "List of all hidden IPA masters" -msgstr "Liste des maîtres IPA" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "Serveurs d'AC IPA" - -msgid "IPA servers configured as certificate authority" -msgstr "Serveurs IPA configurés comme autorité de certification" - -#, fuzzy -#| msgid "IPA CA servers" -msgid "Hidden IPA CA servers" -msgstr "Serveurs d'AC IPA" - -#, fuzzy -#| msgid "IPA servers configured as certificate authority" -msgid "Hidden IPA servers configured as certificate authority" -msgstr "Serveurs IPA configurés comme autorité de certification" - -msgid "IPA CA renewal master" -msgstr "Maître de renouvellement d'AC IPA" - -msgid "Renewal master for IPA certificate authority" -msgstr "Maître en charge du renouvellement de l'autorité de certification" - -#, fuzzy -#| msgid "IPA servers configured as key recovery agents" -msgid "IPA servers configured as key recovery agent" -msgstr "Serveurs IPA configurés comme agents de recouvrement de clés" - -#, fuzzy -#| msgid "IPA KRA servers" -msgid "Hidden IPA KRA servers" -msgstr "Serveurs KRA IPA" - -#, fuzzy -#| msgid "IPA servers configured as key recovery agents" -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "Serveurs IPA configurés comme agents de recouvrement de clés" +msgid "Hosts the view applies to" +msgstr "Hôtes auxquels la vue s'applique" msgid "Domain resolution order" msgstr "" @@ -20967,439 +25789,188 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -#, fuzzy -#| msgid "IPA server configured as DNSSec key master" -msgid "IPA servers configured as domain name server" -msgstr "Serveur IPA configuré comme maître des clés DNSSec" - -#, fuzzy -#| msgid "IPA DNS servers" -msgid "Hidden IPA DNS servers" -msgstr "Serveurs DNS IPA" - -#, fuzzy -#| msgid "IPA servers configured as key recovery agents" -msgid "Hidden IPA servers configured as domain name server" -msgstr "Serveurs IPA configurés comme agents de recouvrement de clés" - -#, fuzzy -#| msgid "IPA DNSSec key master" -msgid "DNSec key master" -msgstr "Maître des clés DNSSec IPA" - -#, fuzzy -#| msgid "options are not allowed" -msgid "Empty domain is not allowed" -msgstr "les options ne sont pas autorisées" - -#, fuzzy, python-format -#| msgid "invalid domain-name: %s" -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "nom de domaine invalide : %s" - -#, fuzzy, python-format -#| msgid "Removed information about the trusted domain \"%(value)s\"" -msgid "Server has no information about domain '%(domain)s'" -msgstr "Informations sur le domaine approuvé « %(value)s » supprimées" +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "Vue d'identifiants « %(value)s » ajoutée" #, python-format -msgid "Disabled domain '%(domain)s' is not allowed" +msgid "Deleted ID View \"%(value)s\"" +msgstr "Vue d'identifiants « %(value)s » supprimée" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "Vue d'identifiant « %(value)s » modifiée" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "%(count)d vue d'identifiants correspondante" +msgstr[1] "%(count)d vues d'identifiants correspondantes" + +msgid "Default Trust View cannot be applied on hosts" msgstr "" +"La vue de la relation d'approbation par défaut ne peut être appliquée sur un " +"hôte" -msgid "The group doesn't exist" -msgstr "Le groupe n'existe pas" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "attribut « %s » interdit" - -msgid "May not be empty" -msgstr "Ne peut pas être vide" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "L'attribut par défaut %(attr)s de %(obj)s n'est pas autorisé !" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "Est attendue une liste des utilisateurs SELinux, délimités par des $" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "L'utilisateur SELinux « %(user)s » n'est pas valide : %(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "" -"L'utilisateur par défaut de la mappe utilisateur SELinux n'est pas dans la " -"liste d'ordre" +msgid "not found" +msgstr "introuvable" #, fuzzy -#| msgid "" -#| "\n" -#| "Groups of users\n" -#| "\n" -#| "Manage groups of users. By default, new groups are POSIX groups. You\n" -#| "can add the --nonposix option to the group-add command to mark a new " -#| "group\n" -#| "as non-POSIX. You can use the --posix argument with the group-mod " -#| "command\n" -#| "to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -#| "converted to non-POSIX groups.\n" -#| "\n" -#| "Every group must have a description.\n" -#| "\n" -#| "POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -#| "supported but can have an impact on your file permissions. It is not " -#| "necessary\n" -#| "to supply a GID when creating a group. IPA will generate one " -#| "automatically\n" -#| "if it is not provided.\n" -#| "\n" -#| "EXAMPLES:\n" -#| "\n" -#| " Add a new group:\n" -#| " ipa group-add --desc='local administrators' localadmins\n" -#| "\n" -#| " Add a new non-POSIX group:\n" -#| " ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -#| "\n" -#| " Convert a non-POSIX group to posix:\n" -#| " ipa group-mod --posix remoteadmins\n" -#| "\n" -#| " Add a new POSIX group with a specific Group ID number:\n" -#| " ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -#| "\n" -#| " Add a new POSIX group and let IPA assign a Group ID number:\n" -#| " ipa group-add --desc='printer admins' printeradmins\n" -#| "\n" -#| " Remove a group:\n" -#| " ipa group-del unixadmins\n" -#| "\n" -#| " To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -#| " ipa group-add-member --groups=remoteadmins localadmins\n" -#| "\n" -#| " Add multiple users to the \"localadmins\" group:\n" -#| " ipa group-add-member --users=test1 --users=test2 localadmins\n" -#| "\n" -#| " Remove a user from the \"localadmins\" group:\n" -#| " ipa group-remove-member --users=test2 localadmins\n" -#| "\n" -#| " Display information about a named group.\n" -#| " ipa group-show localadmins\n" -#| "\n" -#| "External group membership is designed to allow users from trusted " -#| "domains\n" -#| "to be mapped to local POSIX groups in order to actually use IPA " -#| "resources.\n" -#| "External members should be added to groups that specifically created as\n" -#| "external and non-POSIX. Such group later should be included into one of " -#| "POSIX\n" -#| "groups.\n" -#| "\n" -#| "An external group member is currently a Security Identifier (SID) as " -#| "defined by\n" -#| "the trusted domain. When adding external group members, it is possible " -#| "to\n" -#| "specify them in either SID, or DOM\n" -#| "ame, or name@domain format. IPA will attempt\n" -#| "to resolve passed name to SID with the use of Global Catalog of the " -#| "trusted domain.\n" -#| "\n" -#| "Example:\n" -#| "\n" -#| "1. Create group for the trusted domain admins' mapping and their local " -#| "POSIX group:\n" -#| "\n" -#| " ipa group-add --desc=' admins external map' " -#| "ad_admins_external --external\n" -#| " ipa group-add --desc=' admins' ad_admins\n" -#| "\n" -#| "2. Add security identifier of Domain Admins of the to the " -#| "ad_admins_external\n" -#| " group:\n" -#| "\n" -#| " ipa group-add-member ad_admins_external --external 'AD\\Domain " -#| "Admins'\n" -#| "\n" -#| "3. Allow members of ad_admins_external group to be associated with " -#| "ad_admins POSIX group:\n" -#| "\n" -#| " ipa group-add-member ad_admins --groups ad_admins_external\n" -#| "\n" -#| "4. List members of external members of ad_admins_external group to see " -#| "their SIDs:\n" -#| "\n" -#| " ipa group-show ad_admins_external\n" -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +#| msgid "Default Trust View cannot be applied on hosts" +msgid "ID View cannot be applied to IPA master" msgstr "" -"\n" -"Groupes d'utilisateurs\n" -"\n" -"Gérer des groupes d'utilisateurs. Par défaut, tout nouveau groupe est " -"POSIX.\n" -"On peut ajouter l'option « --nonposix » à la commande « group-add » pour\n" -"marquer un nouveau groupe comme non-POSIX et utiliser l'option « --posix »\n" -"de la commande « group-mod » pour convertir un groupe non-POSIX en groupe\n" -"POSIX. Les groupes POSIX ne peuvent pas être convertis en groupes non-" -"POSIX.\n" -"\n" -"Chaque groupe doit avoir une description.\n" -"\n" -"Les groupes POSIX doivent avoir un numéro d'ID de groupe (GID). Modifier un\n" -"GID est faisable, mais cela peut avoir un impact sur vos droits d'accès aux\n" -"fichiers. Il n'est pas nécessaire d'indiquer un GID à la création du " -"groupe.\n" -"IPA en générera un automatiquement s'il n'est pas fourni.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau groupe :\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Ajouter un nouveau groupe non-POSIX :\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convertir un groupe non-POSIX en groupe POSIX :\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Ajouter un nouveau groupe POSIX avec un numéro d'ID de groupe donné :\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Ajouter un nouveau groupe POSIX et laisser IPA assigner un numéro d'ID de " -"groupe :\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Supprimer un groupe :\n" -" ipa group-del unixadmins\n" -"\n" -" Ajouter le groupe « remoteadmins » au groupe « localadmins » :\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Ajouter plusieurs utilisateurs au groupe « localadmins » :\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Supprimer un utilisateur du groupe « localadmins » :\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Afficher des informations à propos d'un groupe donné :\n" -" ipa group-show localadmins\n" -"\n" -"L'adhésion à un groupe externe est conçue pour permettre aux utilisateurs " -"de\n" -"domaines approuvés d'être assimilés aux groupes POSIX locaux pour pouvoir\n" -"utiliser réellement les ressources IPA. Des membres externes peuvent être\n" -"ajoutés aux groupes spécifiquement crées comme externes et non-POSIX. Un " -"tel\n" -"groupe peut plus tard être incorporé dans un des groupes POSIX\n" -"\n" -"Un membre de groupe externe est actuellement identifié par un « Security\n" -"Identifier (SID) » tel que défini pour le domaine approuvé. Pour ajouter\n" -"un membre de groupe externe, il est possible de le définir, soit au format\n" -"SID, soit DOM\\name, soit name@domain. IPA essayera de résoudre le nom " -"passé\n" -"en SID en se servant du « Global Catalog » des domaines approuvés.\n" -"\n" -"Exemple:\n" -"\n" -"1. Créer un groupe par assimilation au domaine approuvé « admins »\n" -" et à leur groupe POSIX local :\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Ajouter l'identifiant de sécurité de « Domain Admins » au\n" -" groupe externe « ad_admins_external » :\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Autoriser des membres du groupe « ad_admins_external » à être associés " -"au\n" -" groupe POSIX « ad_admins » :\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Lister les membres externes du groupe « ad_admins_external » pour voir\n" -" leur SID :\n" -"\n" -" ipa group-show ad_admins_external\n" +"La vue de la relation d'approbation par défaut ne peut être appliquée sur un " +"hôte" -msgid "groups" -msgstr "groupes" +msgid "ID View already applied" +msgstr "Vue d'identifiants déjà appliquée" -msgid "User Group" -msgstr "Groupe d'Utilisateurs" +msgid "value" +msgstr "valeur" #, python-format -msgid "Added group \"%(value)s\"" -msgstr "Groupe « %(value)s » créé" - -msgid "gid cannot be set for external group" -msgstr "l'identifiant de groupe ne peut être défini pour un groupe externe" +msgid "ID View applied to %i host." +msgstr "Vue d'identifiants appliquée à %i hôte." #, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Groupe « %(value)s » supprimé" - -msgid "privileged group" -msgstr "groupe avec privilèges" +msgid "ID View applied to %i hosts." +msgstr "Vue d'identifiants appliquée à %i hôtes." #, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Groupe « %(value)s » modifié" +msgid "ID View cleared from %i host." +msgstr "Vue d'identifiants retirée de %i hôte." #, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "%(count)d groupe correspondant" -msgstr[1] "%(count)d groupes correspondants" +msgid "ID View cleared from %i hosts." +msgstr "Vue d'identifiants retirée de %i hôtes." msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" -"Impossible de réaliser la validation de membre externe sans installer " -"Samba 4. Assurez-vous d'avoir installé le sous-paquet « IPAserver-trust-ad » " -"sur le serveur" +"Vous essayez de référencer un groupe privé magique qui ne peut être " +"surchargé. Essayez plutôt de surcharger l'attribut GID de l'utilisateur." + +msgid "IPA object" +msgstr "objet IPA" msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" msgstr "" -"Impossible de rejoindre un domaine sans avoir au préalable configuré son " -"propre domaine. Assurez-vous d'avoir lancé « ipa-adtrust-install » au " -"préalable sur le serveur" #, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Groupe « %(value)s » détaché de l'utilisateur « %(value)s »" +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "La balise « %(anchor)s » ne peut être résolue." -msgid "not allowed to modify user entries" -msgstr "modification des entrées d'un utilisateur interdite" +msgid "Default Trust View cannot contain IPA users" +msgstr "" +"La vue de la relation d'approbation par défaut ne peut contenir des " +"utilisateurs IPA" -msgid "not allowed to modify group entries" -msgstr "modification des entrées de groupe interdite" +msgid "Add a new ID override." +msgstr "Ajouter une nouvelle surcharge d'identifiant." -msgid "Not a managed group" -msgstr "Pas un groupe administré" +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants « %(value)s » ajoutée" -#, fuzzy -#| msgid "Add users that can manage this token." -msgid "Add users that can manage members of this group." -msgstr "Ajouter des utilisateurs pouvant gérer ce jeton." +msgid "Delete an ID override." +msgstr "Supprimer une surcharge d'identifiants." -#, fuzzy -#| msgid "Remove users that can manage this token." -msgid "Remove users that can manage members of this group." -msgstr "Supprimer des utilisateurs pouvant gérer ce jeton." +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants « %(value)s » supprimée" + +msgid "Modify an ID override." +msgstr "Modifier une surcharge d'identifiants." + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants « %(value)s » modifiée" + +msgid "ID override" +msgstr "Surcharge d'identifiants" + +msgid "ID overrides cannot be renamed" +msgstr "Les surchages d'identifiants ne peuvent être renommées" + +msgid "Search for an ID override." +msgstr "Rechercher une surcharge d'identifiants." + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d surcharge d'identifiants correspondante" +msgstr[1] "%(count)d surcharges d'identifiants correspondantes" + +msgid "Display information about an ID override." +msgstr "Afficher les informations d'une surcharge d'identifiants." + +msgid "User ID override" +msgstr "Surcharge d'identifiant utilisateur" + +msgid "User ID overrides" +msgstr "Surcharges d'identifiants utilisateurs" + +msgid "Group ID override" +msgstr "Surcharge d'identifiant de groupe" + +msgid "Group ID overrides" +msgstr "Surcharges d'identifiants de groupes" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" +"Ajouter un ou plusieurs certificats à l'entrée de l'utilisateur surchargé " +"(idoverrideuser)" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Certificats ajoutés à l'utilisateur surchargé « %(value)s »" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "Supprimer les certificats de l'entrée de l'utilisateur surchargé" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "Certificats supprimés de l'utilisateur surchargé « %(value)s »" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants utilisateurs « %(value)s » ajoutée" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants utilisateurs « %(value)s » supprimée" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants utilisateurs « %(value)s » modifiée" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "%(count)d surcharge d'identifiants utilisateurs correspondante" +msgstr[1] "%(count)d surcharges d'identifiants utilisateurs correspondantes" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants de groupes « %(value)s » ajoutée" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants de groupes « %(value)s » supprimée" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants de groupes « %(value)s » modifiée" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "%(count)d surcharge d'identifiants de groupes correspondante" +msgstr[1] "%(count)d surcharges d'identifiants de groupes correspondantes" msgid "" "\n" @@ -21696,1060 +26267,1341 @@ msgid_plural "%(count)d permissions matched" msgstr[0] "%(count)d permission correspondant" msgstr[1] "%(count)d permissions correspondant" -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"Jetons OTP\n" +msgid "delegation" +msgstr "délégation" -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" -"\n" -"Gérer les jetons OTP.\n" +msgid "delegations" +msgstr "délégations" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" -"\n" -"IPA prend en charge l'utilisation de jetons OTP pour une authentification\n" -"à facteurs multiples. Ce code active la gestion des jetons OTP.\n" +msgid "Delegations" +msgstr "Délégations" -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" -"\n" -" Ajouter un nouveau jeton :\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Examiner un jeton :\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" -"\n" -" Modifier le fournisseur :\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Supprimer un jeton :\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" - -msgid "OTP token" -msgstr "jeton OTP" - -msgid "OTP tokens" -msgstr "jetons OTP" - -msgid "OTP Tokens" -msgstr "Jetons OTP" - -msgid "OTP Token" -msgstr "Jeton OTP" - -msgid "URI" -msgstr "URI" +msgid "Delegation" +msgstr "Délégation" #, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Jeton OTP « %(value)s » ajouté" - -msgid "cannot be empty" -msgstr "ne peut pas être vide" +msgid "Added delegation \"%(value)s\"" +msgstr "Délégation « %(value)s » ajoutée" #, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Jeton OTP « %(value)s » supprimé" +msgid "Deleted delegation \"%(value)s\"" +msgstr "Délégation « %(value)s » supprimée" #, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Jeton OTP « %(value)s » modifié" +msgid "Modified delegation \"%(value)s\"" +msgstr "Délégation « %(value)s » modifiée" #, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "%(count)d jeton OTP correspond" -msgstr[1] "%(count)d jetons OTP correspondant" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "%(count)d délégation correspondante" +msgstr[1] "%(count)d délégations correspondantes" -msgid "" -"\n" -"Sudo Rules\n" +msgid "HBAC rule and local members cannot both be set" msgstr "" -"\n" -"Règles sudo\n" +"Des membres locaux et des membres d'une règle HBAC ne peuvent pas être " +"définis simultanément" -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" -"\n" -"Sudo (su « do ») autorise un administrateur système à déléguer la " -"possibilité\n" -" à certains utilisateurs (ou groupes d'utilisateurs) d'exécuter certaines\n" -" (ou toutes) commandes en tant qu'administrateur ou autre utilisateur, tout\n" -" en donnant des moyens de contrôle des commandes et de leurs arguments.\n" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" -"\n" -"IPA offre les moyens de configurer les divers aspects de sudo :\n" -" Users : utilisateur/groupe autorisés à invoquer sudo.\n" -" Hosts : hôte/groupe d'hôte dont l'utilisateur peut invoquer sudo.\n" -" Allow Command : commande donnée pouvant être exécutée via sudo.\n" -" Deny Command : commande donnée interdite d'exécution avec sudo.\n" -" RunAsUser : utilisateur ou groupe dont les droits sudo pourront être " -"invoqués.\n" -" RunAsGroup : groupe dont les droits sudo associés au GID pourront être " -"invoqués.\n" -" Options : les diverses options de sudoers pouvant modifier le " -"comportement de sudo.\n" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" -"\n" -"Il est possible d'ajouter aux règles sudo l'indication de l'ordre dans\n" -"lequel elles doivent être examinées (si le client le prend en charge).\n" -"Cet ordre est défini par un entier, qui doit être unique.\n" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" -"\n" -"IPA permet la désignation d'un « binddn » à utiliser avec sudo situé à :\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" -"\n" -"Pour activer « binddn », exécuter la commande pour fixer le mot de passe :\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" -"\n" -" Création d'une nouvelle règle :\n" -" ipa sudorule-add readfiles\n" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" -"\n" -" Ajout d'un objet de commande sudo et ajout en tant que commande autorisée " -"dans la règle :\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" -"\n" -" Ajout d'un hôte à la règle :\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" -"\n" -" Ajout d'un utilisateur à la règle :\n" -" ipa sudorule-add-user readfiles --users jsmith\n" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" -"\n" -" Ajout d'une règle sudo spéciale pour la configuration du serveur sudo par " -"défaut :\n" -" ipa sudorule-add defaults\n" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" -"\n" -" Définition d'une option par défaut pour sudo :\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgid "Invalid SELinux user name, must match {}" msgstr "" -msgid "this option has been deprecated." -msgstr "cette option a été abandonnée." +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" -msgid "sudo rules" -msgstr "règles sudo" +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" -msgid "Sudo Rules" -msgstr "Règles sudo" - -msgid "Sudo Rule" -msgstr "Règle sudo" +msgid "SELinux user map list not found in configuration" +msgstr "" +"Liste de correspondance d'utilisateurs SELinux introuvable dans cette " +"configuration" #, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgid "SELinux user %(user)s not found in ordering list (in config)" msgstr "" -"le rang doit être une valeur unique (%(order)d déjà utilisée par %(rule)s)" +"Utilisateur SELinux %(user)s introuvable dans la liste ordonnée (dans la " +"configuration)" + +msgid "SELinux User Map rule" +msgstr "Règle de mappe utilisateurs SELinux" + +msgid "SELinux User Map rules" +msgstr "Règles de mappes utilisateurs SELinux" + +msgid "SELinux User Maps" +msgstr "Mappes d'utilisateurs SELinux" + +msgid "SELinux User Map" +msgstr "Mappe d'utilisateurs SELinux" #, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Règle sudo « %(value)s » ajoutée" +msgid "HBAC rule %(rule)s not found" +msgstr "Règle HBAC %(rule)s introuvable" #, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Règle sudo « %(value)s » supprimée" +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "Mappe d'utilisateurs SELinux « %(value)s » ajoutée" #, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Règle sudo « %(value)s » modifiée" +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "Mappe d'utilisateurs SELinux « %(value)s » supprimée." + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "Mappe d'utilisateurs SELinux « %(value)s » modifiée" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "%(count)d mappe d'utilisateurs SELinux correspondant" +msgstr[1] "%(count)d mappe d'utilisateurs SELinux correspondant" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "Mappe d'utilisateurs SELinux « %(value)s » activée" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "Mappe d'utilisateurs SELinux « %(value)s » désactivée" + +msgid "" +"\n" +"IPA servers\n" +msgstr "" +"\n" +"Serveurs IPA\n" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" +"\n" +"Afficher les informations au sujet des serveurs IPA installés.\n" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +" Trouver tous les serveurs :\n" +" ipa server-find\n" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" +"\n" +" Afficher les informations d'un serveur en particulier :\n" +" ipa server-show ipa.example.com\n" + +msgid "server" +msgstr "serveur" + +msgid "servers" +msgstr "serveurs" + +msgid "IPA Servers" +msgstr "Serveurs IPA" + +msgid "Server location" +msgstr "Emplacement de serveur" + +msgid "Service weight" +msgstr "Poids du service" + +msgid "Weight for server services" +msgstr "Poids des services des serveurs" + +msgid "Service relative weight" +msgstr "Poids relatif du service" + +msgid "Relative weight for server services (counts per location)" +msgstr "Poids relatifs des services des serveurs (compte par emplacement)" + +msgid "Enabled server roles" +msgstr "Rôles serveur activés" + +msgid "List of enabled roles" +msgstr "Liste des rôles activés" + +msgid "Modify information about an IPA server." +msgstr "Modifier les informations d'un serveur IPA." + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "Serveur IPA \"%(value)s\" modifié" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "%(count)d serveur IPA correspondant" +msgstr[1] "%(count)d serveurs IPA correspondants" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Serveur IPA « %(value)s » supprimé" + +msgid "Ignore topology errors" +msgstr "Ignorer les erreurs de topologie" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" +"Ignorer les problèmes de connectivité dans la topologie après suppression" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "Ignorer la vérification de dernier serveur d'AC ou DNS" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" +"Passer la vérification lorsque le dernier serveur DNS ou AC maître est " +"supprimé" + +msgid "Force server removal" +msgstr "Forcer la suppression du serveur" + +msgid "Force server removal even if it does not exist" +msgstr "Forcer la suppression du serveur même s'il n'existe pas" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" +"La réplique est un serveur de clés DNSSEC actif. Le désinstaller pourrait " +"casser votre système DNS. Merci de d'abord désactiver ou de remplacer votre " +"serveur de clés DNSSEC." + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "La suppression de ce serveur laissera votre installation sans DNS." + +#, fuzzy +#| msgid "" +#| "Deleting this server is not allowed as it would leave your installation " +#| "without a CA." +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" +"La suppression de ce serveur n'est pas autorisée, elle laisserait votre " +"installation sans AC." + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" +"La suppression de ce serveur n'est pas autorisée, elle laisserait votre " +"installation sans AC." + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "On ignore ces avertissements et lancement de la suppression" #, python-format msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" -"la catégorie %(type)s ne peut pas être définie à « all » tant que sont " -"alloués %(objects)s" - -msgid "users" -msgstr "utilisateurs" - -msgid "command" -msgstr "commande" - -msgid "commands" -msgstr "commandes" - -msgid "runAs user" -msgstr "utilisateur runAs" - -msgid "runAs users" -msgstr "utilisateurs runAs" - -msgid "group runAs" -msgstr "groupe runAs" - -msgid "runAs groups" -msgstr "groupes runAs" +"Échec du nettoyage du memberPrincipal %(principal)s dans l'entrée s4u2proxy " +"%(dn)s : %(err)s" #, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "%(count)d règle sudo correspondant" -msgstr[1] "%(count)d règles sudo correspondant" - -msgid "commands cannot be added when command category='all'" +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" msgstr "" -"des commandes ne peuvent pas être ajoutées quand la catégorie de commande " -"est « all »" +"Échec du nettoyage des entrées du nom d'hôte DNA pour %(master)s : %(err)s" -msgid "users cannot be added when runAs user or runAs group category='all'" +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" msgstr "" -"des utilisateurs ne peuvent pas être ajoutés quand la catégorie « RunAs " -"User » ou « RunAs Group » est « all »" +"Échec de la suppression du serveur %(master)s de la liste de serveurs : " +"%(err)s" + +#, fuzzy, python-format +#| msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" +"Échec du nettoyage des entrées du nom d'hôte DNA pour %(master)s : %(err)s" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "« RunAsUser » n'accepte pas « %(name)s » comme nom d'utilisateur" +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "Échec du nettoyage du principal ou des clés du serveur : %(err)s" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "« RunAsUser » n'accepte pas « %(name)s » comme nom de groupe" +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "Échec du nettoyage des entrées DNS de %(hostname)s : %(err)s" + +msgid "You may need to manually remove them from the tree" +msgstr "Vous pouvez avoir besoin de les supprimer manuellement de l'arbre" #, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "« RunAsGroup » n'accepte pas « %(name)s » comme nom de groupe" +msgid "Forcing removal of %(hostname)s" +msgstr "On force la suppression de %(hostname)s" -msgid "commands for controlling sudo configuration" -msgstr "commandes pour contrôler la configuration sudo" +msgid "Ignoring topology connectivity errors." +msgstr "On ignore les erreurs de connectivité de la topologie." + +msgid "Server has already been deleted" +msgstr "Le serveur a déjà été supprimé" + +msgid "Agreements deleted" +msgstr "Agréments supprimés" + +msgid "Following segments were not deleted:" +msgstr "Les segments suivants n'ont pas été supprimés :" + +msgid "not allowed to perform server connection check" +msgstr "impossible d'effectuer la vérification de la connexion au serveur" + +#, fuzzy +#| msgid "Show role status on a server" +msgid "Set enabled/hidden state of a server." +msgstr "Afficher l'état du rôle sur un serveur" + +#, fuzzy +#| msgid "Status" +msgid "State" +msgstr "État" + +#, fuzzy +#| msgid "Server Name" +msgid "Server state" +msgstr "Nom du serveur" + +#, fuzzy, python-format +#| msgid "Changed password for \"%(value)s\"" +msgid "Changed server state of \"%(value)s\"." +msgstr "Mot de passe modifié pour « %(value)s »" + +#, fuzzy +#| msgid "IPA CA renewal master" +msgid "Cannot hide CA renewal master." +msgstr "Maître de renouvellement d'AC IPA" + +#, fuzzy +#| msgid "IPA DNSSec key master" +msgid "Cannot hide DNSSec key master." +msgstr "Maître des clés DNSSec IPA" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" msgid "" "\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" +"Session Support for IPA\n" msgstr "" + +#, fuzzy +#| msgid "Certificate Authorities" +msgid "" "\n" -"Commandes sudo\n" -"\n" -"Commandes utilisées en tant que briques de base pour sudo\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter une nouvelle commande\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Supprimer une commande\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" - -msgid "sudo command" -msgstr "commande sudo" - -msgid "sudo commands" -msgstr "commandes sudo" - -msgid "Sudo Commands" -msgstr "Commandes sudo" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Commande sudo « %(value)s » ajoutée" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Commande sudo « %(value)s » supprimée" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Commande sudo « %(value)s » modifiée" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "%(count)d commande sudo correspondant" -msgstr[1] "%(count)d commandes sudo correspondant" +"Manage Certificate Authorities\n" +msgstr "Autorités de certification" msgid "" "\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" msgstr "" -"\n" -"Groupes de commandes sudo\n" -"\n" -"Administre les groupes de commandes sudo.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau groupe de commandes sudo :\n" -" ipa sudocmdgroup-add --desc='commandes administrateurs' admincmds\n" -"\n" -" Supprimer un groupe de commandes sudo :\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Gérer les commandes, l'appartenance d'un groupe de commandes sudo :\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Administrer les commandes, l'appartenance d'un groupe de commandes sudo :\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Afficher un groupe de commandes sudo :\n" -" ipa sudocmdgroup-show admincmds\n" -msgid "sudo command group" -msgstr "groupe de commandes sudo" +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" -msgid "sudo command groups" -msgstr "groupes de commandes sudo" +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "Autorité de certification" + +msgid "Certificate Authorities" +msgstr "Autorités de certification" + +msgid "Name for referencing the CA" +msgstr "Nom de référencement de l'AC" + +msgid "Description of the purpose of the CA" +msgstr "Description de l'objet de l'AC" + +msgid "Authority ID" +msgstr "ID de l'autorité" + +msgid "Dogtag Authority ID" +msgstr "ID de l'autorité Dogtag" + +msgid "Subject DN" +msgstr "DN de l'objet" + +msgid "Subject Distinguished Name" +msgstr "Nom distinctif de l'objet" + +msgid "Issuer Distinguished Name" +msgstr "Nom distinctif de l'émetteur" + +msgid "Search for CAs." +msgstr "Rechercher des AC." #, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Groupe de commandes sudo « %(value)s » ajouté" +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "%(count)d AC correspondante" +msgstr[1] "%(count)d AC correspondantes" + +msgid "Display the properties of a CA." +msgstr "Afficher les propriétés d'une AC." + +msgid "Create a CA." +msgstr "Créer une AC." #, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Groupe de commandes sudo « %(value)s » supprimé" +msgid "Created CA \"%(value)s\"" +msgstr "AC « %(value)s » créée" #, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Groupe de commandes sudo « %(value)s » modifié." +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "Privilège « add » insuffisant pour l'entrée « %s »." #, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "%(count)d groupe de commandes Sudo correspondant" -msgstr[1] "%(count)d groupes de commandes Sudo correspondant" +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "AC « %(value)s » supprimée" + +#, fuzzy +#| msgid "Insufficient 'add' privilege for entry '%s'." +msgid "Insufficient privilege to delete a CA." +msgstr "Privilège « add » insuffisant pour l'entrée « %s »." + +msgid "CA" +msgstr "AC" + +msgid "IPA CA cannot be deleted" +msgstr "L'AC de IPA ne peut être supprimée" + +#, fuzzy +#| msgid "Must be a decimal number" +msgid "Must be disabled first" +msgstr "Doit être un nombre décimal" + +msgid "Modify CA configuration." +msgstr "Modifier la configuration de l'AC" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "AC « %(value)s » modifiée" + +#, fuzzy +#| msgid "Insufficient 'add' privilege for entry '%s'." +msgid "Insufficient privilege to modify a CA." +msgstr "Privilège « add » insuffisant pour l'entrée « %s »." + +#, fuzzy +#| msgid "Disable a CA ACL." +msgid "Disable a CA." +msgstr "Désactiver une LCA d'AC." + +#, fuzzy, python-format +#| msgid "Disabled CA ACL \"%(value)s\"" +msgid "Disabled CA \"%(value)s\"" +msgstr "LCA d'AC « %(value)s » désactivée" + +#, fuzzy +#| msgid "IPA CA cannot be deleted" +msgid "IPA CA cannot be disabled" +msgstr "L'AC de IPA ne peut être supprimée" + +#, fuzzy +#| msgid "Enable a CA ACL." +msgid "Enable a CA." +msgstr "Activer une LCA d'AC." + +#, fuzzy, python-format +#| msgid "Enabled CA ACL \"%(value)s\"" +msgid "Enabled CA \"%(value)s\"" +msgstr "LCA d'AC « %(value)s » activée" + +#, fuzzy +#| msgid "Certificate Authority" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "Autorité de certification" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" #, fuzzy #| msgid "" #| "\n" -#| "Realm domains\n" -#| "\n" -#| "Manage the list of domains associated with IPA realm.\n" -#| "\n" -#| "EXAMPLES:\n" -#| "\n" -#| " Display the current list of realm domains:\n" -#| " ipa realmdomains-show\n" -#| "\n" -#| " Replace the list of realm domains:\n" -#| " ipa realmdomains-mod --domain=example.com\n" -#| " ipa realmdomains-mod --domain={example1.com,example2.com,example3." -#| "com}\n" -#| "\n" -#| " Add a domain to the list of realm domains:\n" -#| " ipa realmdomains-mod --add-domain=newdomain.com\n" -#| "\n" -#| " Delete a domain from the list of realm domains:\n" -#| " ipa realmdomains-mod --del-domain=olddomain.com\n" +#| " Display vault configuration:\n" +#| " ipa vaultconfig-show\n" msgid "" "\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" msgstr "" "\n" -"Domaines du royaume\n" -"\n" -"Gérer la liste des domaines associés au royaume IPA.\n" -"\n" -"EXEMPLES:\n" -"\n" -" Afficher la liste actuelle des domaines du royaume :\n" -" ipa realmdomains-show\n" -"\n" -" Remplacer la liste des domaines du royaume :\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Ajouter un domaine à la liste des domaines du royaume :\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Supprimer un domaine de la liste des domaines du royaume :\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" - -msgid "Realm domains" -msgstr "Domaines du royaume" - -msgid "Realm Domains" -msgstr "Domaines pour le royaume" +" Afficher la configuration des coffres-forts :\n" +" ipa vaultconfig-show\n" msgid "" "\n" -" Modify realm domains\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" "\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" "\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +#, fuzzy +#| msgid "Display information about a named service delegation rule." +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" +"Afficher les informations au sujet d'une règle de délégation de service." + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +#, fuzzy +#| msgid "Modify configuration options." +msgid "Certificate Identity Mapping configuration options" +msgstr "Modifier les options de configuration." + +#, fuzzy +#| msgid "Modify Certificate Profile configuration." +msgid "Certificate Identity Mapping Global Configuration" +msgstr "Modifier la configuration d'un profil de certificat." + +#, fuzzy +#| msgid "Prompt to set the user password" +msgid "Prompt for the username" +msgstr "Invite de définition du mot de passe utilisateur" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +#, fuzzy +#| msgid "Modify Certificate Profile configuration." +msgid "Modify Certificate Identity Mapping configuration." +msgstr "Modifier la configuration d'un profil de certificat." + +#, fuzzy +#| msgid "Show the current configuration." +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "Afficher la configuration actuelle." + +#, fuzzy +#| msgid "Certificate Authorities" +msgid "Certificate Identity Mapping Rules" +msgstr "Autorités de certification" + +#, fuzzy +#| msgid "Certificate Type" +msgid "Certificate Identity Mapping Rule" +msgstr "Type de certificat" + +#, fuzzy +#| msgid "Certificate profiles cannot be renamed" +msgid "Certificate Identity Mapping Rule name" +msgstr "Les profils de certificats ne peuvent être renommés" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Rule used to map the certificate with a user entry" +msgstr "Supprimer les certificats de l'entrée de l'utilisateur" + +#, fuzzy +#| msgid "Matching Type" +msgid "Matching rule" +msgstr "Type correspondant" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +#, fuzzy +#| msgid "Priority of the policy (higher number means lower priority" +msgid "Priority of the rule (higher number means lower priority" +msgstr "Priorité de la politique (une valeur élevé indique une priorité basse)" + +#, fuzzy +#| msgid "Create a new service delegation rule." +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "Créer une nouvelle règle de délégation de service" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" + +#, fuzzy +#| msgid "Modify Certificate Profile configuration." +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "Modifier la configuration d'un profil de certificat." + +#, fuzzy, python-format +#| msgid "Modified Certificate Profile \"%(value)s\"" +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Profil de certificat « %(value)s » modifié" + +#, fuzzy +#| msgid "Search for Certificate Profiles." +msgid "Search for Certificate Identity Mapping Rules." +msgstr "Rechercher des profils de certificats." + +#, fuzzy, python-format +#| msgid "%(count)d service delegation rule matched" +#| msgid_plural "%(count)d service delegation rules matched" +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "%(count)d règle de délégation de service correspondante" +msgstr[1] "%(count)d règles de délégation de service correspondantes" + +#, fuzzy +#| msgid "Display information about a named service delegation rule." +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" +"Afficher les informations au sujet d'une règle de délégation de service." + +#, fuzzy +#| msgid "Delete a Certificate Profile." +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "Supprimer un profil de certificat." + +#, fuzzy, python-format +#| msgid "Deleted service delegation target \"%(value)s\"" +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Cible de délégation de service « %(value)s » supprimée" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" + +#, fuzzy +#| msgid "Delete a Certificate Profile." +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "Supprimer un profil de certificat." + +#, fuzzy, python-format +#| msgid "Modified Certificate Profile \"%(value)s\"" +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Profil de certificat « %(value)s » modifié" + +#, fuzzy +#| msgid "" +#| "Fetching domains from trusted forest failed. See details in the error_log" +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" +"Échec de la récupération des domaines depuis la forêt approuvée. Voir les " +"informations détaillées dans le journal d'erreur." + +#, fuzzy +#| msgid "" +#| "Fetching domains from trusted forest failed. See details in the error_log" +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" +"Échec de la récupération des domaines depuis la forêt approuvée. Voir les " +"informations détaillées dans le journal d'erreur." + +#, fuzzy +#| msgid "User login" +msgid "User logins" +msgstr "Identifiant de connexion" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" " " msgstr "" -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" -"La zone DNS de chaque domaine Kerberos doit contenir des enregistrements SOA " -"et NS. Aucun enregistrement trouvé pour : %s" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" -"Les domaines suivants n'appartiennent pas à ce domaine Kerberos : %(domains)s" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" -"Le domaine Kerberos des domaines suivants ne peuvent être détectés : " -"%(domains)s. S'il existe des domaines appartenant à ce royaume, merci de " -"créer un enregistrement TXT kerberos contenant « %(realm)s » dans chacun " -"d'entre eux." - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" -"L'option « --domain » ne peut être utilisée conjointement avec les options " -"« --add-domain » or « --del-domain ». Utilisez « --domain » pour indiquer " -"explicitement la liste complète des domaines du royaume, utilisez « --add-" -"domain » et « --del-domain » pour ajouter et supprimer les domaines de " -"manière individuelle." - -msgid "IPA server domain cannot be omitted" -msgstr "Le domaine du serveur IPA ne peut être omis" - -msgid "IPA server domain cannot be deleted" -msgstr "Le domaine du serveur IPA ne peut être supprimé" +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "%(count)d utilisateur correspondant" +msgstr[1] "%(count)d utilisateurs correspondant" +#, fuzzy +#| msgid "" +#| "\n" +#| "Server configuration\n" +#| "\n" +#| "Manage the default values that IPA uses and some of its tuning " +#| "parameters.\n" +#| "\n" +#| "NOTES:\n" +#| "\n" +#| "The password notification value (--pwdexpnotify) is stored here so it " +#| "will\n" +#| "be replicated. It is not currently used to notify users in advance of an\n" +#| "expiring password.\n" +#| "\n" +#| "Some attributes are read-only, provided only for information purposes. " +#| "These\n" +#| "include:\n" +#| "\n" +#| "Certificate Subject base: the configured certificate subject base,\n" +#| " e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +#| "Password plug-in features: currently defines additional hashes that the\n" +#| " password will generate (there may be other conditions).\n" +#| "\n" +#| "When setting the order list for mapping SELinux users you may need to\n" +#| "quote the value so it isn't interpreted by the shell.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Show basic server configuration:\n" +#| " ipa config-show\n" +#| "\n" +#| " Show all configuration options:\n" +#| " ipa config-show --all\n" +#| "\n" +#| " Change maximum username length to 99 characters:\n" +#| " ipa config-mod --maxusername=99\n" +#| "\n" +#| " Increase default time and size limits for maximum IPA server search:\n" +#| " ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +#| "\n" +#| " Set default user e-mail domain:\n" +#| " ipa config-mod --emaildomain=example.com\n" +#| "\n" +#| " Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +#| " ipa config-mod --enable-migration=TRUE\n" +#| "\n" +#| " Define SELinux user map order:\n" +#| " ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:" +#| "s0-s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" msgid "" "\n" -"Return information about currently authenticated identity\n" +"Server configuration\n" "\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" "\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" +"NOTES:\n" "\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" "\n" "EXAMPLES:\n" "\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" +" Show basic server configuration:\n" +" ipa config-show\n" "\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" +" Show all configuration options:\n" +" ipa config-show --all\n" "\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" "\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -#, fuzzy -#| msgid "User object class" -msgid "Object class name" -msgstr "Classe d'objets utilisateur" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "réglages de la politique de tickets Kerberos" - -msgid "Kerberos Ticket Policy" -msgstr "Politique de tickets Kerberos" - -#, fuzzy -#| msgid "Max life" -msgid "OTP max life" -msgstr "Vie max." - -#, fuzzy -#| msgid "Maximum ticket life (seconds)" -msgid "OTP token maximum ticket life (seconds)" -msgstr "Durée de vie maximale (secondes)" - -#, fuzzy -#| msgid "Max renew" -msgid "OTP max renew" -msgstr "Renouvellement max." - -#, fuzzy -#| msgid "Maximum renewable age (seconds)" -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "Durée maximale de la période de renouvellement (secondes)" - -#, fuzzy -#| msgid "Max life" -msgid "RADIUS max life" -msgstr "Vie max." - -#, fuzzy -#| msgid "Maximum ticket life (seconds)" -msgid "RADIUS maximum ticket life (seconds)" -msgstr "Durée de vie maximale (secondes)" - -#, fuzzy -#| msgid "RADIUS proxy server name" -msgid "RADIUS max renew" -msgstr "Nom du serveur mandataire RADIUS" - -#, fuzzy -#| msgid "Maximum renewable age (seconds)" -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "Durée maximale de la période de renouvellement (secondes)" - -#, fuzzy -#| msgid "Max life" -msgid "PKINIT max life" -msgstr "Vie max." - -#, fuzzy -#| msgid "Maximum ticket life (seconds)" -msgid "PKINIT maximum ticket life (seconds)" -msgstr "Durée de vie maximale (secondes)" - -#, fuzzy -#| msgid "Max renew" -msgid "PKINIT max renew" -msgstr "Renouvellement max." - -#, fuzzy -#| msgid "Maximum renewable age (seconds)" -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "Durée maximale de la période de renouvellement (secondes)" - -msgid "Hardened max life" -msgstr "" - -#, fuzzy -#| msgid "Maximum ticket life (seconds)" -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "Durée de vie maximale (secondes)" - -msgid "Hardened max renew" -msgstr "" - -#, fuzzy -#| msgid "Maximum renewable age (seconds)" -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "Durée maximale de la période de renouvellement (secondes)" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "La politique de ticket pour %s ne peut pas être lue" - -msgid "Default ticket policy could not be read" -msgstr "La politique de ticket par défaut ne peut pas être lue" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" -"Impossible de lire « originfilter » de « UPG Definition ». Vérifiez vos " -"permissions." - -msgid "" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" "\n" -"IPA locations\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" msgstr "" "\n" -"Emplacements IPA\n" - -msgid "" +"Configuration du serveur\n" "\n" -"Manipulate DNS locations\n" -msgstr "" +"Gérer les valeurs par défaut utilisées par IPA ainsi que certains de ses\n" +"paramètres d'ajustement.\n" "\n" -"Manipulation des emplacements DNS\n" - -msgid "" +"NOTES :\n" "\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" +"La valeur de notification du mot de passe (--pwdexpnotify) est stockée ici\n" +"en vue de sa réplication. Elle n'est pas actuellement utilisée pour " +"notifier\n" +"par avance aux utilisateurs l'expiration de leur mot de passe.\n" "\n" -" Trouver tous les emplacements :\n" -" ipa location-find\n" - -msgid "" +"Certains attributs sont en lecture seule, fournis à titre d'information ;\n" +"ils comprennent :\n" "\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" +"* la base sujet de certificat : la base de sujet de certificat configuré,\n" +" ex. O=EXAMPLE.COM, configurable uniquement à l'installation.\n" +"* les fonctions du greffon mots de passe : définit les hachages " +"additionnels\n" +" qu'un mot de passe va générer (d'autres conditions peuvent s'appliquer).\n" "\n" -" Afficher un emplacement spécifique :\n" -" ipa location-show location\n" - -msgid "" +"En fixant la liste ordonnée pour le mappage des utilisateurs SELinux, vous\n" +"devez mettre entre guillemets les valeurs pour éviter leur interprétation.\n" "\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" +"EXEMPLES :\n" "\n" -" Ajouter un emplacement :\n" -" ipa location-add location --description 'Mon emplacement'\n" - -msgid "" +" Afficher la configuration de base du serveur :\n" +" ipa config-show\n" "\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" +" Afficher toutes les options de configuration :\n" +" ipa config-show --all\n" "\n" -" Supprimer un emplacement :\n" -" ipa location-del location\n" - -msgid "location" -msgstr "emplacement" - -msgid "locations" -msgstr "emplacements" - -msgid "IPA Locations" -msgstr "Emplacements IPA" - -msgid "IPA Location" -msgstr "Emplacement IPA" - -msgid "Location name" -msgstr "Nom de l'emplacement" - -msgid "IPA location name" -msgstr "Nom de l'emplacement IPA" - -msgid "IPA Location description" -msgstr "Description de l'emplacement IPA" - -msgid "Servers" -msgstr "Serveurs" - -msgid "Servers that belongs to the IPA location" -msgstr "Serveurs appartenants à l'emplacement IPA" - -msgid "Advertised by servers" -msgstr "Publié par les serveurs" - -msgid "List of servers which advertise the given location" -msgstr "Liste des serveurs qui publient un emplacement donné" - -msgid "Add a new IPA location." -msgstr "Ajouter un nouvel emplacement IPA." - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Emplacement IPA « %(value)s » ajouté" - -msgid "Delete an IPA location." -msgstr "Supprimer un emplacement IPA." - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Emplacement IPA « %(value)s » supprimé" - -msgid "IPA Server" -msgstr "Serveur IPA" - -msgid "Modify information about an IPA location." -msgstr "Modifier les informations d'un emplacement IPA." - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "Emplacement IPA « %(value)s » modifié" - -msgid "Search for IPA locations." -msgstr "Rechercher des emplacements IPA." - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "%(count)d emplacement IPA correspondant" -msgstr[1] "%(count)d emplacements IPA correspondants" - -msgid "Display information about an IPA location." -msgstr "Afficher les informations d'un emplacement IPA." - -msgid "Servers in location" -msgstr "Serveurs situés à l'emplacement" - -msgid "" +" Modifier la longueur maximale d'un nom d'utilisateur à 99 caractères :\n" +" ipa config-mod --maxusername=99\n" "\n" -"API Schema\n" -msgstr "" +" Augmenter délais et limites de taille des recherches sur le serveur IPA :\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" "\n" -"Schéma de l'API\n" - -msgid "" +" Définir le domaine pour les courriels de l'utilisateur par défaut :\n" +" ipa config-mod --emaildomain=example.com\n" "\n" -"Provides API introspection capabilities.\n" -msgstr "" +" Activer le mode migration pour que « ipa migrate-ds » soit opérationelle :\n" +" ipa config-mod --enable-migration=TRUE\n" "\n" -"Fournit des capacités d'introspection de l'API.\n" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" -"\n" -" Afficher les informations sur user-find :\n" -" ipa command-show user-find\n" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" -"\n" -" Trouver les arguments disponibles pour user-find :\n" -" ipa param-find user-find\n" - -msgid "Name" -msgstr "Nom" - -msgid "Documentation" -msgstr "Documentation" - -msgid "Exclude from" -msgstr "Exclure de" - -msgid "Include in" -msgstr "Inclure dans" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« %s »)" - -msgid "Help topic" -msgstr "Sujet de l'aide" - -msgid "Version" -msgstr "Version" - -msgid "Parameters" -msgstr "Paramètres" - -msgid "Method of" -msgstr "" +" Définir l'ordre de la mappe des utilisateurs SELinux :\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" #, fuzzy -#| msgid "Record name" -msgid "Method name" -msgstr "Nom d'enregistrement" +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 10" +msgstr "doit être supérieur ou égal à %(minvalue)d" -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s : %(oname)s introuvable" +msgid "configuration options" +msgstr "options de configuration" -msgid "Display information about a command." -msgstr "Afficher des informations sur une commande." - -msgid "Search for commands." -msgstr "Rechercher des commandes." +msgid "Configuration" +msgstr "Configuration" #, fuzzy -#| msgid "Run Commands" -msgid "Return command defaults" -msgstr "Exécute les commandes" +#| msgid "Maximum username length" +msgid "Maximum hostname length" +msgstr "Longueur maximale du nom d'utilisateur" + +msgid "IPA masters" +msgstr "Maîtres IPA" + +msgid "List of all IPA masters" +msgstr "Liste des maîtres IPA" #, fuzzy -#| msgid "Display information about a host." -msgid "Display information about a class." -msgstr "Afficher les informations sur un hôte." +#| msgid "IPA masters" +msgid "Hidden IPA masters" +msgstr "Maîtres IPA" #, fuzzy -#| msgid "Search for roles." -msgid "Search for classes." -msgstr "Rechercher des rôles." +#| msgid "List of all IPA masters" +msgid "List of all hidden IPA masters" +msgstr "Liste des maîtres IPA" -msgid "Display information about a help topic." -msgstr "Afficher les informations sur un sujet de l'aide." +msgid "IPA master capable of PKINIT" +msgstr "" -msgid "Search for help topics." -msgstr "Rechercher des sujets de l'aide." +msgid "IPA master which can process PKINIT requests" +msgstr "" -msgid "Required" -msgstr "Requis" +msgid "IPA CA servers" +msgstr "Serveurs d'AC IPA" -msgid "Multi-value" -msgstr "Multi-valué" - -msgid "Always ask" -msgstr "Toujours demander" - -msgid "CLI metavar" -msgstr "Metavariable CLI" - -msgid "CLI name" -msgstr "Nom CLI" - -msgid "Confirm (password)" -msgstr "Confirmer le mot de passe" - -msgid "Default" -msgstr "Par défaut" - -msgid "Default from" -msgstr "Valeur par défaut depuis" - -msgid "Label" -msgstr "Étiquette" - -msgid "Convert on server" -msgstr "Convertir sur le serveur" - -msgid "Option group" -msgstr "Groupe d'options" - -msgid "Sensitive" -msgstr "Sensible" +msgid "IPA servers configured as certificate authority" +msgstr "Serveurs IPA configurés comme autorité de certification" #, fuzzy -#| msgid "Positional arguments" -msgid "Positional argument" -msgstr "Arguments positionnels" +#| msgid "IPA CA servers" +msgid "Hidden IPA CA servers" +msgstr "Serveurs d'AC IPA" + +#, fuzzy +#| msgid "IPA servers configured as certificate authority" +msgid "Hidden IPA servers configured as certificate authority" +msgstr "Serveurs IPA configurés comme autorité de certification" + +msgid "IPA CA renewal master" +msgstr "Maître de renouvellement d'AC IPA" + +msgid "Renewal master for IPA certificate authority" +msgstr "Maître en charge du renouvellement de l'autorité de certification" + +#, fuzzy +#| msgid "IPA servers configured as key recovery agents" +msgid "IPA servers configured as key recovery agent" +msgstr "Serveurs IPA configurés comme agents de recouvrement de clés" + +#, fuzzy +#| msgid "IPA KRA servers" +msgid "Hidden IPA KRA servers" +msgstr "Serveurs KRA IPA" + +#, fuzzy +#| msgid "IPA servers configured as key recovery agents" +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "Serveurs IPA configurés comme agents de recouvrement de clés" + +#, fuzzy +#| msgid "IPA server configured as DNSSec key master" +msgid "IPA servers configured as domain name server" +msgstr "Serveur IPA configuré comme maître des clés DNSSec" + +#, fuzzy +#| msgid "IPA DNS servers" +msgid "Hidden IPA DNS servers" +msgstr "Serveurs DNS IPA" + +#, fuzzy +#| msgid "IPA servers configured as key recovery agents" +msgid "Hidden IPA servers configured as domain name server" +msgstr "Serveurs IPA configurés comme agents de recouvrement de clés" + +#, fuzzy +#| msgid "IPA DNSSec key master" +msgid "DNSec key master" +msgstr "Maître des clés DNSSec IPA" + +#, fuzzy +#| msgid "options are not allowed" +msgid "Empty domain is not allowed" +msgstr "les options ne sont pas autorisées" #, fuzzy, python-format -#| msgid "%(parent)s: %(oname)s not found" -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(parent)s : %(oname)s introuvable" - -msgid "Display information about a command parameter." -msgstr "Afficher des informations sur un paramètre de commande." - -msgid "Search command parameters." -msgstr "Rechercher des paramètres de commandes." +#| msgid "invalid domain-name: %s" +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "nom de domaine invalide : %s" #, fuzzy, python-format -#| msgid "%(parent)s: %(oname)s not found" -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(parent)s : %(oname)s introuvable" +#| msgid "Removed information about the trusted domain \"%(value)s\"" +msgid "Server has no information about domain '%(domain)s'" +msgstr "Informations sur le domaine approuvé « %(value)s » supprimées" -msgid "Display information about a command output." -msgstr "Afficher les informations sur une sortie de commande." - -msgid "Search for command outputs." -msgstr "Rechercher des sorties de commande." - -msgid "Store and provide schema for commands and topics" +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" msgstr "" -msgid "Fingerprint of schema cached by client" +msgid "The group doesn't exist" +msgstr "Le groupe n'existe pas" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "attribut « %s » interdit" + +msgid "May not be empty" +msgstr "Ne peut pas être vide" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "L'attribut par défaut %(attr)s de %(obj)s n'est pas autorisé !" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "Est attendue une liste des utilisateurs SELinux, délimités par des $" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "L'utilisateur SELinux « %(user)s » n'est pas valide : %(error)s" + +msgid "SELinux user map default user not in order list" msgstr "" +"L'utilisateur par défaut de la mappe utilisateur SELinux n'est pas dans la " +"liste d'ordre" + +msgid "REST API is not logged in." +msgstr "L'API REST n'est pas connectée." + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" +"Réponse non 2xx reçue de l'API REST de l'AC : %(status)d. %(explanation)s" + +msgid "Unable to communicate with CMS" +msgstr "Impossible de communiquer avec le CMS" + +msgid "Response from CA was not valid JSON" +msgstr "La réponse de l'AC n'est pas dans un format JSON valide" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" +"\n" +"Hôtes/Machines\n" +"\n" +"Un hôte représente une machine. Il peut être utilisé dans de nombreux " +"contextes :\n" +"- les entrées de services sont associées à un hôte,\n" +"- un hôte stocke le principal des hôtes/des services,\n" +"- un hôte est utilisable dans les règles HBAC (Host-based Access Control),\n" +"- chaque client enregistré génère une entrée d'hôte.\n" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" +"\n" +"INSCRIPTION :\n" +"\n" +"Trois scenarii d'inscriptions d'un nouveau client sont possibles :\n" +"\n" +"1. La machine est enregistrée par un administrateur de plein droit.\n" +" L'entrée système peut pré-exister ou non. Un administrateur de\n" +" plein droit est membre du rôle hostadmin ou du groupe admins\n" +"2. L'inscription est faite par un administrateur limité. L'hôte\n" +" doit avoir été préalablement créé. Un administrateur limité\n" +" possède le privilège Host Enrollment.\n" +"3. Le système a été créé avec un mot de passe à usage unique.\n" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" +"\n" +"RÉINSCRIPTION :\n" +"\n" +"Un hôte déjà inscrit à un certain endroit ayant perdu sa configuration\n" +"(ex.: parce que sa VM a été supprimée), peut être réinscrit.\n" +"\n" +"Pour plus d'informations, consulter les pages « man » de ipa-client-" +"install.\n" +"\n" +"Un hôte peut facultativement stocker des informations complémentaires\n" +"comme sa localisation, le système d'exploitation qu'il exécute, etc.\n" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" +"\n" +" Ajouter un nouvel hôte :\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" +"\n" +" Supprimer un hôte :\n" +" ipa host-del test.example.com\n" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" +"\n" +" Ajouter un nouvel hôte à l'aide d'un mot de passe à usage unique :\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" +"\n" +"Ajouter un nouvel hôte avec un mot de passe aléatoire :\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" +"\n" +" Modifier les informations d'un hôte :\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" +"\n" +" Supprimer les clés publiques SSH d'un hôte et modifier DNS en " +"conséquence :\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" +"\n" +"Désactiver la clé Kerberos, les certificats SSL et tout service d'un hôte :\n" +" ipa host-disable test.example.com\n" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" +"\n" +" Ajouter un hôte pouvant gérer tableau de clés et certificat d'un hôte " +"donné :\n" +" ipa host-add-managedby --hosts=test2 test\n" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" +"\n" +" Autoriser un utilisateur à créer un tableau de clé :\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" + +msgid "Host" +msgstr "Hôte" + +msgid "Base-64 encoded host certificate" +msgstr "Certificat de l'hôte encodé en Base-64" + +msgid "Serial Number" +msgstr "Numéro de série" + +msgid "Serial Number (hex)" +msgstr "Numéro de série (hex)" + +msgid "Authentication Indicators" +msgstr "Indicateurs d'authentification" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "Hôte « %(value)s » ajouté" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Hôte « %(value)s » supprimé" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" +"Supprimer les enregistrements A, AAAA, SSHFP et PTR de l'hôte géré par le " +"DNS de IPA." + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "Aucun enregistrement A, AAAA, SSHFP ou PTR trouvé." + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Hôte « %(value)s » modifié" + +msgid "Password cannot be set on enrolled host." +msgstr "Le mot de passe ne peut être défini pour l'hôte enregistré." + +msgid "cn is immutable" +msgstr "cn est immuable" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d hôte correspondant" +msgstr[1] "%(count)d hôtes correspondant" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "Hôte « %(value)s » désactivé" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "Certificats ajoutés à l'hôte « %(value)s »" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Certificats supprimés pour l'hôte « %(value)s »" + +msgid "Add new principal alias to host entry" +msgstr "Ajouter un nouvel alias de principal à l'entrée de l'hôte" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Alias ajoutés à l'hôte « %(value)s »" + +msgid "Remove principal alias from a host entry" +msgstr "Supprimer un alias de principal de l'entrée d'un hôte" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Alias supprimés pour l'hôte « %(value)s »" #, fuzzy #| msgid "" @@ -22988,13 +27840,6 @@ msgstr "Plage d'ID" msgid "local domain range" msgstr "Plage pour domaine local" -msgid "Active Directory domain range" -msgstr "Plage pour les domaines Active Directory" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" -"Plage pour les relations d'approbation Active Directory avec attributs POSIX" - msgid "ID range type, one of allowed values" msgstr "" @@ -23150,1622 +27995,6 @@ msgid "Options dom-sid and rid-base must be used together" msgstr "" "Les options « dom-sid » et « rid-base » doivent être utilisées simultanément" -msgid "self service permission" -msgstr "permission de libre service" - -msgid "self service permissions" -msgstr "permissions de libre service" - -msgid "Self Service Permissions" -msgstr "Permissions de libre service" - -msgid "Self Service Permission" -msgstr "Permission de libre service" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Permission de libre service « %(value)s » ajoutée" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Permission de libre service « %(value)s » supprimée" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Permission de libre service « %(value)s » modifiée" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)d permission de libre service correspondant" -msgstr[1] "%(count)d permissions de libre service correspondant" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" -"\n" -"Rôles serveurs IPA\n" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" -"\n" -"Obtenir l'état des rôles (serveur DNS, AC, etc. )fournis par les maîtres " -"IPA.\n" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" -"\n" -" Afficher l'état du rôle « Serveur DNS » d'un serveur :\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Show status of all configured roles on a server:\n" -#| " ipa server-role-find ipa.example.com\n" -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" -"\n" -" Afficher l'état de tous les rôles configurés sur un serveur :\n" -" ipa server-role-find ipa.example.com\n" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" -"\n" -" Afficher l'état de tous les rôles configurés sur un serveur :\n" -" ipa server-role-find ipa.example.com\n" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "rôle serveur" - -msgid "server roles" -msgstr "rôles serveur" - -msgid "IPA Server Roles" -msgstr "Rôles serveur IPA" - -msgid "IPA Server Role" -msgstr "Rôle serveur IPA" - -msgid "IPA server role name" -msgstr "Nom du rôle serveur IPA" - -msgid "Role status" -msgstr "État du rôle" - -msgid "Status of the role" -msgstr "État du rôle" - -msgid "Show role status on a server" -msgstr "Afficher l'état du rôle sur un serveur" - -msgid "Find a server role on a server(s)" -msgstr "Trouver les rôles serveur de serveurs" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "%(count)s rôle serveur correspondant" -msgstr[1] "%(count)s rôles serveur correspondants" - -#, fuzzy -#| msgid "Included attributes" -msgid "Include IPA master entries" -msgstr "Attributs inclus" - -msgid "roles" -msgstr "rôles" - -msgid "IPA role name" -msgstr "Nom du rôle IPA" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" -"Des membres locaux et des membres d'une règle HBAC ne peuvent pas être " -"définis simultanément" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" -"Liste de correspondance d'utilisateurs SELinux introuvable dans cette " -"configuration" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" -"Utilisateur SELinux %(user)s introuvable dans la liste ordonnée (dans la " -"configuration)" - -msgid "SELinux User Map rule" -msgstr "Règle de mappe utilisateurs SELinux" - -msgid "SELinux User Map rules" -msgstr "Règles de mappes utilisateurs SELinux" - -msgid "SELinux User Maps" -msgstr "Mappes d'utilisateurs SELinux" - -msgid "SELinux User Map" -msgstr "Mappe d'utilisateurs SELinux" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "Règle HBAC %(rule)s introuvable" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "Mappe d'utilisateurs SELinux « %(value)s » ajoutée" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "Mappe d'utilisateurs SELinux « %(value)s » supprimée." - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "Mappe d'utilisateurs SELinux « %(value)s » modifiée" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "%(count)d mappe d'utilisateurs SELinux correspondant" -msgstr[1] "%(count)d mappe d'utilisateurs SELinux correspondant" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "Mappe d'utilisateurs SELinux « %(value)s » activée" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "Mappe d'utilisateurs SELinux « %(value)s » désactivée" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "{role} : rôle introuvable" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "{attr} : attribut introuvable" - -msgid "pyhbac is not installed." -msgstr "" - -#, fuzzy -#| msgid "Certificate Authorities" -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "Autorités de certification" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -#, fuzzy -#| msgid "Retrieve an existing certificate." -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "Récupérer un certificat existant." - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -#, fuzzy -#| msgid "Check the status of a certificate signing request." -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "Vérifier l'état d'une demande de signature de certificat." - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -#| "revocation reason details. " -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" -"Raison de la révocation du certificat (1-10). Utilisez « ipa help cert » " -"pour plus d'informations sur les raisons de révocation." - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -#, fuzzy -#| msgid "Unspecified" -msgid " * 0 - unspecified\n" -msgstr "Non-spécifié" - -#, fuzzy -#| msgid "Key Compromise" -msgid " * 1 - keyCompromise\n" -msgstr "Clé compromise" - -#, fuzzy -#| msgid "AA Compromise" -msgid " * 2 - cACompromise\n" -msgstr "AA compromis" - -#, fuzzy -#| msgid "Affiliation Changed" -msgid " * 3 - affiliationChanged\n" -msgstr "Affiliation modifiée" - -msgid " * 4 - superseded\n" -msgstr "" - -#, fuzzy -#| msgid "Cessation of Operation" -msgid " * 5 - cessationOfOperation\n" -msgstr "Cessation d'activité" - -#, fuzzy -#| msgid "Certificate Hold" -msgid " * 6 - certificateHold\n" -msgstr "Certificat bloqué" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -#, fuzzy -#| msgid "Privilege Withdrawn" -msgid " * 9 - privilegeWithdrawn\n" -msgstr "Privilège retiré" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" -"Le principal '%(principal)s' n'est pas autorisé à utiliser l'AC '%(ca)s' " -"avec le profil '%(profile_id)s' pour l'émission de certificat." - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Host '%(host)s' not found" -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "Hôte « %(host)s » introuvable" - -msgid "Issuing CA" -msgstr "AC émettrice" - -msgid "Name of issuing CA" -msgstr "Nom de l'AC émettrice" - -#, fuzzy -#| msgid "Base-64 encoded host certificate" -msgid "Base-64 encoded certificate." -msgstr "Certificat de l'hôte encodé en Base-64" - -#, fuzzy -#| msgid "Certificate" -msgid "Certificate chain" -msgstr "Certificat" - -#, fuzzy -#| msgid "CA certificate" -msgid "X.509 certificate chain" -msgstr "Certificat d'AC" - -msgid "Subject" -msgstr "Sujet" - -#, fuzzy -#| msgid "Email address" -msgid "Subject email address" -msgstr "Adresse courriel" - -#, fuzzy -#| msgid "Subject DN" -msgid "Subject DNS name" -msgstr "DN de l'objet" - -#, fuzzy -#| msgid "Street address" -msgid "Subject X.400 address" -msgstr "Adresse" - -#, fuzzy -#| msgid "Home directory base" -msgid "Subject directory name" -msgstr "Base du répertoire utilisateur" - -msgid "Subject EDI Party name" -msgstr "" - -#, fuzzy -#| msgid "Subject" -msgid "Subject URI" -msgstr "Sujet" - -#, fuzzy -#| msgid "A IP Address" -msgid "Subject IP Address" -msgstr "A Adresse IP" - -#, fuzzy -#| msgid "Subject DN" -msgid "Subject OID" -msgstr "DN de l'objet" - -#, fuzzy -#| msgid "Subject DN" -msgid "Subject UPN" -msgstr "DN de l'objet" - -#, fuzzy -#| msgid "Kerberos principal" -msgid "Subject Kerberos principal name" -msgstr "Principal Kerberos" - -#, fuzzy -#| msgid "Subject Distinguished Name" -msgid "Subject Other Name" -msgstr "Nom distinctif de l'objet" - -msgid "Issuer" -msgstr "Émetteur" - -msgid "Issuer DN" -msgstr "DN de l'émetteur" - -msgid "Not Before" -msgstr "Pas avant" - -msgid "Not After" -msgstr "Pas après" - -msgid "Fingerprint (SHA1)" -msgstr "Empreinte (SHA1)" - -#, fuzzy -#| msgid "Fingerprint (SHA1)" -msgid "Fingerprint (SHA256)" -msgstr "Empreinte (SHA1)" - -msgid "Serial number (hex)" -msgstr "Numéro de série (hex)" - -msgid "Request status" -msgstr "État de la demande" - -msgid "Include certificate chain in output" -msgstr "" - -#, fuzzy -#| msgid "automatically add the principal if it doesn't exist" -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "ajoute automatiquement le principal s'il n'existe pas" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "Aucun « Common Name » n'a été trouvé dans le sujet de cette demande." - -#, fuzzy, python-format -#| msgid "" -#| "hostname in subject of request '%(cn)s' does not match principal hostname " -#| "'%(hostname)s'" -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" -"Le nom d'hôte indiqué dans le sujet de la demande « %(cn)s » ne correspond " -"pas au nom d'hôte du principal « %(hostname)s »" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" -"Le nom d'hôte indiqué dans le sujet de la demande « %(cn)s » ne correspond " -"pas au nom d'hôte du principal « %(hostname)s »" - -msgid "DN commonName does not match user's login" -msgstr "" -"Le « commonName » du DN ne correspond pas à l'identifiant de connexion de " -"l'utilisateur" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" -"L'adresse email du DN ne correspond à aucune des adresses email de " -"l'utilisateur" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" -"Privilège « write » insuffisant sur l'attribut « userCertificate » de " -"l'entrée « %s »." - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" -"Il est interdit d'utiliser un « subject alt name » (nom alternatif) de type " -"%s pour les principaux d'utilisateurs." - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" -"Le principal du service pour le nom %s alternatif du sujet dans la demande " -"de certificat n'existe pas" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" -"Privilège insuffisant pour créer un certificat avec le nom de sujet « %s » " -"alternatif." - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" -"Le principal « %s » du nom alternatif ne correspond pas au principal demandé" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" -"L'attribut RFC822Name ne correspond à aucune des adresses email de " -"l'utilisateur" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" -"Il est interdit d'utiliser un « subject alt name » (nom alternatif) de type " -"%s pour les principaux autres qu'utilisateurs." - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "Le type %s de nom alternatif de sujet est interdit" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "L'autorité de certification « %s » est désactivée" - -#, fuzzy -#| msgid "Sudo Option" -msgid "'add' option" -msgstr "Option sudo" - -msgid "The principal for this request doesn't exist." -msgstr "Le principal pour cette demande n'existe pas." - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Status" -msgstr "État" - -msgid "Revoked" -msgstr "Révoqué" - -msgid "Revocation reason" -msgstr "Raison de la révocation" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" -"Raison de la révocation du certificat (1-10). Utilisez « ipa help cert » " -"pour plus d'informations sur les raisons de révocation." - -#, python-format -msgid "Owner %s" -msgstr "%s propriétaire" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" -"Certificat de l'AC « %(ca)s » avec le numéro de série %(serial)s introuvable" - -msgid "7 is not a valid revocation reason" -msgstr "7 n'est pas une raison de révocation valide" - -#, fuzzy -#| msgid "Results should contain primary key attribute only (\"name\")" -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« name »)" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "%(count)d certificat correspondant" -msgstr[1] "%(count)d certificats correspondants" - -#, fuzzy, python-format -#| msgid "Search for netgroups with these member hosts." -msgid "Search for certificates with these owner %s." -msgstr "Rechercher des groupes réseaux dont les membres sont ces hôtes." - -#, fuzzy, python-format -#| msgid "Search for netgroups without these member hosts." -msgid "Search for certificates without these owner %s." -msgstr "Rechercher des groupes réseaux dont les membres ne sont pas ces hôtes." - -msgid "ID View" -msgstr "Vue d'identifiants" - -msgid "system ID View" -msgstr "Vue d'identifiants du système" - -msgid "ID Views" -msgstr "Vues d'identifiants" - -msgid "User object overrides" -msgstr "Surcharges des objets utilisateurs" - -msgid "Group object overrides" -msgstr "Surcharges des objets groupes" - -msgid "Hosts the view applies to" -msgstr "Hôtes auxquels la vue s'applique" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Vue d'identifiants « %(value)s » ajoutée" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "Vue d'identifiants « %(value)s » supprimée" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "Vue d'identifiant « %(value)s » modifiée" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "%(count)d vue d'identifiants correspondante" -msgstr[1] "%(count)d vues d'identifiants correspondantes" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" -"La vue de la relation d'approbation par défaut ne peut être appliquée sur un " -"hôte" - -msgid "not found" -msgstr "introuvable" - -#, fuzzy -#| msgid "Default Trust View cannot be applied on hosts" -msgid "ID View cannot be applied to IPA master" -msgstr "" -"La vue de la relation d'approbation par défaut ne peut être appliquée sur un " -"hôte" - -msgid "ID View already applied" -msgstr "Vue d'identifiants déjà appliquée" - -msgid "value" -msgstr "valeur" - -#, python-format -msgid "ID View applied to %i host." -msgstr "Vue d'identifiants appliquée à %i hôte." - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "Vue d'identifiants appliquée à %i hôtes." - -#, python-format -msgid "ID View cleared from %i host." -msgstr "Vue d'identifiants retirée de %i hôte." - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "Vue d'identifiants retirée de %i hôtes." - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" -"Vous essayez de référencer un groupe privé magique qui ne peut être " -"surchargé. Essayez plutôt de surcharger l'attribut GID de l'utilisateur." - -msgid "IPA object" -msgstr "objet IPA" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "La balise « %(anchor)s » ne peut être résolue." - -msgid "Default Trust View cannot contain IPA users" -msgstr "" -"La vue de la relation d'approbation par défaut ne peut contenir des " -"utilisateurs IPA" - -msgid "Add a new ID override." -msgstr "Ajouter une nouvelle surcharge d'identifiant." - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants « %(value)s » ajoutée" - -msgid "Delete an ID override." -msgstr "Supprimer une surcharge d'identifiants." - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants « %(value)s » supprimée" - -msgid "Modify an ID override." -msgstr "Modifier une surcharge d'identifiants." - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants « %(value)s » modifiée" - -msgid "ID override" -msgstr "Surcharge d'identifiants" - -msgid "ID overrides cannot be renamed" -msgstr "Les surchages d'identifiants ne peuvent être renommées" - -msgid "Search for an ID override." -msgstr "Rechercher une surcharge d'identifiants." - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d surcharge d'identifiants correspondante" -msgstr[1] "%(count)d surcharges d'identifiants correspondantes" - -msgid "Display information about an ID override." -msgstr "Afficher les informations d'une surcharge d'identifiants." - -msgid "User ID override" -msgstr "Surcharge d'identifiant utilisateur" - -msgid "User ID overrides" -msgstr "Surcharges d'identifiants utilisateurs" - -msgid "Base-64 encoded user certificate" -msgstr "Certificat de l'utilisateur encodé en Base-64" - -msgid "Group ID override" -msgstr "Surcharge d'identifiant de groupe" - -msgid "Group ID overrides" -msgstr "Surcharges d'identifiants de groupes" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" -"Ajouter un ou plusieurs certificats à l'entrée de l'utilisateur surchargé " -"(idoverrideuser)" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Certificats ajoutés à l'utilisateur surchargé « %(value)s »" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "Supprimer les certificats de l'entrée de l'utilisateur surchargé" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "Certificats supprimés de l'utilisateur surchargé « %(value)s »" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants utilisateurs « %(value)s » ajoutée" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants utilisateurs « %(value)s » supprimée" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants utilisateurs « %(value)s » modifiée" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "%(count)d surcharge d'identifiants utilisateurs correspondante" -msgstr[1] "%(count)d surcharges d'identifiants utilisateurs correspondantes" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants de groupes « %(value)s » ajoutée" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants de groupes « %(value)s » supprimée" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants de groupes « %(value)s » modifiée" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "%(count)d surcharge d'identifiants de groupes correspondante" -msgstr[1] "%(count)d surcharges d'identifiants de groupes correspondantes" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" -"\n" -"Règle d'adhésion automatique.\n" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" -"\n" -"Clarifie l'adhésion d'hôtes et d'utilisateurs en configurant des motifs\n" -"« regex » d'inclusion ou exclusion à assigner automatiquement aux nouvelles\n" -"entrées dans un groupe ou un groupe d'hôtes selon l'information d'attribut.\n" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" -"\n" -"Une règle est directement associée à un groupe par le nom, donc il n'est " -"pas\n" -"possible de créer une règle sans groupe ou groupe d'hôtes d'accompagnement.\n" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" -"\n" -"Une condition est une expression rationnelle dont se sert « 389-ds » pour\n" -"associer nouvelle entrée et règle d'adhésion. Si l'entrée correspond à une\n" -"règle d'inclusion, elle est ajoutée au groupe ou groupe d'hôte approprié.\n" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" -"\n" -"Un groupe ou groupe d'hôte par défaut peut être défini pour des entrées ne\n" -"correspondant à aucune règle. Tout utilisateur a ce groupe comme repli, car\n" -"il est par défaut membre du groupe indiqué dans la configuration de IPA.\n" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" -"\n" -"« automember-rebuild » s'utilise pour appliquer rétroactivement les règles\n" -"d'adhésion automatique aux entrées présentes, et ainsi revoir leur " -"adhésion.\n" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" -"\n" -" Ajouter le groupe ou le groupe d'hôtes initial :\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" -"\n" -" Ajouter la règle initiale :\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" -"\n" -" Ajouter une condition à la règle :\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" -"\n" -" Ajouter une condition d'exclusion à la règle pour empêcher l'auto-" -"assignation :\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" -"\n" -" Ajouter un hôte :\n" -" ipa host-add web1.example.com\n" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" -"\n" -" Ajouter un utilisateur :\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" -"\n" -" Vérifier une adhésion automatique :\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" -"\n" -" Supprimer une condition de la règle :\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" -"\n" -" Modifier la règle d'adhésion automatique :\n" -" ipa automember-mod\n" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" -"\n" -" Définir le groupe cible par défaut (recours) :\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" -"\n" -" Supprimer le groupe cible par défaut (repli) ::\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" -"\n" -" Afficher le groupe cible par défaut (repki) :\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" -"\n" -" Retrouver toutes les règles d'adhésion automatique :\n" -" ipa automember-find\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Delete an automember rule:\n" -#| " ipa automember-del --type=hostgroup webservers\n" -#| " ipa automember-del --type=group devel\n" -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" -"\n" -" Supprimer une règle d'adhésion automatique :\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" -"\n" -" Afficher une règle d'adhésion automatique :\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" -"\n" -" Supprimer une règle d'adhésion automatique :\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" -"\n" -" Reconstruire l'appartenance de tous les utilisateurs :\n" -" ipa automember-rebuild --type=group\n" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" -"\n" -" Reconstruire l'appartenance de tous les hôtes :\n" -" ipa automember-rebuild --type=hostgroup\n" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" -"\n" -" Reconstruire l'appartenance d'utilisateurs donnés :\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" -"\n" -" Reconstruire l'appartenance d'hôtes donnés :\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" - -msgid "Auto Membership Rule" -msgstr "Règle d'appartenance automatique" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "« %(oname)s » de « %(otype)s » introuvable" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "%s n'est pas un attribut valide." - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" -"\n" -" Ajouter une règle d'auto-adhésion.\n" -" " - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Règle d'auto-adhésion « %(value)s » ajoutée" - -msgid "Auto Membership is not configured" -msgstr "L'auto-adhésion n'est pas configurée" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" -"\n" -" Ajouter des conditions à une règle d'auto-adhésion.\n" -" " - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Condition(s) ajoutées à « %(value)s »" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "Règle d'auto-adhésion : %s introuvable !" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" -"\n" -" Surcharger ceci afin de pouvoir ajouter réussites et échecs aux\n" -" résultats renvoyés.\n" -" " - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" -"\n" -" Supprimer des conditions d'une règle d'auto-adhésion.\n" -" " - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Conditions supprimées de « %(value)s »" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" -"\n" -" Surcharger ceci afin de pouvoir définir réussites et échecs.\n" -" " - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" -"\n" -" Modifier une règle d'auto-adhésion.\n" -" " - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Règle d'auto-adhésion « %(value)s » modifiée" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" -"\n" -" Supprimer une règle d'auto-adhésion.\n" -" " - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Règle d'auto-adhésion « %(value)s » supprimée" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" -"\n" -" Rechercher des règles d'auto-adhésion.\n" -" " - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d règle correspondante" -msgstr[1] "%(count)d règles correspondantes" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" -"\n" -" Afficher des informations au sujet d'une règle d'auto-adhésion.\n" -" " - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" -"\n" -" Définit un groupe par défaut (repli) pour toutes les entrées sans " -"correspondance.\n" -" " - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" -"Définir le groupe « %(value)s » par défaut (repli) pour l'auto-adhésion" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" -"\n" -" Supprimer le groupe par défaut (repli) pour toute entrée sans " -"correspondance.\n" -" " - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "Groupe « %(value)s » par défaut (repli) supprimé pour l'auto-adhésion" - -msgid "No default (fallback) group set" -msgstr "Pas de groupe par défaut (repli) défini" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" -"\n" -" Afficher des informations pour les groupes d'auto-adhésion par défaut " -"(repli).\n" -" " - -msgid "Task DN" -msgstr "DN de la tâche" - -msgid "DN of the started task" -msgstr "DN de la tâche lancée" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" -"au moins une des options « type », « users » ou « hosts » doit être indiquée" - -msgid "users and hosts cannot both be set" -msgstr "impossible de définir à la fois des utilisateurs et des hôtes" - -msgid "hosts cannot be set when type is 'group'" -msgstr "des hôtes ne peuvent pas être définis quand le type est « group »" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "impossible de définir des utilisateurs quand le type est « hostgroup »" - -msgid "Automember rebuild membership task started" -msgstr "" -"Tâche de reconstruction de l'appartenance avec adhésion automatique démarrée" - -msgid "Automember rebuild membership task completed" -msgstr "La tâche de reconstruction des appartenances automatiques est terminée" - -#, python-format -msgid "Task DN = '%s'" -msgstr "DN de la tâche = « %s »" - -msgid "Automember" -msgstr "Auto-adhésion" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -#, fuzzy -#| msgid "Remove conditions from an automember rule." -msgid "Remove orphan automember rules" -msgstr "Supprimer des conditions d'une règle d'auto-adhésion. " - -#, fuzzy -#| msgid "Certificate Authorities" -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "Autorités de certification" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Certificate Authority" -msgstr "Autorité de certification" - -msgid "Certificate Authorities" -msgstr "Autorités de certification" - -msgid "Name for referencing the CA" -msgstr "Nom de référencement de l'AC" - -msgid "Description of the purpose of the CA" -msgstr "Description de l'objet de l'AC" - -msgid "Authority ID" -msgstr "ID de l'autorité" - -msgid "Dogtag Authority ID" -msgstr "ID de l'autorité Dogtag" - -msgid "Subject DN" -msgstr "DN de l'objet" - -msgid "Subject Distinguished Name" -msgstr "Nom distinctif de l'objet" - -msgid "Issuer Distinguished Name" -msgstr "Nom distinctif de l'émetteur" - -msgid "Search for CAs." -msgstr "Rechercher des AC." - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "%(count)d AC correspondante" -msgstr[1] "%(count)d AC correspondantes" - -msgid "Display the properties of a CA." -msgstr "Afficher les propriétés d'une AC." - -msgid "Create a CA." -msgstr "Créer une AC." - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "AC « %(value)s » créée" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "Privilège « add » insuffisant pour l'entrée « %s »." - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "AC « %(value)s » supprimée" - -#, fuzzy -#| msgid "Insufficient 'add' privilege for entry '%s'." -msgid "Insufficient privilege to delete a CA." -msgstr "Privilège « add » insuffisant pour l'entrée « %s »." - -msgid "CA" -msgstr "AC" - -msgid "IPA CA cannot be deleted" -msgstr "L'AC de IPA ne peut être supprimée" - -#, fuzzy -#| msgid "Must be a decimal number" -msgid "Must be disabled first" -msgstr "Doit être un nombre décimal" - -msgid "Modify CA configuration." -msgstr "Modifier la configuration de l'AC" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "AC « %(value)s » modifiée" - -#, fuzzy -#| msgid "Insufficient 'add' privilege for entry '%s'." -msgid "Insufficient privilege to modify a CA." -msgstr "Privilège « add » insuffisant pour l'entrée « %s »." - -#, fuzzy -#| msgid "Disable a CA ACL." -msgid "Disable a CA." -msgstr "Désactiver une LCA d'AC." - -#, fuzzy, python-format -#| msgid "Disabled CA ACL \"%(value)s\"" -msgid "Disabled CA \"%(value)s\"" -msgstr "LCA d'AC « %(value)s » désactivée" - -#, fuzzy -#| msgid "IPA CA cannot be deleted" -msgid "IPA CA cannot be disabled" -msgstr "L'AC de IPA ne peut être supprimée" - -#, fuzzy -#| msgid "Enable a CA ACL." -msgid "Enable a CA." -msgstr "Activer une LCA d'AC." - -#, fuzzy, python-format -#| msgid "Enabled CA ACL \"%(value)s\"" -msgid "Enabled CA \"%(value)s\"" -msgstr "LCA d'AC « %(value)s » activée" - msgid "Internationalization messages" msgstr "" @@ -26019,12 +29248,6 @@ msgstr "Certificat révoqué" msgid "REVOKED" msgstr "RÉVOQUÉ" -msgid "Serial Number" -msgstr "Numéro de série" - -msgid "Serial Number (hex)" -msgstr "Numéro de série (hex)" - msgid "SHA1 Fingerprint" msgstr "Empreinte SHA1" @@ -26091,11 +29314,6 @@ msgstr "Ajouter un nouveau certificat à un service" msgid "Add certificate mapping data" msgstr "Donnée d'association du certificat TLSA" -#, fuzzy -#| msgid "Certificate Association Data" -msgid "Certificate mapping data" -msgstr "Donnée associée au certificat" - #, fuzzy #| msgid "Configuration" msgid "Configuration string" @@ -26940,9 +30158,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "Hôte" - msgid "Netgroup Settings" msgstr "Paramètres du groupe réseau" @@ -27078,9 +30293,6 @@ msgstr "Ajout : clé définie" msgid "Add password policy" msgstr "politique de mots de passe" -msgid "Password Policy" -msgstr "Politique de gestion des mots de passe" - #, fuzzy #| msgid "password policies" msgid "Remove password policies" @@ -27625,15 +30837,6 @@ msgstr "Supprimer une permission" msgid "Remove domains" msgstr "Domaines du royaume" -msgid "Trust direction" -msgstr "Sens de la confiance" - -msgid "Trust status" -msgstr "État de la confiance" - -msgid "Trust type" -msgstr "Type de confiance" - msgid "Alternative UPN suffixes" msgstr "Suffixes UPN alternatifs" @@ -28213,9 +31416,6 @@ msgstr "Sudo" msgid "Topology" msgstr "Topologie" -msgid "Trusts" -msgstr "Confiances" - msgid "True" msgstr "Vrai" @@ -28320,2136 +31520,6 @@ msgstr "Champ requis" msgid "Unsupported value" msgstr "Valeur non prise en charge" -msgid "Role" -msgstr "Rôle" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "Rôle « %(value)s » ajouté" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Rôle « %(value)s » supprimé" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Rôle « %(value)s » modifié" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d rôle correspondant" -msgstr[1] "%(count)d rôles correspondant" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" -"\n" -"Serveurs IPA\n" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" -"\n" -"Afficher les informations au sujet des serveurs IPA installés.\n" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -" Trouver tous les serveurs :\n" -" ipa server-find\n" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" -"\n" -" Afficher les informations d'un serveur en particulier :\n" -" ipa server-show ipa.example.com\n" - -msgid "server" -msgstr "serveur" - -msgid "servers" -msgstr "serveurs" - -msgid "IPA Servers" -msgstr "Serveurs IPA" - -msgid "Server location" -msgstr "Emplacement de serveur" - -msgid "Service weight" -msgstr "Poids du service" - -msgid "Weight for server services" -msgstr "Poids des services des serveurs" - -msgid "Service relative weight" -msgstr "Poids relatif du service" - -msgid "Relative weight for server services (counts per location)" -msgstr "Poids relatifs des services des serveurs (compte par emplacement)" - -msgid "Enabled server roles" -msgstr "Rôles serveur activés" - -msgid "List of enabled roles" -msgstr "Liste des rôles activés" - -msgid "Modify information about an IPA server." -msgstr "Modifier les informations d'un serveur IPA." - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "Serveur IPA \"%(value)s\" modifié" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "%(count)d serveur IPA correspondant" -msgstr[1] "%(count)d serveurs IPA correspondants" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Serveur IPA « %(value)s » supprimé" - -msgid "Ignore topology errors" -msgstr "Ignorer les erreurs de topologie" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" -"Ignorer les problèmes de connectivité dans la topologie après suppression" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "Ignorer la vérification de dernier serveur d'AC ou DNS" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" -"Passer la vérification lorsque le dernier serveur DNS ou AC maître est " -"supprimé" - -msgid "Force server removal" -msgstr "Forcer la suppression du serveur" - -msgid "Force server removal even if it does not exist" -msgstr "Forcer la suppression du serveur même s'il n'existe pas" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" -"La réplique est un serveur de clés DNSSEC actif. Le désinstaller pourrait " -"casser votre système DNS. Merci de d'abord désactiver ou de remplacer votre " -"serveur de clés DNSSEC." - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "La suppression de ce serveur laissera votre installation sans DNS." - -#, fuzzy -#| msgid "" -#| "Deleting this server is not allowed as it would leave your installation " -#| "without a CA." -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" -"La suppression de ce serveur n'est pas autorisée, elle laisserait votre " -"installation sans AC." - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" -"La suppression de ce serveur n'est pas autorisée, elle laisserait votre " -"installation sans AC." - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "On ignore ces avertissements et lancement de la suppression" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" -"Échec du nettoyage du memberPrincipal %(principal)s dans l'entrée s4u2proxy " -"%(dn)s : %(err)s" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" -"Échec du nettoyage des entrées du nom d'hôte DNA pour %(master)s : %(err)s" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" -"Échec de la suppression du serveur %(master)s de la liste de serveurs : " -"%(err)s" - -#, fuzzy, python-format -#| msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" -"Échec du nettoyage des entrées du nom d'hôte DNA pour %(master)s : %(err)s" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "Échec du nettoyage du principal ou des clés du serveur : %(err)s" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "Échec du nettoyage des entrées DNS de %(hostname)s : %(err)s" - -msgid "You may need to manually remove them from the tree" -msgstr "Vous pouvez avoir besoin de les supprimer manuellement de l'arbre" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "On force la suppression de %(hostname)s" - -msgid "Ignoring topology connectivity errors." -msgstr "On ignore les erreurs de connectivité de la topologie." - -msgid "Server has already been deleted" -msgstr "Le serveur a déjà été supprimé" - -msgid "Agreements deleted" -msgstr "Agréments supprimés" - -msgid "Following segments were not deleted:" -msgstr "Les segments suivants n'ont pas été supprimés :" - -#, python-format -msgid "must be \"%s\"" -msgstr "doit être « %s »" - -msgid "not allowed to perform server connection check" -msgstr "impossible d'effectuer la vérification de la connexion au serveur" - -#, fuzzy -#| msgid "Show role status on a server" -msgid "Set enabled/hidden state of a server." -msgstr "Afficher l'état du rôle sur un serveur" - -#, fuzzy -#| msgid "Status" -msgid "State" -msgstr "État" - -#, fuzzy -#| msgid "Server Name" -msgid "Server state" -msgstr "Nom du serveur" - -#, fuzzy, python-format -#| msgid "Changed password for \"%(value)s\"" -msgid "Changed server state of \"%(value)s\"." -msgstr "Mot de passe modifié pour « %(value)s »" - -#, fuzzy -#| msgid "IPA CA renewal master" -msgid "Cannot hide CA renewal master." -msgstr "Maître de renouvellement d'AC IPA" - -#, fuzzy -#| msgid "IPA DNSSec key master" -msgid "Cannot hide DNSSec key master." -msgstr "Maître des clés DNSSec IPA" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| "Service Constrained Delegation\n" -#| "\n" -#| "Manage rules to allow constrained delegation of credentials so\n" -#| "that a service can impersonate a user when communicating with another\n" -#| "service without requiring the user to actually forward their TGT.\n" -#| "This makes for a much better method of delegating credentials as it\n" -#| "prevents exposure of the short term secret of the user.\n" -#| "\n" -#| "The naming convention is to append the word \"target\" or \"targets\" to\n" -#| "a matching rule name. This is not mandatory but helps conceptually\n" -#| "to associate rules and targets.\n" -#| "\n" -#| "A rule consists of two things:\n" -#| " - A list of targets the rule applies to\n" -#| " - A list of memberPrincipals that are allowed to delegate for\n" -#| " those targets\n" -#| "\n" -#| "A target consists of a list of principals that can be delegated.\n" -#| "\n" -#| "In English, a rule says that this principal can delegate as this\n" -#| "list of principals, as defined by these targets.\n" -#| "\n" -#| "EXAMPLES:\n" -#| "\n" -#| " Add a new constrained delegation rule:\n" -#| " ipa servicedelegationrule-add ftp-delegation\n" -#| "\n" -#| " Add a new constrained delegation target:\n" -#| " ipa servicedelegationtarget-add ftp-delegation-target\n" -#| "\n" -#| " Add a principal to the rule:\n" -#| " ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -#| "com ftp-delegation\n" -#| "\n" -#| " Add our target to the rule:\n" -#| " ipa servicedelegationrule-add-target --" -#| "servicedelegationtargets=ftp-delegation-target ftp-delegation\n" -#| "\n" -#| " Add a principal to the target:\n" -#| " ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -#| "com ftp-delegation-target\n" -#| "\n" -#| " Display information about a named delegation rule and target:\n" -#| " ipa servicedelegationrule_show ftp-delegation\n" -#| " ipa servicedelegationtarget_show ftp-delegation-target\n" -#| "\n" -#| " Remove a constrained delegation:\n" -#| " ipa servicedelegationrule-del ftp-delegation-target\n" -#| " ipa servicedelegationtarget-del ftp-delegation\n" -#| "\n" -#| "In this example the ftp service can get a TGT for the ldap service on\n" -#| "the bound user's behalf.\n" -#| "\n" -#| "It is strongly discouraged to modify the delegations that ship with\n" -#| "IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -#| "ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -#| "to delegate, causing the framework to stop functioning.\n" -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" -"\n" -"Délégation contrainte de services\n" -"\n" -"Gérez les règles permettant la délégation contrainte d'informations\n" -"d'authentification de façon à ce qu'un service puisse se faire passer\n" -"pour un utilisateur lors de la communication avec un service sans\n" -"que cela ne nécessite de la part de l'utilisateur de transmettre son TGT.\n" -"Cela constitue une méthode bien meilleure de délégation d'identification\n" -"car elle évite l'exposition du secret court terme de l'utilisateur.\n" -"\n" -"La convention de nommage est d'ajouter le mot « target » ou « targets »\n" -"au nom de la règle de correspondance. Ce poitn n'est pas obligatoire mais\n" -"aide à visualiser l'association entre règles et cibles.\n" -"\n" -"Une règle est constituée de deux choses :\n" -" - une liste de cibles auxquelles la règle s'applique,\n" -" - une liste de memberPrincipals qui sont autorisés à leur déléguer\n" -" leurs droits.\n" -"\n" -"Une cible consiste en une liste de principaux qui peuvent être délégués.\n" -"\n" -"En anglais, une règle que ce principal peut déléguer comme cette liste\n" -"de principaux, tels que définis par ces cibles.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter une nouvelle règle de délégation contrainte :\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Ajouter une nouvelle cible de délégation contrainte :\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Ajouter un principal à la règle :\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Ajouter notre cible à la règle :\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add un principal à la cible :\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Afficher les informations au sujet d'une règle de délégation et sa cible :\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Supprimer une délégation contrainte :\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"Dans cet exemple, le service ftp peut obtenir un TGT pour le service ldap\n" -"au nom de l'utilisateur associé.\n" -"\n" -"Il est fortement découragé de modifier les délégations livrées avec IPA,\n" -"ipa-http-delegation et ses cibles ipa-cifs-delegation-targets et\n" -"ipa-ldap-delegation-targets. Des modifications erronées peuvent obérer\n" -"la capacité de délégation, en provoquant l'arrêt de fonctionnement du\n" -"moteur.\n" - -msgid "Allowed to Impersonate" -msgstr "Autorisé à prendre l'identité" - -msgid "Member principals" -msgstr "Principaux membres de" - -#, fuzzy, python-format -#| msgid "Malformed principal" -msgid "Malformed principal: %(error)s" -msgstr "Principal malformé" - -msgid "Add target to a named service delegation." -msgstr "Ajouter des cibles à une délégation de service nommé" - -#, python-format -msgid "member %s" -msgstr "%s membre" - -msgid "Remove member from a named service delegation." -msgstr "Retirer des membres d'une délégation de service nommé" - -msgid "service delegation rule" -msgstr "règle de délégation de service" - -msgid "service delegation rules" -msgstr "règles de délégation de service" - -msgid "Service delegation rules" -msgstr "Règles de délégation de service" - -msgid "Service delegation rule" -msgstr "Règle de délégation de service" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Règle de délégation de service « %(value)s » ajoutée" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Règle de délégation de service « %(value)s » supprimée" - -msgid "privileged service delegation rule" -msgstr "règle de délégation de service privilégié" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "%(count)d règle de délégation de service correspondante" -msgstr[1] "%(count)d règles de délégation de service correspondantes" - -msgid "service delegation target" -msgstr "cible de délégation de service" - -msgid "service delegation targets" -msgstr "cibles de délégation de service" - -msgid "Service delegation targets" -msgstr "Cibles de délégation de service" - -msgid "Service delegation target" -msgstr "Cible de délégation de service" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "Cible de délégation de service « %(value)s » ajoutée" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Cible de délégation de service « %(value)s » supprimée" - -msgid "privileged service delegation target" -msgstr "cible de délégation de service privilégiée" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "%(count)d cible de délégation de service correspondante" -msgstr[1] "%(count)d cibles de délégation de service correspondantes" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" -"\n" -"Migration vers IPA\n" -"\n" -"Migration d'utilisateurs et de groupes d'un serveur LDAP vers IPA.\n" -"\n" -"Ceci réalise une requête LDAP sur le serveur distant pour rechercher\n" -"utilisateurs et groupes dans un conteneur. Pour faire migrer les mots de\n" -"passe, vous devez vous connecter en tant qu'utilisateur capable de lire\n" -"l'attribut « userPassword » sur le serveur distant : chose généralement\n" -"réservée aux administrateurs de haut niveau comme « cn=Directory Manager »\n" -"dans 389-ds (utilisateur de la connexion par défaut).\n" -"\n" -"Par défaut, le conteneur utilisateur est ou=People.\n" -"\n" -"Par défaut, le conteneur groupe est ou=Groups.\n" -"\n" -"Utilisateurs et groupes préexistants sur le serveur IPA ne sont pas " -"touchés.\n" -"\n" -"Deux schémas LDAP définissent comment les membres d'un groupe sont\n" -"enregistrés : RFC2307 et RFC2307bis. RFC2307bis utilise « member » et\n" -"« uniquemember » pour définir les membres d'un groupe, RFC2307 utilise\n" -"« memberUid ». Le schéma par défaut est RFC2307bis.\n" -"\n" -"La fonctionnalité « compat » du schéma autorise IPA à formater à nouveau\n" -"les données pour les systèmes ne prenant pas en charge RFC2307bis. Il est\n" -"recommandé de désactiver cette fonction pendant la migration pour éviter\n" -"de surcharger le système. Vous la réactiverez après migration. Pour faire\n" -"la migration avec la fonction activée,utilisez l'option « --with-compat ».\n" -"\n" -"Les utilisateurs migrés n'ont pas de référence Kerberos, ils n'ont que leur\n" -"mot de passe LDAP. Pour achever le processus de migration, les utilisateurs\n" -"doivent aller à la page http://ipa.example.com/ipa/migration et\n" -"s'authentifier en utilisant leur mot de passe LDAP pour générer leur\n" -"justificatif d'identité Kerberos.\n" -"\n" -"Par défaut, la migration est désactivée. Utilisez la commande\n" -"« ipa config-mod » pour l'activer :\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"Si un DN de base n'est pas indiqué avec « --basedn », IPA utilise alors,\n" -"soit la valeur de « defaultNamingContext » si elle est définie, soit la\n" -"première valeur fixée dans « namingContexts » dans la racine du serveur " -"LDAP\n" -"distant.\n" -"\n" -"Les utilisateurs sont ajoutés comme membres du groupe utilisateur par " -"défaut.\n" -"Cela peut être une tâche demandant du temps, ainsi pendant la migration " -"cela\n" -"se fait en mode « batch » par tranches de 100 utilisateurs. Il y aura donc\n" -"une fenêtre dans laquelle les utilisateurs seront ajoutés à IPA, mais\n" -"ne seront pas encore membres du groupe d'utilisateurs par défaut.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Migration la plus simple, acceptant tous les paramètres par défaut :\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" En précisant le conteneur utilisateur et groupe. S'utilise pour migrer les\n" -"données utilisateur et groupe d'un serveur IPA v1 :\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Comme un serveur IPA v2 comporte déjà des groupes prédéfinis pouvant " -"entrer\n" -"en conflit avec des groupes du serveur (IPA v1) migré (par exemple admins,\n" -"ipausers), des utilisateurs dans un groupe en conflit comme groupe " -"principal\n" -"peuvent se voir rattachés à un groupe inconnu sur le nouveau serveur IPA " -"v2.\n" -" Utilisez l'option « --group-overwrite-gid » pour écraser le GID des " -"groupes\n" -"préexistants afin d'éviter ce problème :\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Utilisateurs ou groupes migrés peuvent avoir des classes d'objets et\n" -"attributs associés inconnus du serveur IPA v2. Ces classes d'objets et\n" -"attributs doivent être tenus en dehors du processus de migration :\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"JOURNALISATION\n" -"\n" -"La migration inscrit des avertissements et des erreurs sur le journal\n" -"d'erreurs Apache. Ce fichier devra être examiné après la migration pour\n" -"corriger ou enquêter sur tout problème qui serait mentionné.\n" -"\n" -"Tous les 100 utilisateurs migrés un message de niveau info est affiché\n" -"indiquant l'avancement en cours et la durée écoulée pour permettre un suivi\n" -"du processus de progression de la migration.\n" -"\n" -"Si le niveau de journalisation est « debug », en définissant « debug=True »\n" -"soit dans « /etc/ipa/default.conf », soit dans « /etc/ipa/server.conf »,\n" -"alors une entrée est inscrite pour chaque utilisateur ajouté, plus un\n" -"résumé quand le groupe utilisateur par défaut est mis à jour.\n" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" -"Le principal Kerberos %s existe déjà. Utiliser la commande « ipa user-mod » " -"pour le définir manuellement." - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" -"Impossible de savoir si le principal Kerberos %s existe déjà. Utiliser la " -"commande 'ipa user-mod' pour le définir manuellement." - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" -"Échec à l'ajout de l'utilisateur dans le groupe par défaut. Utiliser la " -"commande « ipa group-add-member » pour l'ajouter manuellement." - -msgid "Migration of LDAP search reference is not supported." -msgstr "" -"La migration des références des recherches LDAP n'est pas prise en charge." - -msgid "Malformed DN" -msgstr "DN mal formé" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(user)s n'est pas un utilisateur POSIX" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" -". Vérifier le GID du groupe existant. Utiliser l'option « --group-overwrite-" -"gid » pour surcharger le GID" - -msgid "Invalid LDAP URI." -msgstr "URI LDAP invalide." - -#, python-format -msgid "%s to exclude from migration" -msgstr "%s à exclure de la migration" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" -"les résultats des recherches sur les objets\n" -"à migrer ont été tronquées par le serveur ;\n" -"le processus de migration peut être incomplet\n" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" -"La recherche LDAP %(container)s ne renvoie aucun résultat (base de " -"recherche : %(search_base)s, classe d'objet : %(objectclass)s)" - -msgid "Default group for new users not found" -msgstr "Groupe par défaut pour les nouveaux utilisateurs introuvable" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" -"\n" -"Hôtes/Machines\n" -"\n" -"Un hôte représente une machine. Il peut être utilisé dans de nombreux " -"contextes :\n" -"- les entrées de services sont associées à un hôte,\n" -"- un hôte stocke le principal des hôtes/des services,\n" -"- un hôte est utilisable dans les règles HBAC (Host-based Access Control),\n" -"- chaque client enregistré génère une entrée d'hôte.\n" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" -"\n" -"INSCRIPTION :\n" -"\n" -"Trois scenarii d'inscriptions d'un nouveau client sont possibles :\n" -"\n" -"1. La machine est enregistrée par un administrateur de plein droit.\n" -" L'entrée système peut pré-exister ou non. Un administrateur de\n" -" plein droit est membre du rôle hostadmin ou du groupe admins\n" -"2. L'inscription est faite par un administrateur limité. L'hôte\n" -" doit avoir été préalablement créé. Un administrateur limité\n" -" possède le privilège Host Enrollment.\n" -"3. Le système a été créé avec un mot de passe à usage unique.\n" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" -"\n" -"RÉINSCRIPTION :\n" -"\n" -"Un hôte déjà inscrit à un certain endroit ayant perdu sa configuration\n" -"(ex.: parce que sa VM a été supprimée), peut être réinscrit.\n" -"\n" -"Pour plus d'informations, consulter les pages « man » de ipa-client-" -"install.\n" -"\n" -"Un hôte peut facultativement stocker des informations complémentaires\n" -"comme sa localisation, le système d'exploitation qu'il exécute, etc.\n" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" -"\n" -" Ajouter un nouvel hôte :\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" -"\n" -" Supprimer un hôte :\n" -" ipa host-del test.example.com\n" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" -"\n" -" Ajouter un nouvel hôte à l'aide d'un mot de passe à usage unique :\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" -"\n" -"Ajouter un nouvel hôte avec un mot de passe aléatoire :\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" -"\n" -" Modifier les informations d'un hôte :\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" -"\n" -" Supprimer les clés publiques SSH d'un hôte et modifier DNS en " -"conséquence :\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" -"\n" -"Désactiver la clé Kerberos, les certificats SSL et tout service d'un hôte :\n" -" ipa host-disable test.example.com\n" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" -"\n" -" Ajouter un hôte pouvant gérer tableau de clés et certificat d'un hôte " -"donné :\n" -" ipa host-add-managedby --hosts=test2 test\n" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" -"\n" -" Autoriser un utilisateur à créer un tableau de clé :\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" - -msgid "Base-64 encoded host certificate" -msgstr "Certificat de l'hôte encodé en Base-64" - -#, fuzzy -#| msgid "Principal name" -msgid "Principal alias" -msgstr "Nom principal" - -msgid "SSH public key fingerprint" -msgstr "Empreinte de clé publique SSH" - -msgid "Authentication Indicators" -msgstr "Indicateurs d'authentification" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Hôte « %(value)s » ajouté" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Hôte « %(value)s » supprimé" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" -"Supprimer les enregistrements A, AAAA, SSHFP et PTR de l'hôte géré par le " -"DNS de IPA." - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "Aucun enregistrement A, AAAA, SSHFP ou PTR trouvé." - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Hôte « %(value)s » modifié" - -msgid "Password cannot be set on enrolled host." -msgstr "Le mot de passe ne peut être défini pour l'hôte enregistré." - -msgid "cn is immutable" -msgstr "cn est immuable" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "%(count)d hôte correspondant" -msgstr[1] "%(count)d hôtes correspondant" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Hôte « %(value)s » désactivé" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Certificats ajoutés à l'hôte « %(value)s »" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Certificats supprimés pour l'hôte « %(value)s »" - -msgid "Add new principal alias to host entry" -msgstr "Ajouter un nouvel alias de principal à l'entrée de l'hôte" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Alias ajoutés à l'hôte « %(value)s »" - -msgid "Remove principal alias from a host entry" -msgstr "Supprimer un alias de principal de l'entrée d'un hôte" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Alias supprimés pour l'hôte « %(value)s »" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" -"la priorité doit être une valeur unique (%(prio)d est déjà utilisé par " -"%(gname)s)" - -msgid "Add Class of Service entry" -msgstr "" - -#, fuzzy -#| msgid "Delete an IPA service." -msgid "Delete Class of Service entry" -msgstr "Supprimer un service IPA." - -#, fuzzy -#| msgid "Modify an HBAC service group." -msgid "Modify Class of Service entry" -msgstr "Supprimer un groupe de services HBAC." - -msgid "Display Class of Service entry" -msgstr "" - -#, fuzzy -#| msgid "Search for an HBAC service group." -msgid "Search for Class of Service entry" -msgstr "Rechercher des groupes de services HBAC." - -msgid "password policy" -msgstr "politique de mots de passe" - -msgid "password policies" -msgstr "politiques de mot de passe" - -msgid "Password Policies" -msgstr "Politiques de mot de passe" - -#, fuzzy -#| msgid "Max renew" -msgid "Max repeat" -msgstr "Renouvellement max." - -#, fuzzy -#| msgid "Maximum number of entries returned" -msgid "Maximum number of same consecutive characters" -msgstr "Nombre maximal d'entrées renvoyées" - -#, fuzzy -#| msgid "Max renew" -msgid "Max sequence" -msgstr "Renouvellement max." - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -#| msgid "User name" -msgid "User check" -msgstr "Nom d'utilisateur" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" -"La durée de vie maximale du mot de passe doit être supérieure au minimum." - -msgid "cannot delete global password policy" -msgstr "impossible de supprimer une politique de mot de passe globale" - -msgid "priority cannot be set on global policy" -msgstr "la priorité ne peut être définie sur la politique globale" - -#, fuzzy -#| msgid "" -#| "\n" -#| "Cross-realm trusts\n" -#| "\n" -#| "Manage trust relationship between IPA and Active Directory domains.\n" -#| "\n" -#| "In order to allow users from a remote domain to access resources in IPA\n" -#| "domain, trust relationship needs to be established. Currently IPA " -#| "supports\n" -#| "only trusts between IPA and Active Directory domains under control of " -#| "Windows\n" -#| "Server 2008 or later, with functional level 2008 or later.\n" -#| "\n" -#| "Please note that DNS on both IPA and Active Directory domain sides should " -#| "be\n" -#| "configured properly to discover each other. Trust relationship relies on\n" -#| "ability to discover special resources in the other domain via DNS " -#| "records.\n" -#| "\n" -#| "Examples:\n" -#| "\n" -#| "1. Establish cross-realm trust with Active Directory using AD " -#| "administrator\n" -#| " credentials:\n" -#| "\n" -#| " ipa trust-add --type=ad --admin " -#| "--password\n" -#| "\n" -#| "2. List all existing trust relationships:\n" -#| "\n" -#| " ipa trust-find\n" -#| "\n" -#| "3. Show details of the specific trust relationship:\n" -#| "\n" -#| " ipa trust-show \n" -#| "\n" -#| "4. Delete existing trust relationship:\n" -#| "\n" -#| " ipa trust-del \n" -#| "\n" -#| "Once trust relationship is established, remote users will need to be " -#| "mapped\n" -#| "to local POSIX groups in order to actually use IPA resources. The mapping " -#| "should\n" -#| "be done via use of external membership of non-POSIX group and then this " -#| "group\n" -#| "should be included into one of local POSIX groups.\n" -#| "\n" -#| "Example:\n" -#| "\n" -#| "1. Create group for the trusted domain admins' mapping and their local " -#| "POSIX group:\n" -#| "\n" -#| " ipa group-add --desc=' admins external map' " -#| "ad_admins_external --external\n" -#| " ipa group-add --desc=' admins' ad_admins\n" -#| "\n" -#| "2. Add security identifier of Domain Admins of the to the " -#| "ad_admins_external\n" -#| " group:\n" -#| "\n" -#| " ipa group-add-member ad_admins_external --external 'AD\\Domain " -#| "Admins'\n" -#| "\n" -#| "3. Allow members of ad_admins_external group to be associated with " -#| "ad_admins POSIX group:\n" -#| "\n" -#| " ipa group-add-member ad_admins --groups ad_admins_external\n" -#| "\n" -#| "4. List members of external members of ad_admins_external group to see " -#| "their SIDs:\n" -#| "\n" -#| " ipa group-show ad_admins_external\n" -#| "\n" -#| "\n" -#| "GLOBAL TRUST CONFIGURATION\n" -#| "\n" -#| "When IPA AD trust subpackage is installed and ipa-adtrust-install is " -#| "run,\n" -#| "a local domain configuration (SID, GUID, NetBIOS name) is generated. " -#| "These\n" -#| "identifiers are then used when communicating with a trusted domain of " -#| "the\n" -#| "particular type.\n" -#| "\n" -#| "1. Show global trust configuration for Active Directory type of trusts:\n" -#| "\n" -#| " ipa trustconfig-show --type ad\n" -#| "\n" -#| "2. Modify global configuration for all trusts of Active Directory type " -#| "and set\n" -#| " a different fallback primary group (fallback primary group GID is used " -#| "as\n" -#| " a primary user GID if user authenticating to IPA domain does not have " -#| "any other\n" -#| " primary GID already set):\n" -#| "\n" -#| " ipa trustconfig-mod --type ad --fallback-primary-group \"alternative " -#| "AD group\"\n" -#| "\n" -#| "3. Change primary fallback group back to default hidden group (any group " -#| "with\n" -#| " posixGroup object class is allowed):\n" -#| "\n" -#| " ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " -#| "Group\"\n" -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" -"\n" -"Relations d'approbation entre domaines\n" -"\n" -"Gestion des relations d'approbation entre les domaines IPA et Active " -"Directory.\n" -"\n" -"Pour permettre aux utilisateurs d'un domaine distant l'accès aux ressources\n" -"d'un domaine IPA, des relations d'approbation doivent être établies.\n" -"Actuellement IPA ne prend en charge que les relations d'approbation entre " -"des\n" -"domaines IPA et Active Directory sous le contrôle de Windows Server 2008 ou\n" -"ultérieur, avec le niveau fonctionnel 2008 ou ultérieur.\n" -"\n" -"Veuillez noter que DNS doit être correctement configuré à la fois côté\n" -"domaine IPA et côté Active Directory pour une découverte mutuelle. La\n" -"relation de confiance repose sur la capacité à repérer des ressources\n" -"spéciales dans l'autre domaine via des enregistrements DNS.\n" -"\n" -"Exemples :\n" -"\n" -"1. Établir des relations d'approbation croisées entre royaumes avec Active\n" -"Directory avec les autorisations d'accès d'un administrateur AD :\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. Lister toutes les relations d'approbation existantes :\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Voir les détails d'une relation de confiance donnée :\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Supprimer une relation de confiance existante :\n" -"\n" -" ipa trust-del \n" -"\n" -"Une fois la relation de confiance établie, les utilisateurs distants " -"doivent\n" -"être mis en relation avec des groupes POSIX locaux pour utiliser réellement\n" -"des ressources IPA. La relation doit se faire via l'appartenance à un " -"groupe\n" -"non-POSIX externe, puis ce groupe doit être intégré dans l'un des groupes\n" -"POSIX locaux.\n" -"\n" -"Exemples :\n" -"\n" -"1. Créer un groupe pour la mise en relation avec le domaine approuvé\n" -" « admins » et leur groupe POSIX local :\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Ajouter un identifiant de sécurité de de Domain Admins au\n" -" groupe « ad_admins_external » :\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Autoriser des membres du groupe « ad_admins_external » à s'associer\n" -" avec le groupe POSIX ad_admins :\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Lister les membres externes du groupe externe « ad_admins_external »\n" -" pour voir leur SID :\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"CONFIGURATION D'UNE CONFIANCE GLOBALE\n" -"\n" -"Une fois le sous-paquet « IPA AD trust » installé et « ipa-adtrust-" -"install »\n" -"exécuté, une configuration de domaine local (SID, GUID, nom NetBIOS) est\n" -"créée. Ces identifiants sont alors utilisés lors de communications avec un\n" -"domaine approuvé de type particulier.\n" -"\n" -"1. Afficher la configuration de confiance globale pour les types de\n" -" confiance Active Directory :\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modifier la configuration globale de toutes les confiances de type\n" -" Active Directory et définir un groupe principal de recours (le GID du\n" -" groupe principal de recours est utilisé comme GID d'utilisateur " -"principal\n" -" si l'utilisateur s'authentifiant auprès du domaine IPA n'a pas d'autre\n" -" GID principal déjà défini) :\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Revenir au groupe caché par défaut comme groupe de recours principal\n" -" (tout groupe de la classe objet « posixGroup » est autorisé) :\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" -" De manière alternative, les serveurs suivants sont capables d'exécuter " -"cette commande : %(masters)s" - -msgid "AD Trust setup" -msgstr "Configuration de la confiance AD" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" -"Impossible d'effectuer la commande sélectionnée sans installation de " -"Samba 4. Assurez-vous de bien avoir installé sur le serveur le paquet IPA " -"« server-trust-ad »." - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" -"Impossible d'effectuer la commande sélectionnée sans configuration de Samba " -"4. Assurez-vous de bien avoir configuré ce serveur avec la commande « ipa-" -"adtrust-install »." - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Impossible d'effectuer une recherche sur les domaines approuvés sans avoir " -"au préalable configuré son propre domaine. Assurez-vous d'avoir au préalable " -"lancé « ipa-adtrust-install » sur le serveur" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" -"Échec de la récupération des domaines depuis la forêt approuvée. Voir les " -"informations détaillées dans le journal d'erreur." - -msgid "trust" -msgstr "confiance" - -msgid "trusts" -msgstr "confiances" - -msgid "Trust" -msgstr "Confiance" - -#, fuzzy -#| msgid "SID blacklist incoming" -msgid "SID blocklist incoming" -msgstr "Entrant dans liste noire de SID" - -#, fuzzy -#| msgid "SID blacklist outgoing" -msgid "SID blocklist outgoing" -msgstr "Sortant de liste noire de SID" - -msgid "UPN suffixes" -msgstr "Suffixes UPN" - -#, fuzzy, python-brace-format -#| msgid "invalid Profile ID" -msgid "invalid SID: {SID}" -msgstr "Identifiant de profil invalide" - -#, fuzzy -#| msgid "" -#| "\n" -#| "Add new trust to use.\n" -#| "\n" -#| "This command establishes trust relationship to another domain\n" -#| "which becomes 'trusted'. As result, users of the trusted domain\n" -#| "may access resources of this domain.\n" -#| "\n" -#| "Only trusts to Active Directory domains are supported right now.\n" -#| "\n" -#| "The command can be safely run multiple times against the same domain,\n" -#| "this will cause change to trust relationship credentials on both\n" -#| "sides.\n" -#| " " -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" -"\n" -"Ajout d'une nouvelle relation de confiance.\n" -"\n" -"Cette commande établit une relation de confiance avec un autre domaine\n" -"qui ainsi devient « de confiance ». En conséquence, des utilisateurs du\n" -"domaine approuvé peuvent avoir accès aux ressources de ce domaine.\n" -"\n" -"Actuellement, seules les relations d'approbation avec les domaines\n" -"Active Directory sont prises en charge.\n" -"\n" -"Cette commande peut être lancée plusieurs fois en toute sécurité à\n" -"l'encontre du même domaine, elle modifiera les références de la relation de\n" -"confiance des deux côtés.\n" -" " - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "Relation d'approbation externe" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" -"Établit une relation d'approbation externe vers un domaine dans une autre " -"forêt. La relation n'est pas transitive au delà du domaine." - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "Confiance Active Directory ajoutée pour le royaume « %(value)s »" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Rétablissement de la confiance pour le domaine « %(value)s »" - -msgid "missing base_id" -msgstr "« base_id » manquant" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" -"« pysss_murmur » non disponible sur le serveur et aucun « base-id » fourni." - -msgid "trust type" -msgstr "type de confiance" - -msgid "only \"ad\" is supported" -msgstr "seul « ad » est pris en charge" - -msgid "domain" -msgstr "domaine" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" -"Impossible d'établir une relation d'approbation vers un AD déployé dans le " -"même domaine que IPA. Une telle configuration ne peut être prise en charge." - -msgid "Realm-domain mismatch" -msgstr "Incohérence domaine-royaume" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" -"Pour établir la confiance avec Active Directory, le nom de domaine et le nom " -"de royaume du serveur IPA doivent correspondre" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" -"Le domaine approuvé %(domain)s est inclus parmi les royaumes de domaines " -"IPA. Il doit être retiré de manière préalable à l'établissement de la " -"relation d'approbation. Cf. la commande « ipa realmdomains-mod --del-" -"domain »." - -msgid "Trusted domain and administrator account use different realms" -msgstr "" -"Le domaine approuvé et le compte administrateur utilisent des domaines " -"différents" - -msgid "Realm administrator password should be specified" -msgstr "Le mot de passe de l'administrateur du domaine doit être indiqué" - -msgid "id range type" -msgstr "type de plage d'id" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" -"Seules les valeurs « ipa-ad-trust » et « ipa-ad-trust-posix » sont " -"autorisées pour « --range-type » lors de l'ajout d'une relation de confiance " -"AD." - -msgid "id range" -msgstr "plage id" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" -"Une plage d'identifiants existe déjà pour cette relation de confiance. Vous " -"devez soit supprimer l'ancienne plage, soit exclure les options « --base-" -"id » ou « --range-size » de la commande." - -msgid "range exists" -msgstr "la plage existe" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" -"Une plage d'ID avec le même nom, mais pour un SID de domaine différent " -"existe déjà. La plage d'ID pour le nouveau domaine approuvé doit être créée " -"manuellement." - -msgid "range type change" -msgstr "modifier le type de plage" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" -"La plage ID existe déjà pour ce domaine approuvé, mais est d'un type " -"différent. Vous devez soit supprimer l'ancienne plage manuellement, soit ne " -"pas forcer le type via l'option « --range-type »." - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" -"La politique de redirection est définie pour lui dans le DNS d'IPA, peut-" -"être le redirecteur pointe-t'il vers un hôte incorrect ?" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "Impossible de vérifier les permissions en écriture vers AD" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "Arguments insuffisants pour établir la relation de confiance" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Confiance « %(value)s » supprimée" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" -"\n" -" Modifier la confiance (pour utilisation future).\n" -"\n" -" Actuellement seule l'option par défaut pour modifier les attributs LDAP\n" -" est disponible. D'autres options particulières seront ajoutées\n" -" dans les versions à venir.\n" -" " - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" -"Relation de confiance « %(value)s » modifiée (la modification sera effective " -"dans 60 secondes)" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d confiance correspondante" -msgstr[1] "%(count)d confiances correspondantes" - -msgid "trust configuration" -msgstr "configuration des relations d'approbation" - -msgid "Global Trust Configuration" -msgstr "Configuration globale des relations d'approbation" - -msgid "IPA AD trust agents" -msgstr "Agents IPA de relation d'approbation AD" - -msgid "IPA servers configured as AD trust agents" -msgstr "Serveurs IPA configurés comme agents de relation d'approbation AD" - -msgid "IPA AD trust controllers" -msgstr "Contrôleurs IPA de relation d'approbation AD" - -msgid "IPA servers configured as AD trust controllers" -msgstr "Serveurs IPA configurés comme contrôleurs de relation d'approbation AD" - -msgid "unsupported trust type" -msgstr "type de relation de confiance non pris en charge" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "Configuration de la relation de confiance « %(value)s » modifiée." - -msgid "SID" -msgstr "SID" - -msgid "sidgen_was_run" -msgstr "« sidgen_was_run »" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" -"Cette commande s'appuie sur l'existence du groupe « editors », mais ce " -"groupe n'a pas été trouvé." - -msgid "trust domain" -msgstr "domaine approuvé" - -msgid "trust domains" -msgstr "domaines approuvés" - -msgid "Trusted domains" -msgstr "domaines approuvés" - -msgid "Trusted domain" -msgstr "domaine approuvé" - -msgid "Domain enabled" -msgstr "Domaine activé" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "Informations sur le domaine approuvé « %(value)s » supprimées" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"impossible de supprimer le domaine racine de la relation de confiance, " -"utiliser la commande « trust-del » pour supprimer la relation de confiance" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" -"Liste des domaines approuvés rafraîchie avec succès. Utiliser la commande " -"« trustdomain-find » pour les énumérer." - -#, fuzzy -#| msgid "IPA servers configured as AD trust agents" -msgid "Configure this server as a trust agent." -msgstr "Serveurs IPA configurés comme agents de relation d'approbation AD" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, fuzzy -#| msgid "not allowed to modify user entries" -msgid "not allowed to remotely add agent" -msgstr "modification des entrées d'un utilisateur interdite" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Activation du domaine approuvé « %(value)s »" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" -"Le domaine racine de la relation de confiance est toujours activé pour la " -"confiance existante" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "domaine approuvé « %(value)s » désactivé" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"impossible de désactiver le domaine racine de la relation de confiance, " -"utiliser la commande « trust-del » pour supprimer la relation de confiance " -"elle-même" - -#, fuzzy -#| msgid "Certificate Authority" -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "Autorité de certification" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Display vault configuration:\n" -#| " ipa vaultconfig-show\n" -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" -"\n" -" Afficher la configuration des coffres-forts :\n" -" ipa vaultconfig-show\n" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -#, fuzzy -#| msgid "Display information about a named service delegation rule." -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" -"Afficher les informations au sujet d'une règle de délégation de service." - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -#, fuzzy -#| msgid "Modify configuration options." -msgid "Certificate Identity Mapping configuration options" -msgstr "Modifier les options de configuration." - -#, fuzzy -#| msgid "Modify Certificate Profile configuration." -msgid "Certificate Identity Mapping Global Configuration" -msgstr "Modifier la configuration d'un profil de certificat." - -#, fuzzy -#| msgid "Prompt to set the user password" -msgid "Prompt for the username" -msgstr "Invite de définition du mot de passe utilisateur" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -#, fuzzy -#| msgid "Modify Certificate Profile configuration." -msgid "Modify Certificate Identity Mapping configuration." -msgstr "Modifier la configuration d'un profil de certificat." - -#, fuzzy -#| msgid "Show the current configuration." -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "Afficher la configuration actuelle." - -#, fuzzy -#| msgid "Certificate Authorities" -msgid "Certificate Identity Mapping Rules" -msgstr "Autorités de certification" - -#, fuzzy -#| msgid "Certificate Type" -msgid "Certificate Identity Mapping Rule" -msgstr "Type de certificat" - -#, fuzzy -#| msgid "Certificate profiles cannot be renamed" -msgid "Certificate Identity Mapping Rule name" -msgstr "Les profils de certificats ne peuvent être renommés" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -#, fuzzy -#| msgid "Remove one or more certificates to the user entry" -msgid "Rule used to map the certificate with a user entry" -msgstr "Supprimer les certificats de l'entrée de l'utilisateur" - -#, fuzzy -#| msgid "Matching Type" -msgid "Matching rule" -msgstr "Type correspondant" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -#, fuzzy -#| msgid "Priority of the policy (higher number means lower priority" -msgid "Priority of the rule (higher number means lower priority" -msgstr "Priorité de la politique (une valeur élevé indique une priorité basse)" - -#, fuzzy -#| msgid "Create a new service delegation rule." -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "Créer une nouvelle règle de délégation de service" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" - -#, fuzzy -#| msgid "Modify Certificate Profile configuration." -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "Modifier la configuration d'un profil de certificat." - -#, fuzzy, python-format -#| msgid "Modified Certificate Profile \"%(value)s\"" -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Profil de certificat « %(value)s » modifié" - -#, fuzzy -#| msgid "Search for Certificate Profiles." -msgid "Search for Certificate Identity Mapping Rules." -msgstr "Rechercher des profils de certificats." - -#, fuzzy, python-format -#| msgid "%(count)d service delegation rule matched" -#| msgid_plural "%(count)d service delegation rules matched" -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "%(count)d règle de délégation de service correspondante" -msgstr[1] "%(count)d règles de délégation de service correspondantes" - -#, fuzzy -#| msgid "Display information about a named service delegation rule." -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" -"Afficher les informations au sujet d'une règle de délégation de service." - -#, fuzzy -#| msgid "Delete a Certificate Profile." -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "Supprimer un profil de certificat." - -#, fuzzy, python-format -#| msgid "Deleted service delegation target \"%(value)s\"" -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Cible de délégation de service « %(value)s » supprimée" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" - -#, fuzzy -#| msgid "Delete a Certificate Profile." -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "Supprimer un profil de certificat." - -#, fuzzy, python-format -#| msgid "Modified Certificate Profile \"%(value)s\"" -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Profil de certificat « %(value)s » modifié" - -#, fuzzy -#| msgid "" -#| "Fetching domains from trusted forest failed. See details in the error_log" -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" -"Échec de la récupération des domaines depuis la forêt approuvée. Voir les " -"informations détaillées dans le journal d'erreur." - -#, fuzzy -#| msgid "" -#| "Fetching domains from trusted forest failed. See details in the error_log" -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" -"Échec de la récupération des domaines depuis la forêt approuvée. Voir les " -"informations détaillées dans le journal d'erreur." - -#, fuzzy -#| msgid "User login" -msgid "User logins" -msgstr "Identifiant de connexion" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d user matched" -#| msgid_plural "%(count)d users matched" -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "%(count)d utilisateur correspondant" -msgstr[1] "%(count)d utilisateurs correspondant" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" -"impossible d'ajouter la permission « %(perm)s » avec le type de liaison " -"« %(bindtype)s » à un privilège" - -msgid "Privilege" -msgstr "Privilège" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "Privilège « %(value)s » ajouté" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Privilège « %(value)s » supprimé" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "Privilège « %(value)s » supprimé" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d privilège correspondant" -msgstr[1] "%(count)d privilèges correspondant" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -30692,1101 +31762,35 @@ msgstr "Supprimer un alias de principal d'un service" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "Alias supprimés du principal de service « %(value)s »" -msgid "delegation" -msgstr "délégation" +msgid "self service permission" +msgstr "permission de libre service" -msgid "delegations" -msgstr "délégations" +msgid "self service permissions" +msgstr "permissions de libre service" -msgid "Delegations" -msgstr "Délégations" +msgid "Self Service Permissions" +msgstr "Permissions de libre service" -msgid "Delegation" -msgstr "Délégation" +msgid "Self Service Permission" +msgstr "Permission de libre service" #, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "Délégation « %(value)s » ajoutée" +msgid "Added selfservice \"%(value)s\"" +msgstr "Permission de libre service « %(value)s » ajoutée" #, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "Délégation « %(value)s » supprimée" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Permission de libre service « %(value)s » supprimée" #, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "Délégation « %(value)s » modifiée" +msgid "Modified selfservice \"%(value)s\"" +msgstr "Permission de libre service « %(value)s » modifiée" #, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "%(count)d délégation correspondante" -msgstr[1] "%(count)d délégations correspondantes" - -msgid "The deny type has been deprecated." -msgstr "Le type « deny » est obsolète." - -msgid "HBAC rules" -msgstr "Règles HBAC" - -msgid "HBAC Rules" -msgstr "Règles HBAC" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "Règle HBAC « %(value)s » ajoutée" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Règle HBAC « %(value)s » supprimée" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "Règle HBAC « %(value)s » modifiée" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "%(count)d règle HBAC correspondante" -msgstr[1] "%(count)d règles HBAC correspondantes" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "Règle HBAC « %(value)s » activée" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "Règle HBAC « %(value)s » désactivée" - -msgid "Access time" -msgstr "Horaire d'accès" - -#, fuzzy -#| msgid "Add target hosts and hostgroups to an HBAC rule." -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "Ajouter des hôtes et des groupes d'hôtes cibles à une règle HBAC." - -#, fuzzy -#| msgid "" -#| "\n" -#| "Simulate use of Host-based access controls\n" -#| "\n" -#| "HBAC rules control who can access what services on what hosts.\n" -#| "You can use HBAC to control which users or groups can access a service,\n" -#| "or group of services, on a target host.\n" -#| "\n" -#| "Since applying HBAC rules implies use of a production environment,\n" -#| "this plugin aims to provide simulation of HBAC rules evaluation without\n" -#| "having access to the production environment.\n" -#| "\n" -#| " Test user coming to a service on a named host against\n" -#| " existing enabled rules.\n" -#| "\n" -#| " ipa hbactest --user= --host= --service=\n" -#| " [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -#| " [--sizelimit= ]\n" -#| "\n" -#| " --user, --host, and --service are mandatory, others are optional.\n" -#| "\n" -#| " If --rules is specified simulate enabling of the specified rules and " -#| "test\n" -#| " the login of the user using only these rules.\n" -#| "\n" -#| " If --enabled is specified, all enabled HBAC rules will be added to " -#| "simulation\n" -#| "\n" -#| " If --disabled is specified, all disabled HBAC rules will be added to " -#| "simulation\n" -#| "\n" -#| " If --nodetail is specified, do not return information about rules " -#| "matched/not matched.\n" -#| "\n" -#| " If both --rules and --enabled are specified, apply simulation to --rules " -#| "_and_\n" -#| " all IPA enabled rules.\n" -#| "\n" -#| " If no --rules specified, simulation is run against all IPA enabled " -#| "rules.\n" -#| " By default there is a IPA-wide limit to number of entries fetched, you " -#| "can change it\n" -#| " with --sizelimit option.\n" -#| "\n" -#| "EXAMPLES:\n" -#| "\n" -#| " 1. Use all enabled HBAC rules in IPA database to simulate:\n" -#| " $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -#| " --------------------\n" -#| " Access granted: True\n" -#| " --------------------\n" -#| " Not matched rules: my-second-rule\n" -#| " Not matched rules: my-third-rule\n" -#| " Not matched rules: myrule\n" -#| " Matched rules: allow_all\n" -#| "\n" -#| " 2. Disable detailed summary of how rules were applied:\n" -#| " $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -#| " --------------------\n" -#| " Access granted: True\n" -#| " --------------------\n" -#| "\n" -#| " 3. Test explicitly specified HBAC rules:\n" -#| " $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -#| " --rules=myrule --rules=my-second-rule\n" -#| " ---------------------\n" -#| " Access granted: False\n" -#| " ---------------------\n" -#| " Not matched rules: my-second-rule\n" -#| " Not matched rules: myrule\n" -#| "\n" -#| " 4. Use all enabled HBAC rules in IPA database + explicitly specified " -#| "rules:\n" -#| " $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -#| " --rules=myrule --rules=my-second-rule --enabled\n" -#| " --------------------\n" -#| " Access granted: True\n" -#| " --------------------\n" -#| " Not matched rules: my-second-rule\n" -#| " Not matched rules: my-third-rule\n" -#| " Not matched rules: myrule\n" -#| " Matched rules: allow_all\n" -#| "\n" -#| " 5. Test all disabled HBAC rules in IPA database:\n" -#| " $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -#| " ---------------------\n" -#| " Access granted: False\n" -#| " ---------------------\n" -#| " Not matched rules: new-rule\n" -#| "\n" -#| " 6. Test all disabled HBAC rules in IPA database + explicitly " -#| "specified rules:\n" -#| " $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -#| " --rules=myrule --rules=my-second-rule --disabled\n" -#| " ---------------------\n" -#| " Access granted: False\n" -#| " ---------------------\n" -#| " Not matched rules: my-second-rule\n" -#| " Not matched rules: my-third-rule\n" -#| " Not matched rules: myrule\n" -#| "\n" -#| " 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -#| " $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -#| " --enabled --disabled\n" -#| " --------------------\n" -#| " Access granted: True\n" -#| " --------------------\n" -#| " Not matched rules: my-second-rule\n" -#| " Not matched rules: my-third-rule\n" -#| " Not matched rules: myrule\n" -#| " Not matched rules: new-rule\n" -#| " Matched rules: allow_all\n" -#| "\n" -#| "\n" -#| "HBACTEST AND TRUSTED DOMAINS\n" -#| "\n" -#| "When an external trusted domain is configured in IPA, HBAC rules are also " -#| "applied\n" -#| "on users accessing IPA resources from the trusted domain. Trusted domain " -#| "users and\n" -#| "groups (and their SIDs) can be then assigned to external groups which can " -#| "be\n" -#| "members of POSIX groups in IPA which can be used in HBAC rules and thus " -#| "allowing\n" -#| "access to resources protected by the HBAC system.\n" -#| "\n" -#| "hbactest plugin is capable of testing access for both local IPA users and " -#| "users\n" -#| "from the trusted domains, either by a fully qualified user name or by " -#| "user SID.\n" -#| "Such user names need to have a trusted domain specified as a short name\n" -#| "(DOMAIN\\Administrator) or with a user principal name (UPN), " -#| "Administrator@ad.test.\n" -#| "\n" -#| "Please note that hbactest executed with a trusted domain user as --user " -#| "parameter\n" -#| "can be only run by members of \"trust admins\" group.\n" -#| "\n" -#| "EXAMPLES:\n" -#| "\n" -#| " 1. Test if a user from a trusted domain specified by its shortname " -#| "matches any\n" -#| " rule:\n" -#| "\n" -#| " $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -#| "service sshd\n" -#| " --------------------\n" -#| " Access granted: True\n" -#| " --------------------\n" -#| " Matched rules: allow_all\n" -#| " Matched rules: can_login\n" -#| "\n" -#| " 2. Test if a user from a trusted domain specified by its domain name " -#| "matches\n" -#| " any rule:\n" -#| "\n" -#| " $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -#| "service sshd\n" -#| " --------------------\n" -#| " Access granted: True\n" -#| " --------------------\n" -#| " Matched rules: allow_all\n" -#| " Matched rules: can_login\n" -#| "\n" -#| " 3. Test if a user from a trusted domain specified by its SID matches " -#| "any rule:\n" -#| "\n" -#| " $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 " -#| "\\\n" -#| " --host `hostname` --service sshd\n" -#| " --------------------\n" -#| " Access granted: True\n" -#| " --------------------\n" -#| " Matched rules: allow_all\n" -#| " Matched rules: can_login\n" -#| "\n" -#| " 4. Test if other user from a trusted domain specified by its SID " -#| "matches any rule:\n" -#| "\n" -#| " $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 " -#| "\\\n" -#| " --host `hostname` --service sshd\n" -#| " --------------------\n" -#| " Access granted: True\n" -#| " --------------------\n" -#| " Matched rules: allow_all\n" -#| " Not matched rules: can_login\n" -#| "\n" -#| " 5. Test if other user from a trusted domain specified by its shortname " -#| "matches\n" -#| " any rule:\n" -#| "\n" -#| " $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -#| "sshd\n" -#| " --------------------\n" -#| " Access granted: True\n" -#| " --------------------\n" -#| " Matched rules: allow_all\n" -#| " Not matched rules: can_login\n" -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" -"\n" -"Simuler l'utilisation des contrôles d'accès fondés sur l'hôte\n" -"\n" -"Les règles HBAC contrôlent qui peut accéder à quel service sur quels hôtes.\n" -"Vous pouvez utiliser HBAC pour contrôler quels utilisateurs ou quels " -"groupes\n" -"ont accés à un service ou à un groupe de services, sur un hôte cible.\n" -"\n" -"L'application de règles HBAC présuppose un environnement de production ;\n" -"ce greffon a pour objet de fournir une simulation de l'évaluation des " -"règles\n" -"HBAC sans nécessiter d'accès à cet environnement.\n" -"\n" -" Tester l'arrivée d'un utilisateur dans un service sur un hôte donné\n" -" vis à vis des règles actives existantes.\n" -"\n" -"ipa hbactest --user= --host= --service=\\\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\\\n" -" [--sizelimit= ]\n" -"\n" -"--user, --host et --service sont obligatoires, les autres sont " -"optionnelles.\n" -"\n" -" Si --rules est défini, simule l'activation des règles « rules-list » et\n" -" teste la connexion de l'utilisateur uniquement sur ces règles.\n" -"\n" -" Si --enabled est défini, toutes les règles HBAC activées sont ajoutées à\n" -" la simulation\n" -"\n" -" Si --disabled est défini, toutes les règles HBAC désactivées sont ajoutées\n" -" à la simulation\n" -"\n" -" Si --nodetail est défini, il n'est pas renvoyé d'information sur les " -"règles satisfaites ou non satisfaites.\n" -"\n" -" Si --rules et --enabled sont définis tous deux, la simulation est " -"appliquée\n" -" à --rules _et_ à tous les règles IPA activées.\n" -"\n" -" Si --rules n'est pas défini, la simulation est lancée vis à sis de toutes\n" -" les règles IPA activées.\n" -" Par défaut, il y a une limite globale IPA pour le nombre d'entrées\n" -" renvoyées, vous pouvez la modifier avec l'option « --sizelimit ».\n" -"\n" -"EXEMPLES :\n" -"\n" -" 1. Utiliser toutes les règles HBAC activées dans la base de données IPA\n" -" pour la simulation :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Désactiver le résumé détaillé sur l'application des règles :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Tester explicitement les règles HBAC indiquées :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" -"--rules=my-second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Utiliser toutes les règles HBAC activées de la base de données IPA\n" -" plus les règles explicitement définies :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" -"--rules=my-second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Tester toutes les règles HBAC désactivées de la base de données " -"IPA :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Tester toutes les règles HBAC désactivées de la base de données IPA\n" -" plus les règles explicitement définies :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" -"--rules=my-second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Tester toutes les règles HBAC (activées et désactivées) de la base\n" -" de données IPA :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -"\n" -"\n" -"TEST HBAC ET domaines approuvés\n" -"\n" -"Si un domaine approuvé externe est configuré dans IPA, les règles HBAC\n" -"sont aussi appliquées aux utilisateurs accédant aux ressources IPA à partir\n" -"du domaine approuvé. Les utilisateurs des domaines approuvés et les\n" -"groupes (et leur SID) peuvent être assignés à des groupes externes pouvant\n" -"être membres de groupes POSIX d'IPA éligibles aux règles HBAC, ce qui\n" -"autorise un accès aux ressources protégées par le système HBAC.\n" -"\n" -"Le greffon « hbactest » peut tester des accès, à la fois d'utilisateurs\n" -"IPA locaux et d'utilisateurs de domaines approuvés à partir, soit du\n" -"nom d'utilisateur pleinement qualifié, soit du SID utilisateur. De tels " -"noms\n" -"d'utilisateur doivent avoir un domaine approuvé précisé comme nom court\n" -"(DOMAINE\\Administrateur) ou avec un nom de principal d'utilisateur (UPN),\n" -"Administrator@ad.test.\n" -"\n" -"Veuillez noter que « hbactest » exécuté avec un utilisateur de domaine de\n" -"confiance en tant que paramètre --user ne peut être lancé que par des\n" -"membres du groupe des « administrateurs de confiance ».\n" -"\n" -"EXEMPLES :\n" -"\n" -" 1. Tester si un utilisateur d'un domaine approuvé défini par son\n" -" nom court satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Tester si un utilisateur d'un domaine approuvé défini par son\n" -" nom de domaine satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Tester si un utilisateur d'un domaine approuvé défini par son\n" -" SID satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Tester si un autre utilisateur d'un domaine approuvé défini\n" -" par son SID satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Tester si un autre utilisateur d'un domaine approuvé défini par\n" -" son nom court satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" - -msgid "Unresolved rules in --rules" -msgstr "Règles non résolues dans « --rules »" - -#, python-format -msgid "Access granted: %s" -msgstr "Accès autorisé : %s" - -msgid "operation not defined" -msgstr "opération non définie" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "non autorisé à effectuer l'opération : %s" - -msgid "No such virtual command" -msgstr "Commande virtuelle inconnue" - -msgid "Member service groups" -msgstr "Groupes de services membres" - -msgid "Member HBAC service groups" -msgstr "Groupes de services HBAC membres" - -#, fuzzy -#| msgid "User ID overrides" -msgid "Member ID user overrides" -msgstr "Surcharges d'identifiants utilisateurs" - -#, fuzzy -#| msgid "Indirect Member users" -msgid "Indirect Member ID user overrides" -msgstr "Utilisateurs membres indirects" - -msgid "Indirect Member permissions" -msgstr "Droits d'accès de membre indirect" - -msgid "Indirect Member HBAC service" -msgstr "Service HBAC de membre indirect" - -msgid "Indirect Member HBAC service group" -msgstr "Groupe de services de membre indirect" - -msgid "Invalid format. Should be name=value" -msgstr "Format invalide. Doit être nom=valeur" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Un serveur maître IPA ne peut ni être supprimé ni désactivé" - -msgid "entry" -msgstr "entrée" - -msgid "entries" -msgstr "entrées" - -msgid "Entry" -msgstr "Entrée" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "entrée conteneur (%(container)s) introuvable" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s : %(oname)s introuvable" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "L'objet %(oname)s avec le nom « %(pkey)s » existe déjà" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "l'attribut « %(attribute)s » n'est pas autorisé" - -#, fuzzy, python-format -#| msgid "attribute \"%s\" not allowed" -msgid "these attributes are not allowed: %(attrs)s" -msgstr "attribut « %s » interdit" - -msgid "attribute is not configurable" -msgstr "l'attribut n'est pas configurable" - -msgid "No such attribute on this entry" -msgstr "Pas d'attribut de ce type sur cette entrée" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "Renomme l'objet %(ldap_obj_name)s" - -msgid "the entry was deleted while being modified" -msgstr "cette entrée a été supprimée pendant sa modification" - -#, python-format -msgid "%s" -msgstr "%s" - -#, python-format -msgid "%s to add" -msgstr "%s à ajouter" - -#, python-format -msgid "%s to remove" -msgstr "%s à supprimer" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" -"Recherche des %(searched_object)s avec ceux de %(ldap_object)s de " -"%(relationship)s." - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" -"Recherche des %(searched_object)s sans ceux de %(ldap_object)s de " -"%(relationship)s." - -#, fuzzy, python-format -#| msgid "Added new aliases to host \"%(value)s\"" -msgid "added attribute value to entry %(value)s" -msgstr "Alias ajoutés à l'hôte « %(value)s »" - -#, fuzzy, python-format -#| msgid "Removed aliases from host \"%(value)s\"" -msgid "removed attribute values from entry %(value)s" -msgstr "Alias supprimés pour l'hôte « %(value)s »" - -msgid "one or more values to remove" -msgstr "une ou plusieurs valeurs à supprimer" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" -"\n" -"Utilisateur de base\n" -"\n" -"Ceci contient les définitions communes pour les utilisateurs et utilisateurs " -"en attente\n" - -msgid "must be TRUE or FALSE" -msgstr "doit être « TRUE » ou « FALSE »" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#, fuzzy -#| msgid "Password expiration" -msgid "User password expiration" -msgstr "Expiration de mot de passe" - -msgid "SMB logon script path" -msgstr "" - -#, fuzzy -#| msgid "%i profile added." -msgid "SMB profile path" -msgstr "%i profil ajouté." - -#, fuzzy -#| msgid "Home directory" -msgid "SMB Home Directory" -msgstr "Répertoire personnel" - -#, fuzzy -#| msgid "Home directory base" -msgid "SMB Home Directory Drive" -msgstr "Base du répertoire utilisateur" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "format d'e-mail invalide : %(email)s" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "responsable %(manager)s introuvable" - -#, fuzzy -#| msgid "file to store certificate in" -msgid "Issuer of the certificate" -msgstr "fichier où stocker le certificat" - -#, fuzzy -#| msgid "File to store the certificate in." -msgid "Subject of the certificate" -msgstr "Fichier dans lequel stocker le certificat." - -#, fuzzy -#| msgid "cannot be empty" -msgid "cannot have an empty subject" -msgstr "ne peut pas être vide" - -#, fuzzy -#| msgid "cannot specify both raw certificate and file" -msgid "cannot specify both subject/issuer and certificate" -msgstr "impossible d'indiquer à la fois certificat brut et un nom de fichier" - -#, fuzzy -#| msgid "cannot specify both raw certificate and file" -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "impossible d'indiquer à la fois certificat brut et un nom de fichier" - -#, fuzzy -#| msgid "Add one or more certificates to the user entry" -msgid "Add one or more certificate mappings to the user entry." -msgstr "Ajouter un ou plusieurs certificats à l'entrée utilisateur" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" - -#, fuzzy -#| msgid "Remove one or more certificates to the user entry" -msgid "Remove one or more certificate mappings from the user entry." -msgstr "Supprimer les certificats de l'entrée de l'utilisateur" - -#, fuzzy, python-format -#| msgid "Removed certificates from user \"%(value)s\"" -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "Certificats supprimés de l'utilisateur « %(value)s »" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "doit contenir un tuple (liste, dict)" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Utilisateur « %(value)s » ajouté" - -msgid "Default group for new users is not POSIX" -msgstr "Le groupe par défaut des nouveaux utilisateurs n'est pas POSIX" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Utilisateur « %(value)s » supprimé" - -#, python-format -msgid "%s: user is already preserved" -msgstr "%s : l'utilisateur est déjà préservé" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Utilisateur « %(value)s » modifié" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Compte utilisateur « %(value)s » restauré" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "l'utilisateur « %s » est déjà actif" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Compte utilisateur en attente « %(value)s »" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Compte utilisateur « %(value)s » désactivé" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "Compte utilisateur « %(value)s » activé" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" -"\n" -" Déverrouiller un compte utilisateur\n" -"\n" -" Un compte utilisateur peut se verrouiller si le mot de passe n'est pas\n" -" saisi correctement plusieurs fois de suite dans un laps de temps donné\n" -" défini par la politique du mot de passe. Le verrouillage d'un compte " -"est\n" -" un état temporaire ; il peut être déverrouillé par un administrateur." - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Compte utilisateur « %(value)s » déverrouillé" - -msgid "Failed logins" -msgstr "Connexions ayant échoué" - -msgid "Last successful authentication" -msgstr "Dernière authentification réussie" - -msgid "Last failed authentication" -msgstr "Dernière authentification ayant échoué" - -msgid "Time now" -msgstr "Heure actuelle" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" -"\n" -" État verrouillé d'un compte utilisateur\n" -"\n" -" Un compte peut être verrouillé si un mot de passe incorrect est entre à\n" -" plusieurs reprises dans un laps de temps donnée selon la politique de\n" -" contrôle des mots de passe. Le verrouillage du compte est un état\n" -" temporaire ; le compte peut être déverrouillé par un administrateur.\n" -"\n" -" Ce dernier se connecte sur l'IPA maître et affiche l'état du\n" -" verrouillage de chacun.\n" -"\n" -" Pour savoir si un compte est verrouillé sur un serveur donné, vous " -"devez\n" -" comparer le nombre d'échecs de connexion et l'heure du dernier échec.\n" -" Pour qu'un compte soit verrouillé, le nombre d'échecs doit dépasser le\n" -" maximum autorisé dans l'intervalle de temps donné tel que défini dans " -"la\n" -" politique de mot de passe propre à l'utilisateur.\n" -"\n" -" Le compteur d'échecs de connexion n'est incrémenté que lorsqu'un\n" -" utilisateur tente une connexion, il est donc possible qu'un compte\n" -" paraisse bloqué mais que la dernière tentative de connexion soit\n" -" antérieure à la durée de verrouillage de la règle. Cela\n" -" signifie que l'utilisateur peut tenter de se connecter à nouveau." - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "%(host)s en échec : %(error)s" - -#, python-format -msgid "%(host)s failed" -msgstr "%(host)s en échec" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Compte désactivé : %(disabled)s" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Certificats supprimés de l'utilisateur « %(value)s »" - -#, fuzzy -#| msgid "Add new principal alias to host entry" -msgid "Add new principal alias to the user entry" -msgstr "Ajouter un nouvel alias de principal à l'entrée de l'hôte" - -#, fuzzy, python-format -#| msgid "Added new aliases to host \"%(value)s\"" -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Alias ajoutés à l'hôte « %(value)s »" - -#, fuzzy -#| msgid "Remove principal alias from a host entry" -msgid "Remove principal alias from the user entry" -msgstr "Supprimer un alias de principal de l'entrée d'un hôte" - -#, fuzzy, python-format -#| msgid "Removed aliases from host \"%(value)s\"" -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Alias supprimés pour l'hôte « %(value)s »" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "%(count)d permission de libre service correspondant" +msgstr[1] "%(count)d permissions de libre service correspondant" #, python-format msgid "all masters must have %(role)s role enabled" @@ -32001,6 +32005,27 @@ msgstr "" "Relation d'approbation externe non transitive vers un domaine dans une autre " "forêt Active Directory" +msgid "Request must be a dict" +msgstr "La requête doit être un dictionnaire" + +msgid "Request is missing \"method\"" +msgstr "Il manque le paramètre « method » à la requête" + +msgid "Request is missing \"params\"" +msgstr "Il manque le paramètre « params » à la requête" + +msgid "params must be a list" +msgstr "« params » doit être une liste" + +msgid "params must contain [args, options]" +msgstr "« params » doit contenir [args, options]" + +msgid "params[0] (aka args) must be a list" +msgstr "« params[0] » (alias « args ») doit être une liste" + +msgid "params[1] (aka options) must be a dict" +msgstr "« params[1] » (alias « options ») doit être un dictionnaire " + #, python-format msgid "" "\n" @@ -32030,27 +32055,6 @@ msgstr "" "La topologie ne permet pas au serveur %(server)s de se répliquer avec les " "serveurs :" -msgid "Request must be a dict" -msgstr "La requête doit être un dictionnaire" - -msgid "Request is missing \"method\"" -msgstr "Il manque le paramètre « method » à la requête" - -msgid "Request is missing \"params\"" -msgstr "Il manque le paramètre « params » à la requête" - -msgid "params must be a list" -msgstr "« params » doit être une liste" - -msgid "params must contain [args, options]" -msgstr "« params » doit contenir [args, options]" - -msgid "params[0] (aka args) must be a list" -msgstr "« params[0] » (alias « args ») doit être une liste" - -msgid "params[1] (aka options) must be a dict" -msgstr "« params[1] » (alias « options ») doit être un dictionnaire " - #, fuzzy, python-format #| msgid "must be \"%s\"" msgid "must equal %r" diff --git a/po/hi.po b/po/hi.po index fc33164be..02ef534a5 100644 --- a/po/hi.po +++ b/po/hi.po @@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Hindi\n" @@ -18,6 +18,99 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + #, c-format msgid "Out of memory!\n" msgstr "" @@ -272,99 +365,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - #, c-format msgid "cannot open configuration file %s\n" msgstr "" @@ -8935,6 +8935,101 @@ msgid "" "Establish bi-directional trust. By default trust is inbound one-way only." msgstr "" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "" "\n" "ID ranges\n" @@ -9147,101 +9242,6 @@ msgid "" " " msgstr "" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - msgid "Remove users that can manage this token." msgstr "" @@ -11462,161 +11462,20 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "Additional instructions:" +msgid "Results are truncated, try a more specific search" msgstr "" #, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" +msgid "Unknown option: %(option)s" msgstr "" -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." +msgid "Client version. Used to determine if server will accept request." msgstr "" -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" +msgid "any of the configured servers" msgstr "" -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." +msgid "Exceeded number of tries to forward a request." msgstr "" #, python-format @@ -11670,6 +11529,141 @@ msgstr "" msgid "No file to read" msgstr "" +msgid "incorrect type" +msgstr "गलत प्रकार" + +msgid "Only one value is allowed" +msgstr "केवल एक मान की अनुमति है" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "सही या गलत होना चाहिए" + +msgid "must be an integer" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +msgid "must be a certificate" +msgstr "" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, python-format +msgid "must be '%(value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "must be True or False" +msgid "must be one of %(values)s" +msgstr "सही या गलत होना चाहिए" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be datetime value" +msgstr "सही या गलत होना चाहिए" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +msgid "must be DNS name" +msgstr "" + +msgid "must be absolute" +msgstr "" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be relative" +msgstr "सही या गलत होना चाहिए" + +msgid "must be dictionary" +msgstr "" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + msgid "A dictionary representing an LDAP entry" msgstr "" @@ -11679,16 +11673,6 @@ msgstr "LDAP प्रविष्टियों की सूची" msgid "All commands should at least have a result" msgstr "सभी आदेशों का कम से कम परिणाम होना चाहिए" -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" @@ -12051,153 +12035,161 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" -msgid "incorrect type" -msgstr "गलत प्रकार" - -msgid "Only one value is allowed" -msgstr "केवल एक मान की अनुमति है" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "सही या गलत होना चाहिए" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)s" +msgid "Additional instructions:" msgstr "" #, python-format msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." msgstr "" #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" msgstr "" #, python-format -msgid "must be at least %(minlength)d bytes" +msgid "'%(option)s' option is deprecated. %(additional_info)s" msgstr "" #, python-format -msgid "can be at most %(maxlength)d bytes" +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" msgstr "" #, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -msgid "must be a certificate" -msgstr "" - -msgid "must be a certificate signing request" +msgid "DNS server %(server)s: %(error)s." msgstr "" #, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "must be at least %(minlength)d characters" +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." msgstr "" #, python-format -msgid "can be at most %(maxlength)d characters" +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "must be exactly %(length)d characters" +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." msgstr "" #, python-format -msgid "The character %(char)r is not allowed." +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" msgstr "" #, python-format -msgid "must be '%(value)s'" +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." msgstr "" -#, fuzzy, python-format -#| msgid "must be True or False" -msgid "must be one of %(values)s" -msgstr "सही या गलत होना चाहिए" - -#, fuzzy -#| msgid "must be True or False" -msgid "must be datetime value" -msgstr "सही या गलत होना चाहिए" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -#, fuzzy -#| msgid "must be True or False" -msgid "must be relative" -msgstr "सही या गलत होना चाहिए" - -msgid "must be dictionary" -msgstr "" - -msgid "must be Kerberos principal" +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." msgstr "" #, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." msgstr "" #, python-format -msgid "%(filename)s: file not found" +msgid "'%(command)s' is deprecated. %(additional_info)s" msgstr "" -#, python-brace-format -msgid "Unable to parse option {item}" +#, python-format +msgid "%(line)s" msgstr "" -msgid "any of the configured servers" +#, python-format +msgid "Search result has been truncated: %(reason)s" msgstr "" -msgid "Exceeded number of tries to forward a request." +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." msgstr "" msgid "Filename is empty" @@ -12299,6 +12291,18 @@ msgstr "" msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + #, python-format msgid "Retrieving CA cert chain failed: %s" msgstr "" @@ -12315,10 +12319,6 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" -#, python-format -msgid "objectclass %s not found" -msgstr "" - #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" @@ -12446,113 +12446,10 @@ msgid_plural "%(count)d automount keys matched" msgstr[0] "" msgstr[1] "" +#, python-format msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "" @@ -12776,20 +12673,4131 @@ msgstr "" msgid "%i CAs removed." msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "" + +msgid "User Group" +msgstr "" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be TRUE or FALSE" +msgstr "सही या गलत होना चाहिए" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject" +msgstr "" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Password Policy" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject email address" +msgstr "" + +msgid "Subject DNS name" +msgstr "" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +msgid "Subject IP Address" +msgstr "" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +msgid "Serial number (hex)" +msgstr "" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "" + +msgid "command" +msgstr "" + +msgid "commands" +msgstr "" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust type" +msgstr "" + +msgid "Trust status" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " msgstr "" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +msgid "Vault configuration" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "" + +msgid "Host Group" +msgstr "" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +msgid "hostgroup" +msgstr "" + +msgid "privileged hostgroup" +msgstr "" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +msgid "Location name" +msgstr "" + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +msgid "Servers" +msgstr "" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +msgid "IPA Server" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "A list of LDAP entries" +msgid "A list of ACI values" +msgstr "LDAP प्रविष्टियों की सूची" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" msgstr "" msgid "" @@ -13336,9 +17344,6 @@ msgstr "" msgid "Managedby permission" msgstr "" -msgid "DNS is not configured" -msgstr "" - msgid "cannot be used when a zone is specified" msgstr "" @@ -13559,1343 +17564,527 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, python-brace-format msgid "" -"\n" -"DNS server configuration\n" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." msgstr "" -msgid "" -"\n" -"Manipulate DNS server configuration\n" +msgid "Server does not support domain level functionality" msgstr "" -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" +msgid "Domain Level cannot be lowered." msgstr "" #, python-brace-format -msgid "Topology management requires minimum domain level {0} " +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." msgstr "" -msgid "segment" +msgid "" +"\n" +"API Schema\n" msgstr "" -msgid "segments" +msgid "" +"\n" +"Provides API introspection capabilities.\n" msgstr "" -msgid "Topology Segments" +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" msgstr "" -msgid "Topology Segment" +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" msgstr "" #, python-format -msgid "left node is not a topology node: %(leftnode)s" +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Version" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +msgid "Method name" msgstr "" #, python-format -msgid "right node is not a topology node: %(rightnode)s" +msgid "%(pkey)s: %(oname)s not found" msgstr "" -msgid "left node and right node must not be the same" +msgid "Display information about a command." msgstr "" -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" +msgid "Search for commands." msgstr "" -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +msgid "CLI name" +msgstr "" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" msgstr "" #, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" msgstr[0] "" msgstr[1] "" #, python-format -msgid "Added segment \"%(value)s\"" +msgid "Enabled HBAC rule \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted segment \"%(value)s\"" +msgid "Disabled HBAC rule \"%(value)s\"" msgstr "" -#, python-format -msgid "Modified segment \"%(value)s\"" +msgid "Access time" msgstr "" -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" +msgid "Add source hosts and hostgroups to an HBAC rule." msgstr "" msgid "" "\n" -"Verify replication topology for suffix.\n" +"Simulate use of Host-based access controls\n" "\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"Groups of hosts.\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" "\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" "\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" "\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "" - -msgid "Host Group" -msgstr "" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -msgid "hostgroup" -msgstr "" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" +"HBACTEST AND TRUSTED DOMAINS\n" "\n" -"Vaults\n" -msgstr "" - -msgid "" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" "\n" -"Manage vaults.\n" -msgstr "" - -msgid "" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" "\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -msgid "Vault configuration" -msgstr "" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -#| msgid "A list of LDAP entries" -msgid "A list of ACI values" -msgstr "LDAP प्रविष्टियों की सूची" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" -msgid "must be at least 10" +msgid "Unresolved rules in --rules" msgstr "" -msgid "configuration options" +#, python-format +msgid "Access granted: %s" msgstr "" -msgid "Configuration" +msgid "ID View" msgstr "" -msgid "Maximum hostname length" +msgid "system ID View" msgstr "" -msgid "IPA masters" +msgid "ID Views" msgstr "" -msgid "List of all IPA masters" +msgid "User object overrides" msgstr "" -msgid "Hidden IPA masters" +msgid "Group object overrides" msgstr "" -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" +msgid "Hosts the view applies to" msgstr "" msgid "Domain resolution order" @@ -14904,228 +18093,177 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Empty domain is not allowed" +#, python-format +msgid "Added ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" +msgid "Deleted ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Server has no information about domain '%(domain)s'" +msgid "Modified an ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" msgstr[0] "" msgstr[1] "" -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgid "Default Trust View cannot be applied on hosts" msgstr "" -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" msgstr "" #, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "ID View applied to %i host." msgstr "" -msgid "not allowed to modify user entries" +#, python-format +msgid "ID View applied to %i hosts." msgstr "" -msgid "not allowed to modify group entries" +#, python-format +msgid "ID View cleared from %i host." msgstr "" -msgid "Not a managed group" +#, python-format +msgid "ID View cleared from %i hosts." msgstr "" -msgid "Add users that can manage members of this group." +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" -msgid "Remove users that can manage members of this group." +msgid "IPA object" msgstr "" +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" "Permissions\n" @@ -15345,1220 +18483,36 @@ msgid_plural "%(count)d permissions matched" msgstr[0] "" msgstr[1] "" -msgid "" -"\n" -"OTP Tokens\n" +msgid "delegation" msgstr "" -msgid "" -"\n" -"Manage OTP tokens.\n" +msgid "delegations" msgstr "" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" +msgid "Delegations" msgstr "" -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" +msgid "Delegation" msgstr "" #, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" +msgid "Added delegation \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted OTP token \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" msgstr "" #, python-format -msgid "Modified OTP token \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "" msgstr[1] "" -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -msgid "command" -msgstr "" - -msgid "commands" -msgstr "" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -msgid "Location name" -msgstr "" - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -msgid "Servers" -msgstr "" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -msgid "IPA Server" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Version" -msgstr "" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -msgid "Method name" -msgstr "" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -msgid "CLI name" -msgstr "" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "IPA role name" -msgstr "" - msgid "HBAC rule and local members cannot both be set" msgstr "" @@ -16622,970 +18576,188 @@ msgstr "" msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "" -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "pyhbac is not installed." +msgid "" +"\n" +"IPA servers\n" msgstr "" msgid "" "\n" -"IPA certificate operations\n" +"Get information about installed IPA servers.\n" msgstr "" msgid "" "\n" -"Implements a set of commands for managing server SSL certificates.\n" +" Find all servers:\n" +" ipa server-find\n" msgstr "" msgid "" "\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" msgstr "" -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" +msgid "server" msgstr "" -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" +msgid "servers" msgstr "" -msgid "" -"\n" -"In order to request a certificate:\n" +msgid "IPA Servers" msgstr "" -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" +msgid "Server location" msgstr "" -msgid "" -"\n" -"SEARCHING:\n" +msgid "Service weight" msgstr "" -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" +msgid "Weight for server services" msgstr "" -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" +msgid "Service relative weight" msgstr "" -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" +msgid "Relative weight for server services (counts per location)" msgstr "" -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" +msgid "Enabled server roles" msgstr "" -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgid "List of enabled roles" msgstr "" -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" +msgid "Modify information about an IPA server." msgstr "" #, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgid "Modified IPA server \"%(value)s\"" msgstr "" #, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "Subject" -msgstr "" - -msgid "Subject email address" -msgstr "" - -msgid "Subject DNS name" -msgstr "" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -msgid "Subject IP Address" -msgstr "" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -msgid "Issuer" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Serial number (hex)" -msgstr "" - -msgid "Request status" -msgstr "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" msgstr[0] "" msgstr[1] "" #, python-format -msgid "Search for certificates with these owner %s." +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" msgstr "" #, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" #, python-format -msgid "Added ID View \"%(value)s\"" +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" msgstr "" #, python-format -msgid "Deleted ID View \"%(value)s\"" +msgid "Failed to remove server %(master)s from server list: %(err)s" msgstr "" #, python-format -msgid "Modified an ID View \"%(value)s\"" +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" msgstr "" #, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" +msgid "Failed to cleanup server principals/keys: %(err)s" msgstr "" #, python-format -msgid "ID View applied to %i host." +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" msgstr "" #, python-format -msgid "ID View applied to %i hosts." +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +msgid "Server state" msgstr "" #, python-format -msgid "ID View cleared from %i host." +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." msgstr "" #, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Auto Membership Rule.\n" +msgid "Cannot hide last enabled %(name)s server." msgstr "" msgid "" "\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" +"Session Support for IPA\n" msgstr "" msgid "" @@ -17756,6 +18928,850 @@ msgstr "" msgid "Enabled CA \"%(value)s\"" msgstr "" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + msgid "Internationalization messages" msgstr "" @@ -18815,12 +20831,6 @@ msgstr "" msgid "REVOKED" msgstr "" -msgid "Serial Number" -msgstr "" - -msgid "Serial Number (hex)" -msgstr "" - msgid "SHA1 Fingerprint" msgstr "" @@ -18873,9 +20883,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -msgid "Certificate mapping data" -msgstr "" - msgid "Configuration string" msgstr "" @@ -19598,9 +21605,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "" - msgid "Netgroup Settings" msgstr "" @@ -19716,9 +21720,6 @@ msgstr "" msgid "Add password policy" msgstr "" -msgid "Password Policy" -msgstr "" - msgid "Remove password policies" msgstr "" @@ -20170,15 +22171,6 @@ msgstr "" msgid "Remove domains" msgstr "" -msgid "Trust direction" -msgstr "" - -msgid "Trust status" -msgstr "" - -msgid "Trust type" -msgstr "" - msgid "Alternative UPN suffixes" msgstr "" @@ -20711,9 +22703,6 @@ msgstr "" msgid "Topology" msgstr "" -msgid "Trusts" -msgstr "" - msgid "True" msgstr "" @@ -20816,1397 +22805,6 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -msgid "IPA Servers" -msgstr "" - -msgid "Server location" -msgstr "" - -msgid "Service weight" -msgstr "" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -msgid "Server state" -msgstr "" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -msgid "Password Policies" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -22372,630 +22970,36 @@ msgstr "" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "" -msgid "delegation" +msgid "self service permission" msgstr "" -msgid "delegations" +msgid "self service permissions" msgstr "" -msgid "Delegations" +msgid "Self Service Permissions" msgstr "" -msgid "Delegation" +msgid "Self Service Permission" msgstr "" #, python-format -msgid "Added delegation \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted delegation \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "Modified delegation \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" msgstr[0] "" msgstr[1] "" -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -#, fuzzy -#| msgid "must be True or False" -msgid "must be TRUE or FALSE" -msgstr "सही या गलत होना चाहिए" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - #, python-format msgid "all masters must have %(role)s role enabled" msgstr "" @@ -23175,25 +23179,6 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - msgid "Request must be a dict" msgstr "" @@ -23215,6 +23200,25 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #, python-format msgid "must equal %r" msgstr "" diff --git a/po/hu.po b/po/hu.po index 90b8a15f0..cbd963fbe 100644 --- a/po/hu.po +++ b/po/hu.po @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2021-01-04 18:36+0000\n" "Last-Translator: Thomas Dombradi \n" "Language-Team: Hungarian to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "groups" +msgstr "Felhasználói csport" + +#, fuzzy +#| msgid "User group" +msgid "User Group" +msgstr "Felhasználói csport" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "gid cannot be set for external group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy +#| msgid "Target group" +msgid "privileged group" +msgstr "Célcsoport" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "DNS Servers" +msgstr "Szolgáltatások" + +msgid "DNS Server" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "DNS Server name" +msgstr "Szolgáltatás neve" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified DNS server \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Delete a DNS server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "HBAC services" +msgstr "Szolgáltatások" + +#, fuzzy +#| msgid "Services" +msgid "HBAC Services" +msgstr "Szolgáltatások" + +#, fuzzy +#| msgid "Services" +msgid "HBAC Service" +msgstr "Szolgáltatások" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added HBAC service \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified HBAC service \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC service group" +msgstr "HBAC szolgáltatás-csoport leírása" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC service groups" +msgstr "HBAC szolgáltatás-csoport leírása" + +#, fuzzy +#| msgid "Service Groups" +msgid "HBAC Service Groups" +msgstr "Szolgáltatás-csoportok" + +#, fuzzy +#| msgid "Service Groups" +msgid "HBAC Service Group" +msgstr "Szolgáltatás-csoportok" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added HBAC service group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "HBAC service group description" +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "HBAC szolgáltatás-csoport leírása" +msgstr[1] "HBAC szolgáltatás-csoport leírása" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate mapping data" +msgstr "Tanúsítvány" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +msgid "Issuer" +msgstr "Kibocsátó" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject" +msgstr "Tárgy" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added segment \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted segment \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified segment \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +#, fuzzy +#| msgid "LDAP URI" +msgid "Invalid LDAP URI." +msgstr "LDAP URI" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +#, fuzzy +#| msgid "Target group" +msgid "netgroups" +msgstr "Célcsoport" + +#, fuzzy +#| msgid "Target group" +msgid "Netgroups" +msgstr "Célcsoport" + +#, fuzzy +#| msgid "Target group" +msgid "Netgroup" +msgstr "Célcsoport" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added netgroup \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted netgroup \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified netgroup \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "invalid port number" +msgstr "Sorozatszám" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added privilege \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted privilege \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified privilege \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +#, fuzzy +#| msgid "Password history size" +msgid "Password Policies" +msgstr "Megőrzött jelszavak (darab)" + +#, fuzzy +#| msgid "Password history size" +msgid "Password Policy" +msgstr "Megőrzött jelszavak (darab)" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +#, fuzzy +#| msgid "Maximum password lifetime (in days)" +msgid "Maximum password life must be greater than minimum." +msgstr "Jelszó maximális élettartama (nap)" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added service delegation rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +#, fuzzy +#| msgid "Service group name" +msgid "Service delegation target" +msgstr "Szolgáltatás-csoport neve" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added stage user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted stage user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified stage user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Activate a stage user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate chain" +msgstr "Tanúsítvány" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject email address" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject DNS name" +msgstr "Tárgy" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject URI" +msgstr "Tárgy" + +msgid "Subject IP Address" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject OID" +msgstr "Tárgy" + +#, fuzzy +#| msgid "Subject" +msgid "Subject UPN" +msgstr "Tárgy" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +#, fuzzy +#| msgid "Issuer" +msgid "Issuer DN" +msgstr "Kibocsátó" + +msgid "Not Before" +msgstr "Érvényesség kezdete" + +msgid "Not After" +msgstr "Érvényesség vége" + +msgid "Fingerprint (SHA1)" +msgstr "Ujjlenyomat (SHA1)" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "Fingerprint (SHA256)" +msgstr "Ujjlenyomat (SHA1)" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial number (hex)" +msgstr "Sorozatszám" + +msgid "Request status" +msgstr "Igénylés állapota" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "Visszavont" + +msgid "Revocation reason" +msgstr "Visszavonás oka" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +#, fuzzy +#| msgid "Revocation reason" +msgid "7 is not a valid revocation reason" +msgstr "Visszavonás oka" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added Sudo Command \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "" + +msgid "command" +msgstr "" + +msgid "commands" +msgstr "" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "runAs groups" +msgstr "Felhasználói csport" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust type" +msgstr "" + +#, fuzzy +#| msgid "Request status" +msgid "Trust status" +msgstr "Igénylés állapota" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " msgstr "" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." msgstr "" +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted trust \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "Name" +msgstr "" + +#, fuzzy +#| msgid "GID" +msgid "SID" +msgstr "GID" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Enabled trust domain \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Disabled trust domain \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +#, fuzzy +#| msgid "Service group name" +msgid "IPA server role name" +msgstr "Szolgáltatás-csoport neve" + +#, fuzzy +#| msgid "Request status" +msgid "Role status" +msgstr "Igénylés állapota" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "IPA role name" +msgstr "Szabály neve" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Vault configuration" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Profile" +msgstr "Tanúsítvány" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Profiles" +msgstr "Tanúsítvány" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Imported profile \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted profile \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy +#| msgid "The default users group cannot be removed" +msgid "Certificate profiles cannot be renamed" +msgstr "Az alapértelmezett csoport nem távolítható el" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "host groups" +msgstr "Felhasználói csport" + +#, fuzzy +#| msgid "User group" +msgid "Host Group" +msgstr "Felhasználói csport" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added hostgroup \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy +#| msgid "User group" +msgid "hostgroup" +msgstr "Felhasználói csport" + +msgid "privileged hostgroup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified hostgroup \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +#, fuzzy +#| msgid "Revocation reason" +msgid "locations" +msgstr "Visszavonás oka" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +#, fuzzy +#| msgid "Revocation reason" +msgid "Location name" +msgstr "Visszavonás oka" + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Servers" +msgstr "Szolgáltatások" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added IPA location \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Delete an IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted IPA location \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "IPA Server" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "Role" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added role \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted role \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified role \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Undeleted user account \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Staged user account \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Disabled user account \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Enabled user account \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Unlocked account \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificates to user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Removed certificates from user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added OTP token \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "cannot be empty" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted OTP token \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified OTP token \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "A list of LDAP entries" +msgid "A list of ACI values" +msgstr "LDAP-bejegyzések listája" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "A '%s' csoport nem létezik" + +msgid "empty filter" +msgstr "" + +#, fuzzy, python-format +#| msgid "Certificate format error: %(error)s" +msgid "Syntax Error: %(error)s" +msgstr "Tanúsítványhiba: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Created ACI \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted ACI \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified ACI \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Renamed ACI to \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + msgid "" "\n" "Domain Name System (DNS)\n" @@ -13604,9 +17779,6 @@ msgstr "" msgid "Managedby permission" msgstr "" -msgid "DNS is not configured" -msgstr "" - msgid "cannot be used when a zone is specified" msgstr "" @@ -13834,1413 +18006,548 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, python-brace-format msgid "" -"\n" -"DNS server configuration\n" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." msgstr "" msgid "" "\n" -"Manipulate DNS server configuration\n" +"API Schema\n" msgstr "" msgid "" "\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" +"Provides API introspection capabilities.\n" msgstr "" msgid "" "\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -#, fuzzy -#| msgid "Services" -msgid "DNS Servers" -msgstr "Szolgáltatások" - -msgid "DNS Server" -msgstr "" - -#, fuzzy -#| msgid "Service name" -msgid "DNS Server name" -msgstr "Szolgáltatás neve" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" +" Show user-find details:\n" +" ipa command-show user-find\n" msgstr "" msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" msgstr "" -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." +msgid "Documentation" msgstr "" -msgid "Modify DNS server configuration" +msgid "Exclude from" msgstr "" -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified DNS server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Search for DNS servers." +msgid "Include in" msgstr "" #, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" +msgid "Results should contain primary key attribute only (\"%s\")" msgstr "" -msgid "Display configuration of a DNS server." +msgid "Help topic" msgstr "" -msgid "Add a new DNS server." +#, fuzzy +#| msgid "Permissions" +msgid "Version" +msgstr "Jogosultságok" + +msgid "Parameters" msgstr "" -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added new DNS server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Delete a DNS server" +msgid "Method of" msgstr "" -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted DNS server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" +#, fuzzy +#| msgid "Rule name" +msgid "Method name" +msgstr "Szabály neve" -msgid "REST API is not logged in." +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +#, fuzzy +#| msgid "Character classes" +msgid "Search for classes." +msgstr "Karakterosztályok" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +#, fuzzy +#| msgid "Request id" +msgid "Required" +msgstr "Igénylés azonosítója" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +msgid "CLI name" +msgstr "" + +msgid "Confirm (password)" +msgstr "" + +#, fuzzy +#| msgid "Default shell" +msgid "Default" +msgstr "Alapértelmezett shell" + +#, fuzzy +#| msgid "Default users group" +msgid "Default from" +msgstr "Alapértelmezett csoport" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" msgstr "" #, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgid "%(metaobject)s: %(oname)s not found" msgstr "" -msgid "Unable to communicate with CMS" +msgid "Display information about a command parameter." msgstr "" -msgid "Response from CA was not valid JSON" +msgid "Search command parameters." msgstr "" -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#, fuzzy -#| msgid "Services" -msgid "HBAC services" -msgstr "Szolgáltatások" - -#, fuzzy -#| msgid "Services" -msgid "HBAC Services" -msgstr "Szolgáltatások" - -#, fuzzy -#| msgid "Services" -msgid "HBAC Service" -msgstr "Szolgáltatások" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added HBAC service \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified HBAC service \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - #, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" +msgid "%(command_name)s: %(oname)s not found" +msgstr "" -#, fuzzy -#| msgid "HBAC service group description" -msgid "HBAC service group" -msgstr "HBAC szolgáltatás-csoport leírása" +msgid "Display information about a command output." +msgstr "" -#, fuzzy -#| msgid "HBAC service group description" -msgid "HBAC service groups" -msgstr "HBAC szolgáltatás-csoport leírása" +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" #, fuzzy #| msgid "Service Groups" -msgid "HBAC Service Groups" +msgid "Member service groups" msgstr "Szolgáltatás-csoportok" #, fuzzy -#| msgid "Service Groups" -msgid "HBAC Service Group" -msgstr "Szolgáltatás-csoportok" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added HBAC service group \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format #| msgid "HBAC service group description" -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "HBAC szolgáltatás-csoport leírása" -msgstr[1] "HBAC szolgáltatás-csoport leírása" +msgid "Member HBAC service groups" +msgstr "HBAC szolgáltatás-csoport leírása" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added HBAC rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" msgid "" "\n" -"Stageusers\n" +"Simulate use of Host-based access controls\n" "\n" -"Manage stage user entries.\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" "\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" "\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" +" --user, --host, and --service are mandatory, others are optional.\n" "\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" "\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" "\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added stage user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted stage user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified stage user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Activate a stage user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" -"Topology\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" "\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" "\n" "\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" +"HBACTEST AND TRUSTED DOMAINS\n" "\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" "\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" "\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added segment \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted segment \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified segment \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added topology suffix \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" "\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" "\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" "\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" "\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" "\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -#| msgid "User group" -msgid "host groups" -msgstr "Felhasználói csport" - -#, fuzzy -#| msgid "User group" -msgid "Host Group" -msgstr "Felhasználói csport" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added hostgroup \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy -#| msgid "User group" -msgid "hostgroup" -msgstr "Felhasználói csport" - -msgid "privileged hostgroup" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified hostgroup \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" "\n" -"Vaults\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" +msgid "Unresolved rules in --rules" msgstr "" #, python-format -msgid "owner %s" +msgid "Access granted: %s" msgstr "" -msgid "" -"\n" -" Vault object.\n" -" " +msgid "ID View" msgstr "" -msgid "vault" +msgid "system ID View" msgstr "" -msgid "vaults" +msgid "ID Views" msgstr "" -msgid "Vaults" +msgid "User object overrides" msgstr "" -msgid "Vault" +msgid "Group object overrides" msgstr "" -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added vault \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted vault \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified vault \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Vault configuration" -msgstr "" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -#, fuzzy -#| msgid "Target group" -msgid "netgroups" -msgstr "Célcsoport" - -#, fuzzy -#| msgid "Target group" -msgid "Netgroups" -msgstr "Célcsoport" - -#, fuzzy -#| msgid "Target group" -msgid "Netgroup" -msgstr "Célcsoport" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added netgroup \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted netgroup \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified netgroup \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -#, fuzzy -#| msgid "Serial number" -msgid "invalid port number" -msgstr "Sorozatszám" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -#| msgid "A list of LDAP entries" -msgid "A list of ACI values" -msgstr "LDAP-bejegyzések listája" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "A '%s' csoport nem létezik" - -msgid "empty filter" -msgstr "" - -#, fuzzy, python-format -#| msgid "Certificate format error: %(error)s" -msgid "Syntax Error: %(error)s" -msgstr "Tanúsítványhiba: %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -msgid "ACI" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Created ACI \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted ACI \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified ACI \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Renamed ACI to \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "must be at least 10" -msgstr "" - -msgid "configuration options" -msgstr "" - -msgid "Configuration" -msgstr "" - -msgid "Maximum hostname length" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" +msgid "Hosts the view applies to" msgstr "" msgid "Domain resolution order" @@ -15249,238 +18556,189 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -msgid "IPA servers configured as domain name server" -msgstr "" +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added ID View \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -#, fuzzy -#| msgid "Group '%s' does not exist" -msgid "The group doesn't exist" -msgstr "A '%s' csoport nem létezik" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -#| msgid "User group" -msgid "groups" -msgstr "Felhasználói csport" - -#, fuzzy -#| msgid "User group" -msgid "User Group" -msgstr "Felhasználói csport" +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted ID View \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" #, fuzzy, python-format #| msgid "Added service \"%(value)s\"" -msgid "Added group \"%(value)s\"" +msgid "Modified an ID View \"%(value)s\"" msgstr "A %(value)s szolgáltatás hozzáadva" -msgid "gid cannot be set for external group" +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Delete an ID override." msgstr "" #, fuzzy, python-format #| msgid "Deleted service \"%(value)s\"" -msgid "Deleted group \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" msgstr "A %(value)s szolgáltatás eltávolítva" -#, fuzzy -#| msgid "Target group" -msgid "privileged group" -msgstr "Célcsoport" +msgid "Modify an ID override." +msgstr "" #, fuzzy, python-format #| msgid "Added service \"%(value)s\"" -msgid "Modified group \"%(value)s\"" +msgid "Modified an ID override \"%(value)s\"" msgstr "A %(value)s szolgáltatás hozzáadva" +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + #, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" msgstr[0] "" msgstr[1] "" -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgid "Display information about an ID override." msgstr "" -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Remove one or more certificates to the idoverrideuser entry" msgstr "" #, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "Removed certificates from idoverrideuser \"%(value)s\"" msgstr "" -msgid "not allowed to modify user entries" -msgstr "" +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" -msgid "not allowed to modify group entries" -msgstr "" +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" -msgid "Not a managed group" -msgstr "" +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified an User ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" -msgid "Add users that can manage members of this group." -msgstr "" +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" -msgid "Remove users that can manage members of this group." -msgstr "" +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" #, fuzzy #| msgid "Permissions" @@ -15709,1268 +18967,39 @@ msgid_plural "%(count)d permissions matched" msgstr[0] "" msgstr[1] "" -msgid "" -"\n" -"OTP Tokens\n" +msgid "delegation" msgstr "" -msgid "" -"\n" -"Manage OTP tokens.\n" +msgid "delegations" msgstr "" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" +msgid "Delegations" msgstr "" -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" +msgid "Delegation" msgstr "" #, fuzzy, python-format #| msgid "Added service \"%(value)s\"" -msgid "Added OTP token \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "cannot be empty" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted OTP token \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified OTP token \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added Sudo Rule \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" msgstr "A %(value)s szolgáltatás hozzáadva" #, fuzzy, python-format #| msgid "Deleted service \"%(value)s\"" -msgid "Deleted Sudo Rule \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" msgstr "A %(value)s szolgáltatás eltávolítva" #, fuzzy, python-format #| msgid "Added service \"%(value)s\"" -msgid "Modified Sudo Rule \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" msgstr "A %(value)s szolgáltatás hozzáadva" #, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -msgid "command" -msgstr "" - -msgid "commands" -msgstr "" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -#, fuzzy -#| msgid "User group" -msgid "runAs groups" -msgstr "Felhasználói csport" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "" msgstr[1] "" -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added Sudo Command \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -#, fuzzy -#| msgid "Revocation reason" -msgid "locations" -msgstr "Visszavonás oka" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -#, fuzzy -#| msgid "Revocation reason" -msgid "Location name" -msgstr "Visszavonás oka" - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -#, fuzzy -#| msgid "Services" -msgid "Servers" -msgstr "Szolgáltatások" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added IPA location \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Delete an IPA location." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted IPA location \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "IPA Server" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -#| msgid "Permissions" -msgid "Version" -msgstr "Jogosultságok" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -#| msgid "Rule name" -msgid "Method name" -msgstr "Szabály neve" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -#, fuzzy -#| msgid "Character classes" -msgid "Search for classes." -msgstr "Karakterosztályok" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -#, fuzzy -#| msgid "Request id" -msgid "Required" -msgstr "Igénylés azonosítója" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -msgid "CLI name" -msgstr "" - -msgid "Confirm (password)" -msgstr "" - -#, fuzzy -#| msgid "Default shell" -msgid "Default" -msgstr "Alapértelmezett shell" - -#, fuzzy -#| msgid "Default users group" -msgid "Default from" -msgstr "Alapértelmezett csoport" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added ID range \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted ID range \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified ID range \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, fuzzy -#| msgid "HBAC service group description" -msgid "self service permission" -msgstr "HBAC szolgáltatás-csoport leírása" - -msgid "self service permissions" -msgstr "" - -#, fuzzy -#| msgid "Permissions" -msgid "Self Service Permissions" -msgstr "Jogosultságok" - -msgid "Self Service Permission" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added selfservice \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted selfservice \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified selfservice \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -#, fuzzy -#| msgid "Service group name" -msgid "IPA server role name" -msgstr "Szolgáltatás-csoport neve" - -#, fuzzy -#| msgid "Request status" -msgid "Role status" -msgstr "Igénylés állapota" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -#, fuzzy -#| msgid "Rule name" -msgid "IPA role name" -msgstr "Szabály neve" - msgid "HBAC rule and local members cannot both be set" msgstr "" @@ -17039,1005 +19068,197 @@ msgstr "A %(value)s szolgáltatás eltávolítva" msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "A %(value)s szolgáltatás eltávolítva" -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "pyhbac is not installed." +msgid "" +"\n" +"IPA servers\n" msgstr "" msgid "" "\n" -"IPA certificate operations\n" +"Get information about installed IPA servers.\n" msgstr "" msgid "" "\n" -"Implements a set of commands for managing server SSL certificates.\n" +" Find all servers:\n" +" ipa server-find\n" msgstr "" msgid "" "\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" msgstr "" -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" +msgid "server" msgstr "" -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Base-64 encoded certificate." +msgid "servers" msgstr "" #, fuzzy -#| msgid "Certificate" -msgid "Certificate chain" -msgstr "Tanúsítvány" +#| msgid "Services" +msgid "IPA Servers" +msgstr "Szolgáltatások" -msgid "X.509 certificate chain" -msgstr "" - -msgid "Subject" -msgstr "Tárgy" - -msgid "Subject email address" +msgid "Server location" msgstr "" #, fuzzy -#| msgid "Subject" -msgid "Subject DNS name" -msgstr "Tárgy" +#| msgid "Service name" +msgid "Service weight" +msgstr "Szolgáltatás neve" -msgid "Subject X.400 address" +msgid "Weight for server services" msgstr "" -msgid "Subject directory name" +msgid "Service relative weight" msgstr "" -msgid "Subject EDI Party name" +msgid "Relative weight for server services (counts per location)" msgstr "" -#, fuzzy -#| msgid "Subject" -msgid "Subject URI" -msgstr "Tárgy" - -msgid "Subject IP Address" +msgid "Enabled server roles" msgstr "" -#, fuzzy -#| msgid "Subject" -msgid "Subject OID" -msgstr "Tárgy" - -#, fuzzy -#| msgid "Subject" -msgid "Subject UPN" -msgstr "Tárgy" - -msgid "Subject Kerberos principal name" +msgid "List of enabled roles" msgstr "" -msgid "Subject Other Name" -msgstr "" - -msgid "Issuer" -msgstr "Kibocsátó" - -#, fuzzy -#| msgid "Issuer" -msgid "Issuer DN" -msgstr "Kibocsátó" - -msgid "Not Before" -msgstr "Érvényesség kezdete" - -msgid "Not After" -msgstr "Érvényesség vége" - -msgid "Fingerprint (SHA1)" -msgstr "Ujjlenyomat (SHA1)" - -#, fuzzy -#| msgid "Fingerprint (SHA1)" -msgid "Fingerprint (SHA256)" -msgstr "Ujjlenyomat (SHA1)" - -#, fuzzy -#| msgid "Serial number" -msgid "Serial number (hex)" -msgstr "Sorozatszám" - -msgid "Request status" -msgstr "Igénylés állapota" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Revoked" -msgstr "Visszavont" - -msgid "Revocation reason" -msgstr "Visszavonás oka" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -#, fuzzy -#| msgid "Revocation reason" -msgid "7 is not a valid revocation reason" -msgstr "Visszavonás oka" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" +msgid "Modify information about an IPA server." msgstr "" #, fuzzy, python-format #| msgid "Added service \"%(value)s\"" -msgid "Added ID View \"%(value)s\"" +msgid "Modified IPA server \"%(value)s\"" msgstr "A %(value)s szolgáltatás hozzáadva" +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" + #, fuzzy, python-format #| msgid "Deleted service \"%(value)s\"" -msgid "Deleted ID View \"%(value)s\"" +msgid "Deleted IPA server \"%(value)s\"" msgstr "A %(value)s szolgáltatás eltávolítva" -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified an ID View \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" +msgid "Ignore topology errors" msgstr "" -msgid "not found" +msgid "Ignore topology connectivity problems after removal" msgstr "" -msgid "ID View cannot be applied to IPA master" +msgid "Ignore check for last remaining CA or DNS server" msgstr "" -msgid "ID View already applied" +msgid "Skip a check whether the last CA master or DNS server is removed" msgstr "" -msgid "value" +msgid "Force server removal" msgstr "" -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." +msgid "Force server removal even if it does not exist" msgstr "" msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." msgstr "" -msgid "IPA object" +msgid "Deleting this server will leave your installation without a DNS." msgstr "" msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" msgstr "" #, python-format -msgid "Anchor '%(anchor)s' could not be resolved." +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" -msgid "Default Trust View cannot contain IPA users" +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" msgstr "" -msgid "Add a new ID override." +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" msgstr "" +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Server state" +msgstr "Szolgáltatás neve" + #, fuzzy, python-format #| msgid "Added service \"%(value)s\"" -msgid "Added ID override \"%(value)s\"" +msgid "Changed server state of \"%(value)s\"." msgstr "A %(value)s szolgáltatás hozzáadva" -msgid "Delete an ID override." +msgid "Cannot hide CA renewal master." msgstr "" -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Modify an ID override." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified an ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." +msgid "Cannot hide DNSSec key master." msgstr "" #, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added User ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted User ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified an User ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added Group ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Auto Membership Rule.\n" +msgid "Cannot hide last enabled %(name)s server." msgstr "" msgid "" "\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added automember rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added condition(s) to \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified automember rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted automember rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" +"Session Support for IPA\n" msgstr "" msgid "" @@ -18219,6 +19440,868 @@ msgstr "" msgid "Enabled CA \"%(value)s\"" msgstr "A %(value)s szolgáltatás eltávolítva" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +#, fuzzy +#| msgid "Group '%s' does not exist" +msgid "The group doesn't exist" +msgstr "A '%s' csoport nem létezik" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial Number" +msgstr "Sorozatszám" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial Number (hex)" +msgstr "Sorozatszám" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added host \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted host \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified host \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Disabled host \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificates to host \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Removed certificates from host \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified ID range \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + msgid "Internationalization messages" msgstr "" @@ -19341,16 +21424,6 @@ msgstr "Tanúsítvány" msgid "REVOKED" msgstr "" -#, fuzzy -#| msgid "Serial number" -msgid "Serial Number" -msgstr "Sorozatszám" - -#, fuzzy -#| msgid "Serial number" -msgid "Serial Number (hex)" -msgstr "Sorozatszám" - #, fuzzy #| msgid "Fingerprint (SHA1)" msgid "SHA1 Fingerprint" @@ -19419,11 +21492,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -#, fuzzy -#| msgid "Certificate" -msgid "Certificate mapping data" -msgstr "Tanúsítvány" - msgid "Configuration string" msgstr "" @@ -20172,9 +22240,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "" - msgid "Netgroup Settings" msgstr "" @@ -20294,11 +22359,6 @@ msgstr "" msgid "Add password policy" msgstr "" -#, fuzzy -#| msgid "Password history size" -msgid "Password Policy" -msgstr "Megőrzött jelszavak (darab)" - msgid "Remove password policies" msgstr "" @@ -20770,17 +22830,6 @@ msgstr "" msgid "Remove domains" msgstr "" -msgid "Trust direction" -msgstr "" - -#, fuzzy -#| msgid "Request status" -msgid "Trust status" -msgstr "Igénylés állapota" - -msgid "Trust type" -msgstr "" - msgid "Alternative UPN suffixes" msgstr "" @@ -21320,9 +23369,6 @@ msgstr "" msgid "Topology" msgstr "" -msgid "Trusts" -msgstr "" - msgid "True" msgstr "" @@ -21427,1438 +23473,6 @@ msgstr "Igénylés azonosítója" msgid "Unsupported value" msgstr "" -msgid "Role" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added role \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted role \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified role \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -#, fuzzy -#| msgid "Services" -msgid "IPA Servers" -msgstr "Szolgáltatások" - -msgid "Server location" -msgstr "" - -#, fuzzy -#| msgid "Service name" -msgid "Service weight" -msgstr "Szolgáltatás neve" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified IPA server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted IPA server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -#, fuzzy -#| msgid "Service name" -msgid "Server state" -msgstr "Szolgáltatás neve" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Changed server state of \"%(value)s\"." -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added service delegation rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted service delegation \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -#, fuzzy -#| msgid "Service group name" -msgid "Service delegation target" -msgstr "Szolgáltatás-csoport neve" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added service delegation target \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -#, fuzzy -#| msgid "LDAP URI" -msgid "Invalid LDAP URI." -msgstr "LDAP URI" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added host \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted host \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified host \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Disabled host \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added certificates to host \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Removed certificates from host \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added new aliases to host \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -#, fuzzy -#| msgid "Password history size" -msgid "Password Policies" -msgstr "Megőrzött jelszavak (darab)" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -#, fuzzy -#| msgid "Maximum password lifetime (in days)" -msgid "Maximum password life must be greater than minimum." -msgstr "Jelszó maximális élettartama (nap)" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted trust \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -#, fuzzy -#| msgid "GID" -msgid "SID" -msgstr "GID" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Enabled trust domain \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Disabled trust domain \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added privilege \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted privilege \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified privilege \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -23035,652 +23649,42 @@ msgstr "" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "A %(value)s szolgáltatás eltávolítva" -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added delegation \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted delegation \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified delegation \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added HBAC rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -#, fuzzy -#| msgid "Service Groups" -msgid "Member service groups" -msgstr "Szolgáltatás-csoportok" - #, fuzzy #| msgid "HBAC service group description" -msgid "Member HBAC service groups" +msgid "self service permission" msgstr "HBAC szolgáltatás-csoport leírása" -msgid "Member ID user overrides" +msgid "self service permissions" msgstr "" -msgid "Indirect Member ID user overrides" -msgstr "" +#, fuzzy +#| msgid "Permissions" +msgid "Self Service Permissions" +msgstr "Jogosultságok" -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." +msgid "Self Service Permission" msgstr "" #, fuzzy, python-format #| msgid "Added service \"%(value)s\"" -msgid "Added certificate mappings to user \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" msgstr "A %(value)s szolgáltatás hozzáadva" -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" #, fuzzy, python-format #| msgid "Added service \"%(value)s\"" -msgid "Added user \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" msgstr "A %(value)s szolgáltatás hozzáadva" -msgid "Default group for new users is not POSIX" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - #, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Modified user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Undeleted user account \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Staged user account \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Disabled user account \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Enabled user account \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Unlocked account \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added certificates to user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Removed certificates from user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added new aliases to user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Removed aliases from user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" #, python-format msgid "all masters must have %(role)s role enabled" @@ -23861,25 +23865,6 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - #, fuzzy #| msgid "Request status" msgid "Request must be a dict" @@ -23903,6 +23888,25 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #, python-format msgid "must equal %r" msgstr "" diff --git a/po/id.po b/po/id.po index 5a0a611cf..446bca0e4 100644 --- a/po/id.po +++ b/po/id.po @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2020-10-26 03:15+0000\n" "Last-Translator: Andika Triwidada \n" "Language-Team: Indonesian to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "" + +msgid "User Group" +msgstr "" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +#, fuzzy +#| msgid "Password cannot be set on enrolled host." +msgid "gid cannot be set for external group" +msgstr "Kata sandi tidak dapat ditata pada host yang didaftarkan." + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, fuzzy +#| msgid "Delete group." +msgid "privileged group" +msgstr "Menghapus grup." + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Grup \"%(value)s\" dimodifikasi" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d grup cocok" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +#, fuzzy +#| msgid "DNS Server name" +msgid "DNS server" +msgstr "Nama Server DNS" + +#, fuzzy +#| msgid "DNS Server name" +msgid "DNS servers" +msgstr "Nama Server DNS" + +#, fuzzy +#| msgid "DNS Server name" +msgid "DNS Servers" +msgstr "Nama Server DNS" + +#, fuzzy +#| msgid "DNS Server name" +msgid "DNS Server" +msgstr "Nama Server DNS" + +msgid "DNS Server name" +msgstr "Nama Server DNS" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "Forwarder" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified DNS server \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +msgid "Search for DNS servers." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "%(count)s server cocok" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA DNS Server is not installed" +msgstr "Server IPA yang akan digunakan" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Delete a DNS server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added HBAC service \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified HBAC service \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "%(count)s server cocok" + +msgid "HBAC service group" +msgstr "" + +#, fuzzy +#| msgid "Failed service/service groups" +msgid "HBAC service groups" +msgstr "Grup layanan/layanan gagal" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "HBAC Service Groups" +msgstr "Server IPA yang akan digunakan" + +msgid "HBAC Service Group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "Grup \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "%(count)d grup cocok" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "harus TRUE atau FALSE" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "User password expiration" +msgstr "" + +#, fuzzy +#| msgid "SSH public key:" +msgid "SSH public key fingerprint" +msgstr "Kunci publik SSH:" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Base-64 encoded user certificate" +msgstr "harus merupakan sebuah sertifikat" + +msgid "Certificate mapping data" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Entry %s not found" +msgid "manager %(manager)s not found" +msgstr "Entri %s tidak ditemukan" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "boleh maksimum %(len)d karakter" + +msgid "Issuer" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Issuer of the certificate" +msgstr "harus merupakan sebuah sertifikat" + +msgid "Subject" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Subject of the certificate" +msgstr "harus merupakan sebuah sertifikat" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "realm not found\n" +msgid "{role}: role not found" +msgstr "realm tidak ditemukan\n" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "{attr}: tidak ada atribut seperti itu" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "segmen" + +#, fuzzy +#| msgid "segment" +msgid "segments" +msgstr "segmen" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "%(count)d host sesuai" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "Segmen \"%(value)s\" ditambahkan" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dihapus" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "must be '%(value)s'" +msgid "%(value)s" +msgstr "harus '%(value)s'" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "%(count)d host sesuai" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Host \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "Host \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Host \"%(value)s\" dimodifikasi" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +#, fuzzy +#| msgid "LDAP URI" +msgid "Invalid LDAP URI." +msgstr "URI LDAP" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "netgroups" +msgstr "Menghapus grup." + +#, fuzzy +#| msgid "Delete group." +msgid "Netgroups" +msgstr "Menghapus grup." + +#, fuzzy +#| msgid "Delete group." +msgid "Netgroup" +msgstr "Menghapus grup." + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added netgroup \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified netgroup \"%(value)s\"" +msgstr "Grup \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "%(count)d grup cocok" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "Changed server state of \"%(value)s\"." +msgid "Changed password for \"%(value)s\"" +msgstr "Mengubah keadaan server \"%(value)s\"." + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "pkinit" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)s server cocok" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +#, fuzzy +#| msgid "Minimum serial number" +msgid "invalid port number" +msgstr "Nomor seri minimum" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +#, fuzzy +#| msgid "DNS Server name" +msgid "RADIUS Servers" +msgstr "Nama Server DNS" + +#, fuzzy +#| msgid "DNS Server name" +msgid "RADIUS Server" +msgstr "Nama Server DNS" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "%(count)s server cocok" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added segment \"%(value)s\"" +msgid "Added privilege \"%(value)s\"" +msgstr "Segmen \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted segment \"%(value)s\"" +msgid "Deleted privilege \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified segment \"%(value)s\"" +msgid "Modified privilege \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)s server cocok" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "password policy" +msgstr "kata sandi" + +#, fuzzy +#| msgid "password" +msgid "password policies" +msgstr "kata sandi" + +msgid "Password Policies" +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "Password Policy" +msgstr "kata sandi" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +#, fuzzy +#| msgid "priority cannot be set on global policy" +msgid "cannot delete global password policy" +msgstr "prioritas tidak dapat ditetapkan pada kebijakan global" + +msgid "priority cannot be set on global policy" +msgstr "prioritas tidak dapat ditetapkan pada kebijakan global" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +#, fuzzy +#| msgid "Realm name" +msgid "Realm domains" +msgstr "Nama realm" + +#, fuzzy +#| msgid "Domain" +msgid "Realm Domains" +msgstr "Domain" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +#| msgid "Removing principal %s\n" +msgid "Member principals" +msgstr "Menghapus prinsipal %s\n" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +#, fuzzy +#| msgid "Service Options" +msgid "service delegation rules" +msgstr "Opsi Layanan" + +#, fuzzy +#| msgid "Service Options" +msgid "Service delegation rules" +msgstr "Opsi Layanan" + +#, fuzzy +#| msgid "Service Options" +msgid "Service delegation rule" +msgstr "Opsi Layanan" + +#, fuzzy, python-format +#| msgid "Added segment \"%(value)s\"" +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Segmen \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +msgid "privileged service delegation rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)s server role matched" +#| msgid_plural "%(count)s server roles matched" +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "%(count)s peran server cocok" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +#, fuzzy +#| msgid "Service Options" +msgid "Service delegation targets" +msgstr "Opsi Layanan" + +#, fuzzy +#| msgid "Service Options" +msgid "Service delegation target" +msgstr "Opsi Layanan" + +#, fuzzy, python-format +#| msgid "Added segment \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "Segmen \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted segment \"%(value)s\"" +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dihapus" + +msgid "privileged service delegation target" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)s server role matched" +#| msgid_plural "%(count)s server roles matched" +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "%(count)s peran server cocok" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +#, fuzzy +#| msgid "users" +msgid "stage users" +msgstr "pengguna" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added stage user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted stage user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified stage user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d pengguna cocok" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Activate a stage user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy +#| msgid "Entry %s not found" +msgid "Entry RDN is not 'uid'" +msgstr "Entri %s tidak ditemukan" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "key named %(key)s already exists" +msgid "active user with name \"%(user)s\" already exists" +msgstr "kunci bernama %(key)s sudah ada" + +#, fuzzy, python-format +#| msgid "${count} user(s) activated" +msgid "Stage user %s activated" +msgstr "${count} pengguna diaktifkan" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid " * 6 - certificateHold\n" +msgid " * 0 - unspecified\n" +msgstr " * 6 - certificateHold\n" + +msgid " * 1 - keyCompromise\n" +msgstr " * 1 - keyCompromise\n" + +msgid " * 2 - cACompromise\n" +msgstr " * 2 - cACompromise\n" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +#, fuzzy +#| msgid " * 2 - cACompromise\n" +msgid " * 4 - superseded\n" +msgstr " * 2 - cACompromise\n" + +#, fuzzy +#| msgid " * 6 - certificateHold\n" +msgid " * 5 - cessationOfOperation\n" +msgstr " * 6 - certificateHold\n" + +msgid " * 6 - certificateHold\n" +msgstr " * 6 - certificateHold\n" + +#, fuzzy +#| msgid " * 1 - keyCompromise\n" +msgid " * 8 - removeFromCRL\n" +msgstr " * 1 - keyCompromise\n" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr " * 9 - privilegeWithdrawn\n" + +msgid " * 10 - aACompromise\n" +msgstr " * 10 - aACompromise\n" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" + +msgid "CA is not configured" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Base-64 encoded certificate." +msgstr "harus merupakan sebuah sertifikat" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject email address" +msgstr "" + +#, fuzzy +#| msgid "must be DNS name" +msgid "Subject DNS name" +msgstr "harus berupa nama DNS" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +msgid "Subject IP Address" +msgstr "" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +#, fuzzy +#| msgid "Kerberos Service Principal Name" +msgid "Subject Kerberos principal name" +msgstr "Nama Prisipal Layanan Kerberos" + +#, fuzzy +#| msgid "Subject Distinguished Name" +msgid "Subject Other Name" +msgstr "Distinguished Name Subjek" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +#, fuzzy +#| msgid "Maximum serial number" +msgid "Serial number (hex)" +msgstr "Nomor seri maksimum" + +msgid "Request status" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate signing request" +msgid "Include certificate chain in output" +msgstr "harus berupa sebuah permintaan penandatanganan sertifikat" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "%(count)d pengguna cocok" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added OTP token \"%(value)s\"" +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Menambah token OTP \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted CA \"%(value)s\"" +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "CA \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified CA \"%(value)s\"" +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "CA \"%(value)s\" diubah" + +#, fuzzy, python-format +#| msgid "%(count)d CA matched" +#| msgid_plural "%(count)d CAs matched" +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "%(count)d CA cocok" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +#, fuzzy +#| msgid "Sudo" +msgid "Sudo Rule" +msgstr "Sudo" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "pengguna" + +#, fuzzy +#| msgid "Command name" +msgid "command" +msgstr "Nama perintah" + +#, fuzzy +#| msgid "Command name" +msgid "commands" +msgstr "Nama perintah" + +msgid "runAs user" +msgstr "" + +#, fuzzy +#| msgid "users" +msgid "runAs users" +msgstr "pengguna" + +msgid "group runAs" +msgstr "" + +#, fuzzy +#| msgid "Add host group" +msgid "runAs groups" +msgstr "Tambah grup host" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "%(count)d pengguna cocok" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +#, fuzzy +#| msgid "Operation failed: %s\n" +msgid "operation not defined" +msgstr "Operasi gagal: %s\n" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Grup \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "%(count)d grup cocok" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +#, fuzzy +#| msgid "must be dictionary" +msgid "Trust direction" +msgstr "harus berupa kamus" + +msgid "Trust type" +msgstr "" + +msgid "Trust status" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Active Directory domain range" +msgstr "Domain Active Directory" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted OTP token \"%(value)s\"" +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Menghapus token OTP \"%(value)s\"" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +#, fuzzy +#| msgid "Domain" +msgid "domain" +msgstr "Domain" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +#, fuzzy +#| msgid "Bind rule type" +msgid "id range type" +msgstr "Tipe aturan bind" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " msgstr "" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." msgstr "" +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted trust \"%(value)s\"" +msgstr "Host \"%(value)s\" dihapus" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d host sesuai" + +#, fuzzy +#| msgid "cannot stat() configuration file %s\n" +msgid "trust configuration" +msgstr "tidak dapat melakukan stat() berkas konfigurasi %s\n" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified CA \"%(value)s\"" +msgid "Modified \"%(value)s\" trust configuration" +msgstr "CA \"%(value)s\" diubah" + +msgid "Name" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "sidgen_was_run" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +#, fuzzy +#| msgid "Domain" +msgid "Domain enabled" +msgstr "Domain" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, fuzzy, python-format +#| msgid "must be '%(value)s'" +msgid "must be \"%s\"" +msgstr "harus '%(value)s'" + +#, fuzzy +#| msgid "Unable to remove entry\n" +msgid "not allowed to remotely add agent" +msgstr "Tak bisa menghapus entri\n" + +#, fuzzy, python-format +#| msgid "Enabled CA \"%(value)s\"" +msgid "Enabled trust domain \"%(value)s\"" +msgstr "CA \"%(value)s\" difungsikan" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +#| msgid "Disabled CA \"%(value)s\"" +msgid "Disabled trust domain \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "" +"\n" +"IPA server roles\n" +msgstr "Server IPA yang akan digunakan" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "server role" +msgstr "Nama Peladen" + +#, fuzzy +#| msgid "Server Name" +msgid "server roles" +msgstr "Nama Peladen" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA Server Roles" +msgstr "Server IPA yang akan digunakan" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA Server Role" +msgstr "Server IPA yang akan digunakan" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA server role name" +msgstr "Server IPA yang akan digunakan" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "%(count)s peran server cocok" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "vaultcontainer" + +msgid "vaultcontainers" +msgstr "vaultcontainers" + +#, fuzzy +#| msgid "vaultcontainers" +msgid "Vault Containers" +msgstr "vaultcontainers" + +#, fuzzy +#| msgid "vaultcontainer" +msgid "Vault Container" +msgstr "vaultcontainer" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +#, fuzzy +#| msgid "vaultcontainer" +msgid "Deleted vault container" +msgstr "vaultcontainer" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "Host \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "Host \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "%(count)d host sesuai" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "Host \"%(value)s\" dimodifikasi" + +#, fuzzy +#| msgid "vaultcontainer" +msgid "Vault configuration" +msgstr "vaultcontainer" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA KRA servers" +msgstr "Server IPA yang akan digunakan" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Archived data into vault \"%(value)s\"" +msgstr "Host \"%(value)s\" ditambahkan" + +msgid "Retrieve data from a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d grup cocok" + +#, fuzzy, python-format +#| msgid "Created CA \"%(value)s\"" +msgid "Imported profile \"%(value)s\"" +msgstr "CA \"%(value)s\" dibuat" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted profile \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, fuzzy +#| msgid "Certificate operation cannot be completed: %(error)s" +msgid "Certificate profiles cannot be renamed" +msgstr "Operasi sertifikat tidak dapat diselesaikan: %(error)s" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "Add host group" +msgid "host groups" +msgstr "Tambah grup host" + +#, fuzzy +#| msgid "Add host group" +msgid "Host Group" +msgstr "Tambah grup host" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Hostgroup \"%(value)s\" ditambahkan" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Hostgroup \"%(value)s\" dihapus" + +#, fuzzy +#| msgid "Add host group" +msgid "hostgroup" +msgstr "Tambah grup host" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "privileged hostgroup" +msgstr "Menghapus suatu hostgroup." + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Hostgroup \"%(value)s\" dimodifikasi" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "%(count)d hostgroup cocok" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +#, fuzzy +#| msgid "Kerberos Service Principal Name" +msgid "Kerberos Ticket Policy" +msgstr "Nama Prisipal Layanan Kerberos" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Location name" +msgstr "Nama perintah" + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Servers" +msgstr "Nama Peladen" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added OTP token \"%(value)s\"" +msgid "Added IPA location \"%(value)s\"" +msgstr "Menambah token OTP \"%(value)s\"" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Delete an IPA location." +msgstr "Menghapus suatu hostgroup." + +#, fuzzy, python-format +#| msgid "Deleted OTP token \"%(value)s\"" +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Menghapus token OTP \"%(value)s\"" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA Server" +msgstr "Server IPA yang akan digunakan" + +msgid "Modify information about an IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified OTP token \"%(value)s\"" +msgid "Modified IPA location \"%(value)s\"" +msgstr "Mengubah token OTP \"%(value)s\"" + +msgid "Search for IPA locations." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d OTP token matched" +#| msgid_plural "%(count)d OTP tokens matched" +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "%(count)d token OTP cocok" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "Role" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added role \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted role \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified role \"%(value)s\"" +msgstr "Grup \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d grup cocok" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Undeleted user account \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Staged user account \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Disabled CA \"%(value)s\"" +msgid "Disabled user account \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +#, fuzzy, python-format +#| msgid "Enabled CA \"%(value)s\"" +msgid "Enabled user account \"%(value)s\"" +msgstr "CA \"%(value)s\" difungsikan" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Unlocked account \"%(value)s\"" +msgstr "Host \"%(value)s\" dihapus" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "fork() failed\n" +msgid "%(host)s failed" +msgstr "fork() gagal\n" + +#, fuzzy, python-format +#| msgid "Account disabled" +msgid "Account disabled: %(disabled)s" +msgstr "Akun dinonaktifkan" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy +#| msgid "Remove all principals in this realm" +msgid "Remove principal alias from the user entry" +msgstr "Hapus semua prinsipal di realm ini" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, fuzzy +#| msgid "OTP Token" +msgid "" +"\n" +"OTP Tokens\n" +msgstr "Token OTP" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +#, fuzzy +#| msgid "OTP Token" +msgid "OTP token" +msgstr "Token OTP" + +#, fuzzy +#| msgid "OTP Token" +msgid "OTP tokens" +msgstr "Token OTP" + +#, fuzzy +#| msgid "OTP Token" +msgid "OTP Tokens" +msgstr "Token OTP" + +msgid "OTP Token" +msgstr "Token OTP" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "Menambah token OTP \"%(value)s\"" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Menghapus token OTP \"%(value)s\"" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Mengubah token OTP \"%(value)s\"" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d token OTP cocok" + +#, fuzzy +#| msgid "Deleted ACI \"%(value)s\"" +msgid "A list of ACI values" +msgstr "ACI \"%(value)s\" telah dihapus" + +#, fuzzy +#| msgid "" +#| "at least one of: type, filter, subtree, targetgroup, attrs or memberof " +#| "are required" +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" +"setidaknya diperlukan salah satu dari: type, filter, subtree, targetgroup, " +"attrs atau memberof" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"setidaknya diperlukan salah satu dari: type, filter, subtree, targetgroup, " +"attrs atau memberof" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "Grup '%s' tidak ada" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "ACI dengan nama \"%s\" tidak ditemukan" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dibuat" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dihapus" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dimodifikasi" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d ACI cocok" + +#, fuzzy, python-format +#| msgid "Created ACI \"%(value)s\"" +msgid "Renamed ACI to \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dibuat" + msgid "" "\n" "Domain Name System (DNS)\n" @@ -13926,9 +18208,6 @@ msgstr "" msgid "Managedby permission" msgstr "" -msgid "DNS is not configured" -msgstr "" - msgid "cannot be used when a zone is specified" msgstr "" @@ -14168,1445 +18447,549 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, python-brace-format msgid "" -"\n" -"DNS server configuration\n" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." msgstr "" msgid "" "\n" -"Manipulate DNS server configuration\n" +"API Schema\n" msgstr "" msgid "" "\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" +"Provides API introspection capabilities.\n" msgstr "" msgid "" "\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#, fuzzy -#| msgid "DNS Server name" -msgid "DNS server" -msgstr "Nama Server DNS" - -#, fuzzy -#| msgid "DNS Server name" -msgid "DNS servers" -msgstr "Nama Server DNS" - -#, fuzzy -#| msgid "DNS Server name" -msgid "DNS Servers" -msgstr "Nama Server DNS" - -#, fuzzy -#| msgid "DNS Server name" -msgid "DNS Server" -msgstr "Nama Server DNS" - -msgid "DNS Server name" -msgstr "Nama Server DNS" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "Forwarder" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" +" Show user-find details:\n" +" ipa command-show user-find\n" msgstr "" msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" msgstr "" -msgid "Modify DNS server configuration" +msgid "Documentation" msgstr "" -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified DNS server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -msgid "Search for DNS servers." +msgid "Exclude from" msgstr "" -#, fuzzy, python-format -#| msgid "%(count)s server matched" -#| msgid_plural "%(count)s servers matched" -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "%(count)s server cocok" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA DNS Server is not installed" -msgstr "Server IPA yang akan digunakan" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added new DNS server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Delete a DNS server" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -msgid "REST API is not logged in." +msgid "Include in" msgstr "" #, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgid "Results should contain primary key attribute only (\"%s\")" msgstr "" -msgid "Unable to communicate with CMS" +msgid "Help topic" msgstr "" -msgid "Response from CA was not valid JSON" +msgid "Version" msgstr "" -msgid "Host-based access control commands" +msgid "Parameters" msgstr "" -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" +msgid "Method of" msgstr "" -msgid "HBAC services" +#, fuzzy +#| msgid "hostname" +msgid "Method name" +msgstr "namahost" + +#, fuzzy, python-format +#| msgid "%(otype)s \"%(oname)s\" not found" +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" + +msgid "Display information about a command." msgstr "" -msgid "HBAC Services" +msgid "Search for commands." msgstr "" -msgid "HBAC Service" +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "CLI name" +msgstr "Nama perintah" + +msgid "Confirm (password)" +msgstr "Konfirmasi (kata sandi)" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +#, fuzzy +#| msgid "Hostname of this server" +msgid "Convert on server" +msgstr "Nama host peladen ini" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" msgstr "" #, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added HBAC service \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" +#| msgid "%(otype)s \"%(oname)s\" not found" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" #, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" +#| msgid "%(otype)s \"%(oname)s\" not found" +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified HBAC service \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" +msgid "Display information about a command output." +msgstr "" -#, fuzzy, python-format -#| msgid "%(count)s server matched" -#| msgid_plural "%(count)s servers matched" -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "%(count)s server cocok" +msgid "Search for command outputs." +msgstr "" -msgid "HBAC service group" +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" msgstr "" #, fuzzy #| msgid "Failed service/service groups" -msgid "HBAC service groups" +msgid "Member service groups" msgstr "Grup layanan/layanan gagal" #, fuzzy -#| msgid "IPA Server to use" -msgid "HBAC Service Groups" -msgstr "Server IPA yang akan digunakan" +#| msgid "Failed service/service groups" +msgid "Member HBAC service groups" +msgstr "Grup layanan/layanan gagal" -msgid "HBAC Service Group" +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" msgstr "" #, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Grup \"%(value)s\" ditambahkan" +#| msgid "%(otype)s \"%(oname)s\" not found" +msgid "container entry (%(container)s) not found" +msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" #, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "Grup \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -#| msgid "%(count)d group matched" -#| msgid_plural "%(count)d groups matched" -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "%(count)d grup cocok" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -#, fuzzy -#| msgid "users" -msgid "stage users" -msgstr "pengguna" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added stage user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "boleh maksimum %(len)d karakter" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted stage user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified stage user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d pengguna cocok" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Activate a stage user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy -#| msgid "Entry %s not found" -msgid "Entry RDN is not 'uid'" -msgstr "Entri %s tidak ditemukan" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" +#| msgid "%(otype)s \"%(oname)s\" not found" +msgid "%(parent)s: %(oname)s not found" +msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" #, fuzzy, python-format #| msgid "key named %(key)s already exists" -msgid "active user with name \"%(user)s\" already exists" +msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "kunci bernama %(key)s sudah ada" -#, fuzzy, python-format -#| msgid "${count} user(s) activated" -msgid "Stage user %s activated" -msgstr "${count} pengguna diaktifkan" +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" -msgid "Add one or more certificates to the stageuser entry" +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" msgstr "" #, fuzzy, python-format #| msgid "Added user \"%(value)s\"" -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "segmen" - -#, fuzzy -#| msgid "segment" -msgid "segments" -msgstr "segmen" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d host matched" -#| msgid_plural "%(count)d hosts matched" -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "%(count)d host sesuai" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Segmen \"%(value)s\" ditambahkan" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dihapus" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -#| msgid "must be '%(value)s'" -msgid "%(value)s" -msgstr "harus '%(value)s'" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d host matched" -#| msgid_plural "%(count)d hosts matched" -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "%(count)d host sesuai" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Host \"%(value)s\" dihapus" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added topology suffix \"%(value)s\"" -msgstr "Host \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Host \"%(value)s\" dimodifikasi" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -#| msgid "Add host group" -msgid "host groups" -msgstr "Tambah grup host" - -#, fuzzy -#| msgid "Add host group" -msgid "Host Group" -msgstr "Tambah grup host" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Hostgroup \"%(value)s\" ditambahkan" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Hostgroup \"%(value)s\" dihapus" - -#, fuzzy -#| msgid "Add host group" -msgid "hostgroup" -msgstr "Tambah grup host" - -#, fuzzy -#| msgid "Delete a hostgroup." -msgid "privileged hostgroup" -msgstr "Menghapus suatu hostgroup." - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Hostgroup \"%(value)s\" dimodifikasi" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "%(count)d hostgroup cocok" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "vaultcontainer" - -msgid "vaultcontainers" -msgstr "vaultcontainers" - -#, fuzzy -#| msgid "vaultcontainers" -msgid "Vault Containers" -msgstr "vaultcontainers" - -#, fuzzy -#| msgid "vaultcontainer" -msgid "Vault Container" -msgstr "vaultcontainer" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -#, fuzzy -#| msgid "vaultcontainer" -msgid "Deleted vault container" -msgstr "vaultcontainer" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added vault \"%(value)s\"" -msgstr "Host \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted vault \"%(value)s\"" -msgstr "Host \"%(value)s\" dihapus" - -#, fuzzy, python-format -#| msgid "%(count)d host matched" -#| msgid_plural "%(count)d hosts matched" -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d host sesuai" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified vault \"%(value)s\"" -msgstr "Host \"%(value)s\" dimodifikasi" - -#, fuzzy -#| msgid "vaultcontainer" -msgid "Vault configuration" -msgstr "vaultcontainer" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA KRA servers" -msgstr "Server IPA yang akan digunakan" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Archived data into vault \"%(value)s\"" -msgstr "Host \"%(value)s\" ditambahkan" - -msgid "Retrieve data from a vault." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -#, fuzzy -#| msgid "Delete group." -msgid "netgroups" -msgstr "Menghapus grup." - -#, fuzzy -#| msgid "Delete group." -msgid "Netgroups" -msgstr "Menghapus grup." - -#, fuzzy -#| msgid "Delete group." -msgid "Netgroup" -msgstr "Menghapus grup." - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added netgroup \"%(value)s\"" -msgstr "Grup \"%(value)s\" ditambahkan" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified netgroup \"%(value)s\"" -msgstr "Grup \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -#| msgid "%(count)d group matched" -#| msgid_plural "%(count)d groups matched" -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d grup cocok" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -#, fuzzy, python-format -#| msgid "Changed server state of \"%(value)s\"." -msgid "Changed password for \"%(value)s\"" -msgstr "Mengubah keadaan server \"%(value)s\"." - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "pkinit" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)s server cocok" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -#, fuzzy -#| msgid "Minimum serial number" -msgid "invalid port number" -msgstr "Nomor seri minimum" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -#, fuzzy -#| msgid "DNS Server name" -msgid "RADIUS Servers" -msgstr "Nama Server DNS" - -#, fuzzy -#| msgid "DNS Server name" -msgid "RADIUS Server" -msgstr "Nama Server DNS" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added RADIUS proxy server \"%(value)s\"" +msgid "Added HBAC rule \"%(value)s\"" msgstr "Pengguna \"%(value)s\" ditambahkan" #, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -#| msgid "%(count)s server matched" -#| msgid_plural "%(count)s servers matched" -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "%(count)s server cocok" - -#, fuzzy #| msgid "Deleted ACI \"%(value)s\"" -msgid "A list of ACI values" +msgid "Deleted HBAC rule \"%(value)s\"" msgstr "ACI \"%(value)s\" telah dihapus" -#, fuzzy -#| msgid "" -#| "at least one of: type, filter, subtree, targetgroup, attrs or memberof " -#| "are required" -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" -"setidaknya diperlukan salah satu dari: type, filter, subtree, targetgroup, " -"attrs atau memberof" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" -"setidaknya diperlukan salah satu dari: type, filter, subtree, targetgroup, " -"attrs atau memberof" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "Grup '%s' tidak ada" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "ACI dengan nama \"%s\" tidak ditemukan" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dibuat" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dihapus" - -#, python-format -msgid "Modified ACI \"%(value)s\"" +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified HBAC rule \"%(value)s\"" msgstr "ACI \"%(value)s\" telah dimodifikasi" -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" +#, fuzzy, python-format +#| msgid "%(count)d ACI matched" +#| msgid_plural "%(count)d ACIs matched" +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" msgstr[0] "%(count)d ACI cocok" #, fuzzy, python-format -#| msgid "Created ACI \"%(value)s\"" -msgid "Renamed ACI to \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dibuat" +#| msgid "Enabled CA \"%(value)s\"" +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "CA \"%(value)s\" difungsikan" + +#, fuzzy, python-format +#| msgid "Disabled CA \"%(value)s\"" +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" msgid "" "\n" -"Server configuration\n" +"Simulate use of Host-based access controls\n" "\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"NOTES:\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" "\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" "\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" +" --user, --host, and --service are mandatory, others are optional.\n" "\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" "\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" -#, fuzzy -#| msgid "must be at least 1" -msgid "must be at least 10" -msgstr "setidaknya harus 1" - -msgid "configuration options" +msgid "Unresolved rules in --rules" msgstr "" -msgid "Configuration" +#, python-format +msgid "Access granted: %s" msgstr "" -msgid "Maximum hostname length" +msgid "ID View" msgstr "" -msgid "IPA masters" +msgid "system ID View" msgstr "" -msgid "List of all IPA masters" +msgid "ID Views" msgstr "" -msgid "Hidden IPA masters" +msgid "User object overrides" msgstr "" -msgid "List of all hidden IPA masters" +msgid "Group object overrides" msgstr "" -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA CA servers" -msgstr "Server IPA yang akan digunakan" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" +msgid "Hosts the view applies to" msgstr "" msgid "Domain resolution order" @@ -15615,235 +18998,195 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID View \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" #, fuzzy, python-format -#| msgid "invalid '%(name)s': %(error)s" -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "'%(name)s' tidak valid: %(error)s" +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted ID View \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dihapus" -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified an ID View \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dimodifikasi" -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" +#, fuzzy, python-format +#| msgid "%(count)d ACI matched" +#| msgid_plural "%(count)d ACIs matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "%(count)d ACI cocok" + +msgid "Default Trust View cannot be applied on hosts" msgstr "" #, fuzzy -#| msgid "Group '%s' does not exist" -msgid "The group doesn't exist" -msgstr "Grup '%s' tidak ada" +#| msgid "realm not found\n" +msgid "not found" +msgstr "realm tidak ditemukan\n" -#, python-format -msgid "attribute \"%s\" not allowed" +msgid "ID View cannot be applied to IPA master" msgstr "" -msgid "May not be empty" +msgid "ID View already applied" +msgstr "" + +msgid "value" msgstr "" #, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgid "ID View applied to %i host." msgstr "" -msgid "A list of SELinux users delimited by $ expected" +#, python-format +msgid "ID View applied to %i hosts." msgstr "" -#, fuzzy, python-format -#| msgid "error on server '%(server)s': %(error)s" -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "galat pada server '%(server)s': %(error)s" +#, python-format +msgid "ID View cleared from %i host." +msgstr "" -msgid "SELinux user map default user not in order list" +#, python-format +msgid "ID View cleared from %i hosts." msgstr "" msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" -msgid "groups" +msgid "IPA object" msgstr "" -msgid "User Group" +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" msgstr "" #, python-format -msgid "Added group \"%(value)s\"" +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Delete an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +msgid "Modify an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified an ID override \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d pengguna cocok" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)s server role matched" +#| msgid_plural "%(count)s server roles matched" +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "%(count)s peran server cocok" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" msgstr "Grup \"%(value)s\" ditambahkan" -#, fuzzy -#| msgid "Password cannot be set on enrolled host." -msgid "gid cannot be set for external group" -msgstr "Kata sandi tidak dapat ditata pada host yang didaftarkan." - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, fuzzy -#| msgid "Delete group." -msgid "privileged group" -msgstr "Menghapus grup." - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Grup \"%(value)s\" dimodifikasi" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "%(count)d grup cocok" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - #, fuzzy, python-format #| msgid "Deleted group \"%(value)s\"" -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" msgstr "Grup \"%(value)s\" dihapus" -msgid "not allowed to modify user entries" -msgstr "" +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "Grup \"%(value)s\" dimodifikasi" -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "%(count)d grup cocok" msgid "" "\n" @@ -16075,1301 +19418,40 @@ msgid "%(count)d permission matched" msgid_plural "%(count)d permissions matched" msgstr[0] "%(count)d pengguna cocok" -#, fuzzy -#| msgid "OTP Token" -msgid "" -"\n" -"OTP Tokens\n" -msgstr "Token OTP" - -msgid "" -"\n" -"Manage OTP tokens.\n" +msgid "delegation" msgstr "" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" +msgid "delegations" msgstr "" -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgid "Delegations" msgstr "" -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -#, fuzzy -#| msgid "OTP Token" -msgid "OTP token" -msgstr "Token OTP" - -#, fuzzy -#| msgid "OTP Token" -msgid "OTP tokens" -msgstr "Token OTP" - -#, fuzzy -#| msgid "OTP Token" -msgid "OTP Tokens" -msgstr "Token OTP" - -msgid "OTP Token" -msgstr "Token OTP" - -msgid "URI" -msgstr "" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Menambah token OTP \"%(value)s\"" - -msgid "cannot be empty" -msgstr "" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Menghapus token OTP \"%(value)s\"" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Mengubah token OTP \"%(value)s\"" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "%(count)d token OTP cocok" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -#, fuzzy -#| msgid "Sudo" -msgid "Sudo Rule" -msgstr "Sudo" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgid "Delegation" msgstr "" #, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" +#| msgid "Added segment \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" +msgstr "Segmen \"%(value)s\" ditambahkan" #, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" +#| msgid "Deleted segment \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dihapus" #, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "pengguna" - -#, fuzzy -#| msgid "Command name" -msgid "command" -msgstr "Nama perintah" - -#, fuzzy -#| msgid "Command name" -msgid "commands" -msgstr "Nama perintah" - -msgid "runAs user" -msgstr "" - -#, fuzzy -#| msgid "users" -msgid "runAs users" -msgstr "pengguna" - -msgid "group runAs" -msgstr "" - -#, fuzzy -#| msgid "Add host group" -msgid "runAs groups" -msgstr "Tambah grup host" - -#, fuzzy, python-format -#| msgid "%(count)d user matched" -#| msgid_plural "%(count)d users matched" -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "%(count)d pengguna cocok" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added OTP token \"%(value)s\"" -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Menambah token OTP \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted CA \"%(value)s\"" -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "CA \"%(value)s\" dihapus" - -#, fuzzy, python-format -#| msgid "Modified CA \"%(value)s\"" -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "CA \"%(value)s\" diubah" - -#, fuzzy, python-format -#| msgid "%(count)d CA matched" -#| msgid_plural "%(count)d CAs matched" -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "%(count)d CA cocok" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Grup \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Grup \"%(value)s\" dimodifikasi" +#| msgid "Modified segment \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dimodifikasi" #, fuzzy, python-format #| msgid "%(count)d group matched" #| msgid_plural "%(count)d groups matched" -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "%(count)d grup cocok" -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -#, fuzzy -#| msgid "Realm name" -msgid "Realm domains" -msgstr "Nama realm" - -#, fuzzy -#| msgid "Domain" -msgid "Realm Domains" -msgstr "Domain" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -#, fuzzy -#| msgid "Kerberos Service Principal Name" -msgid "Kerberos Ticket Policy" -msgstr "Nama Prisipal Layanan Kerberos" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -#, fuzzy -#| msgid "Command name" -msgid "Location name" -msgstr "Nama perintah" - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -#, fuzzy -#| msgid "Server Name" -msgid "Servers" -msgstr "Nama Peladen" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added OTP token \"%(value)s\"" -msgid "Added IPA location \"%(value)s\"" -msgstr "Menambah token OTP \"%(value)s\"" - -#, fuzzy -#| msgid "Delete a hostgroup." -msgid "Delete an IPA location." -msgstr "Menghapus suatu hostgroup." - -#, fuzzy, python-format -#| msgid "Deleted OTP token \"%(value)s\"" -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Menghapus token OTP \"%(value)s\"" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA Server" -msgstr "Server IPA yang akan digunakan" - -msgid "Modify information about an IPA location." -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified OTP token \"%(value)s\"" -msgid "Modified IPA location \"%(value)s\"" -msgstr "Mengubah token OTP \"%(value)s\"" - -msgid "Search for IPA locations." -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d OTP token matched" -#| msgid_plural "%(count)d OTP tokens matched" -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "%(count)d token OTP cocok" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Version" -msgstr "" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -#| msgid "hostname" -msgid "Method name" -msgstr "namahost" - -#, fuzzy, python-format -#| msgid "%(otype)s \"%(oname)s\" not found" -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -#| msgid "Command name" -msgid "CLI name" -msgstr "Nama perintah" - -msgid "Confirm (password)" -msgstr "Konfirmasi (kata sandi)" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -#, fuzzy -#| msgid "Hostname of this server" -msgid "Convert on server" -msgstr "Nama host peladen ini" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(otype)s \"%(oname)s\" not found" -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, fuzzy, python-format -#| msgid "%(otype)s \"%(oname)s\" not found" -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -#, fuzzy -#| msgid "Active Directory domain" -msgid "Active Directory domain range" -msgstr "Domain Active Directory" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added ID range \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted ACI \"%(value)s\"" -msgid "Deleted ID range \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dihapus" - -#, fuzzy, python-format -#| msgid "%(count)d user matched" -#| msgid_plural "%(count)d users matched" -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d pengguna cocok" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified ACI \"%(value)s\"" -msgid "Modified ID range \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dimodifikasi" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "self service permission" -msgstr "" - -#, fuzzy -#| msgid "Service Options" -msgid "self service permissions" -msgstr "Opsi Layanan" - -#, fuzzy -#| msgid "Service Options" -msgid "Self Service Permissions" -msgstr "Opsi Layanan" - -msgid "Self Service Permission" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added selfservice \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified selfservice \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -#| msgid "%(count)s server matched" -#| msgid_plural "%(count)s servers matched" -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)s server cocok" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "" -"\n" -"IPA server roles\n" -msgstr "Server IPA yang akan digunakan" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#, fuzzy -#| msgid "Server Name" -msgid "server role" -msgstr "Nama Peladen" - -#, fuzzy -#| msgid "Server Name" -msgid "server roles" -msgstr "Nama Peladen" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA Server Roles" -msgstr "Server IPA yang akan digunakan" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA Server Role" -msgstr "Server IPA yang akan digunakan" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA server role name" -msgstr "Server IPA yang akan digunakan" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "%(count)s peran server cocok" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "IPA role name" -msgstr "" - msgid "HBAC rule and local members cannot both be set" msgstr "" @@ -17439,1024 +19521,204 @@ msgstr "CA \"%(value)s\" difungsikan" msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "CA \"%(value)s\" dinonaktifkan" -#, fuzzy, python-brace-format -#| msgid "realm not found\n" -msgid "{role}: role not found" -msgstr "realm tidak ditemukan\n" +#, fuzzy +#| msgid "IPA Server to use" +msgid "" +"\n" +"IPA servers\n" +msgstr "Server IPA yang akan digunakan" -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "{attr}: tidak ada atribut seperti itu" - -msgid "pyhbac is not installed." +msgid "" +"\n" +"Get information about installed IPA servers.\n" msgstr "" msgid "" "\n" -"IPA certificate operations\n" +" Find all servers:\n" +" ipa server-find\n" msgstr "" msgid "" "\n" -"Implements a set of commands for managing server SSL certificates.\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" msgstr "" -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" +msgid "server" msgstr "" -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" +msgid "servers" msgstr "" #, fuzzy -#| msgid " * 6 - certificateHold\n" -msgid " * 0 - unspecified\n" -msgstr " * 6 - certificateHold\n" +#| msgid "IPA Server to use" +msgid "IPA Servers" +msgstr "Server IPA yang akan digunakan" -msgid " * 1 - keyCompromise\n" -msgstr " * 1 - keyCompromise\n" +#, fuzzy +#| msgid "Service Options" +msgid "Server location" +msgstr "Opsi Layanan" -msgid " * 2 - cACompromise\n" -msgstr " * 2 - cACompromise\n" +#, fuzzy +#| msgid "Service Options" +msgid "Service weight" +msgstr "Opsi Layanan" -msgid " * 3 - affiliationChanged\n" +msgid "Weight for server services" +msgstr "" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" msgstr "" #, fuzzy -#| msgid " * 2 - cACompromise\n" -msgid " * 4 - superseded\n" -msgstr " * 2 - cACompromise\n" +#| msgid "Failed service/service groups" +msgid "Enabled server roles" +msgstr "Grup layanan/layanan gagal" -#, fuzzy -#| msgid " * 6 - certificateHold\n" -msgid " * 5 - cessationOfOperation\n" -msgstr " * 6 - certificateHold\n" - -msgid " * 6 - certificateHold\n" -msgstr " * 6 - certificateHold\n" - -#, fuzzy -#| msgid " * 1 - keyCompromise\n" -msgid " * 8 - removeFromCRL\n" -msgstr " * 1 - keyCompromise\n" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr " * 9 - privilegeWithdrawn\n" - -msgid " * 10 - aACompromise\n" -msgstr " * 10 - aACompromise\n" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -#, fuzzy -#| msgid "must be a certificate" -msgid "Base-64 encoded certificate." -msgstr "harus merupakan sebuah sertifikat" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "Subject" -msgstr "" - -msgid "Subject email address" -msgstr "" - -#, fuzzy -#| msgid "must be DNS name" -msgid "Subject DNS name" -msgstr "harus berupa nama DNS" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -msgid "Subject IP Address" -msgstr "" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -#, fuzzy -#| msgid "Kerberos Service Principal Name" -msgid "Subject Kerberos principal name" -msgstr "Nama Prisipal Layanan Kerberos" - -#, fuzzy -#| msgid "Subject Distinguished Name" -msgid "Subject Other Name" -msgstr "Distinguished Name Subjek" - -msgid "Issuer" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -#, fuzzy -#| msgid "Maximum serial number" -msgid "Serial number (hex)" -msgstr "Nomor seri maksimum" - -msgid "Request status" -msgstr "" - -#, fuzzy -#| msgid "must be a certificate signing request" -msgid "Include certificate chain in output" -msgstr "harus berupa sebuah permintaan penandatanganan sertifikat" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." +msgid "List of enabled roles" msgstr "" -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d user matched" -#| msgid_plural "%(count)d users matched" -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "%(count)d pengguna cocok" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added ID View \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -#| msgid "Deleted ACI \"%(value)s\"" -msgid "Deleted ID View \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dihapus" - -#, fuzzy, python-format -#| msgid "Modified ACI \"%(value)s\"" -msgid "Modified an ID View \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dimodifikasi" - -#, fuzzy, python-format -#| msgid "%(count)d ACI matched" -#| msgid_plural "%(count)d ACIs matched" -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "%(count)d ACI cocok" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -#, fuzzy -#| msgid "realm not found\n" -msgid "not found" -msgstr "realm tidak ditemukan\n" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added ID override \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Delete an ID override." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted ID override \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -msgid "Modify an ID override." +msgid "Modify information about an IPA server." msgstr "" #, fuzzy, python-format #| msgid "Modified user \"%(value)s\"" -msgid "Modified an ID override \"%(value)s\"" +msgid "Modified IPA server \"%(value)s\"" msgstr "Pengguna \"%(value)s\" dimodifikasi" -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - #, fuzzy, python-format -#| msgid "%(count)d user matched" -#| msgid_plural "%(count)d users matched" -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d pengguna cocok" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -#, fuzzy -#| msgid "must be a certificate" -msgid "Base-64 encoded user certificate" -msgstr "harus merupakan sebuah sertifikat" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added User ID override \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "%(count)s server cocok" #, fuzzy, python-format #| msgid "Deleted user \"%(value)s\"" -msgid "Deleted User ID override \"%(value)s\"" +msgid "Deleted IPA server \"%(value)s\"" msgstr "Pengguna \"%(value)s\" dihapus" -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified an User ID override \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" +msgid "Ignore topology errors" +msgstr "" -#, fuzzy, python-format -#| msgid "%(count)s server role matched" -#| msgid_plural "%(count)s server roles matched" -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "%(count)s peran server cocok" +msgid "Ignore topology connectivity problems after removal" +msgstr "" -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added Group ID override \"%(value)s\"" -msgstr "Grup \"%(value)s\" ditambahkan" +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Grup \"%(value)s\" dimodifikasi" +msgid "Force server removal" +msgstr "" -#, fuzzy, python-format -#| msgid "%(count)d group matched" -#| msgid_plural "%(count)d groups matched" -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "%(count)d grup cocok" - -msgid "" -"\n" -"Auto Membership Rule.\n" +msgid "Force server removal even if it does not exist" msgstr "" msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." msgstr "" msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." msgstr "" msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." msgstr "" -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" +msgid "Ignoring these warnings and proceeding with removal" msgstr "" #, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" - -#, python-format -msgid "%s is not a valid attribute." +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" -msgid "" -"\n" -" Add an automember rule.\n" -" " +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" msgstr "" #, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added automember rule \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" +#| msgid "error on server '%(server)s': %(error)s" +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "galat pada server '%(server)s': %(error)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" #, fuzzy -#| msgid "Auto member rule: %s not found!" -msgid "Auto Membership is not configured" -msgstr "Aturan anggota otomatis: %s tidak ditemukan!" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Host \"%(value)s\" ditambahkan" +#| msgid "Server Name" +msgid "Server state" +msgstr "Nama Peladen" #, python-format -msgid "Auto member rule: %s not found!" -msgstr "Aturan anggota otomatis: %s tidak ditemukan!" +msgid "Changed server state of \"%(value)s\"." +msgstr "Mengubah keadaan server \"%(value)s\"." -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " +msgid "Cannot hide CA renewal master." msgstr "" -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted hostgroup \"%(value)s\"" -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Hostgroup \"%(value)s\" dihapus" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified automember rule \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d user matched" -#| msgid_plural "%(count)d users matched" -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d pengguna cocok" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " +msgid "Cannot hide DNSSec key master." msgstr "" #, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" +msgid "Cannot hide last enabled %(name)s server." msgstr "" msgid "" "\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" +"Session Support for IPA\n" msgstr "" msgid "" @@ -18634,6 +19896,872 @@ msgstr "" msgid "Enabled CA \"%(value)s\"" msgstr "CA \"%(value)s\" difungsikan" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified segment \"%(value)s\"" +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dimodifikasi" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted segment \"%(value)s\"" +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dihapus" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "%(count)s pengguna cocok" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be at least 1" +msgid "must be at least 10" +msgstr "setidaknya harus 1" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA CA servers" +msgstr "Server IPA yang akan digunakan" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, fuzzy, python-format +#| msgid "invalid '%(name)s': %(error)s" +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "'%(name)s' tidak valid: %(error)s" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +#, fuzzy +#| msgid "Group '%s' does not exist" +msgid "The group doesn't exist" +msgstr "Grup '%s' tidak ada" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "galat pada server '%(server)s': %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Base-64 encoded host certificate" +msgstr "harus merupakan sebuah sertifikat" + +#, fuzzy +#| msgid "Maximum serial number" +msgid "Serial Number" +msgstr "Nomor seri maksimum" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "Host \"%(value)s\" ditambahkan" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Host \"%(value)s\" dihapus" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Host \"%(value)s\" dimodifikasi" + +msgid "Password cannot be set on enrolled host." +msgstr "Kata sandi tidak dapat ditata pada host yang didaftarkan." + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d host sesuai" + +#, fuzzy, python-format +#| msgid "Disabled CA \"%(value)s\"" +msgid "Disabled host \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added certificates to host \"%(value)s\"" +msgstr "Host \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Host \"%(value)s\" dimodifikasi" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Host \"%(value)s\" ditambahkan" + +#, fuzzy +#| msgid "Remove all principals in this realm" +msgid "Remove principal alias from a host entry" +msgstr "Hapus semua prinsipal di realm ini" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Host \"%(value)s\" dimodifikasi" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dihapus" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d pengguna cocok" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified ID range \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dimodifikasi" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + msgid "Internationalization messages" msgstr "" @@ -19769,14 +21897,6 @@ msgstr "" msgid "REVOKED" msgstr "" -#, fuzzy -#| msgid "Maximum serial number" -msgid "Serial Number" -msgstr "Nomor seri maksimum" - -msgid "Serial Number (hex)" -msgstr "" - msgid "SHA1 Fingerprint" msgstr "" @@ -19831,9 +21951,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -msgid "Certificate mapping data" -msgstr "" - msgid "Configuration string" msgstr "" @@ -20619,9 +22736,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "" - msgid "Netgroup Settings" msgstr "" @@ -20747,11 +22861,6 @@ msgstr "" msgid "Add password policy" msgstr "" -#, fuzzy -#| msgid "password" -msgid "Password Policy" -msgstr "kata sandi" - msgid "Remove password policies" msgstr "" @@ -21241,17 +23350,6 @@ msgstr "" msgid "Remove domains" msgstr "" -#, fuzzy -#| msgid "must be dictionary" -msgid "Trust direction" -msgstr "harus berupa kamus" - -msgid "Trust status" -msgstr "" - -msgid "Trust type" -msgstr "" - msgid "Alternative UPN suffixes" msgstr "" @@ -21803,9 +23901,6 @@ msgstr "Sudo" msgid "Topology" msgstr "" -msgid "Trusts" -msgstr "" - msgid "True" msgstr "" @@ -21918,1474 +24013,6 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "Role" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added role \"%(value)s\"" -msgstr "Grup \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted role \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified role \"%(value)s\"" -msgstr "Grup \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -#| msgid "%(count)d group matched" -#| msgid_plural "%(count)d groups matched" -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d grup cocok" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "" -"\n" -"IPA servers\n" -msgstr "Server IPA yang akan digunakan" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA Servers" -msgstr "Server IPA yang akan digunakan" - -#, fuzzy -#| msgid "Service Options" -msgid "Server location" -msgstr "Opsi Layanan" - -#, fuzzy -#| msgid "Service Options" -msgid "Service weight" -msgstr "Opsi Layanan" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -#, fuzzy -#| msgid "Failed service/service groups" -msgid "Enabled server roles" -msgstr "Grup layanan/layanan gagal" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified IPA server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -#| msgid "%(count)s server matched" -#| msgid_plural "%(count)s servers matched" -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "%(count)s server cocok" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "error on server '%(server)s': %(error)s" -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "galat pada server '%(server)s': %(error)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, fuzzy, python-format -#| msgid "must be '%(value)s'" -msgid "must be \"%s\"" -msgstr "harus '%(value)s'" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -#, fuzzy -#| msgid "Server Name" -msgid "Server state" -msgstr "Nama Peladen" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "Mengubah keadaan server \"%(value)s\"." - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -#, fuzzy -#| msgid "Removing principal %s\n" -msgid "Member principals" -msgstr "Menghapus prinsipal %s\n" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -#, fuzzy -#| msgid "Service Options" -msgid "service delegation rules" -msgstr "Opsi Layanan" - -#, fuzzy -#| msgid "Service Options" -msgid "Service delegation rules" -msgstr "Opsi Layanan" - -#, fuzzy -#| msgid "Service Options" -msgid "Service delegation rule" -msgstr "Opsi Layanan" - -#, fuzzy, python-format -#| msgid "Added segment \"%(value)s\"" -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Segmen \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -msgid "privileged service delegation rule" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)s server role matched" -#| msgid_plural "%(count)s server roles matched" -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "%(count)s peran server cocok" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -#, fuzzy -#| msgid "Service Options" -msgid "Service delegation targets" -msgstr "Opsi Layanan" - -#, fuzzy -#| msgid "Service Options" -msgid "Service delegation target" -msgstr "Opsi Layanan" - -#, fuzzy, python-format -#| msgid "Added segment \"%(value)s\"" -msgid "Added service delegation target \"%(value)s\"" -msgstr "Segmen \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -#| msgid "Deleted segment \"%(value)s\"" -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dihapus" - -msgid "privileged service delegation target" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)s server role matched" -#| msgid_plural "%(count)s server roles matched" -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "%(count)s peran server cocok" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -#, fuzzy -#| msgid "LDAP URI" -msgid "Invalid LDAP URI." -msgstr "URI LDAP" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#, fuzzy -#| msgid "must be a certificate" -msgid "Base-64 encoded host certificate" -msgstr "harus merupakan sebuah sertifikat" - -msgid "Principal alias" -msgstr "" - -#, fuzzy -#| msgid "SSH public key:" -msgid "SSH public key fingerprint" -msgstr "Kunci publik SSH:" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Host \"%(value)s\" ditambahkan" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Host \"%(value)s\" dihapus" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Host \"%(value)s\" dimodifikasi" - -msgid "Password cannot be set on enrolled host." -msgstr "Kata sandi tidak dapat ditata pada host yang didaftarkan." - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "%(count)d host sesuai" - -#, fuzzy, python-format -#| msgid "Disabled CA \"%(value)s\"" -msgid "Disabled host \"%(value)s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added certificates to host \"%(value)s\"" -msgstr "Host \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Host \"%(value)s\" dimodifikasi" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Host \"%(value)s\" ditambahkan" - -#, fuzzy -#| msgid "Remove all principals in this realm" -msgid "Remove principal alias from a host entry" -msgstr "Hapus semua prinsipal di realm ini" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Host \"%(value)s\" dimodifikasi" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -#, fuzzy -#| msgid "password" -msgid "password policy" -msgstr "kata sandi" - -#, fuzzy -#| msgid "password" -msgid "password policies" -msgstr "kata sandi" - -msgid "Password Policies" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -#, fuzzy -#| msgid "priority cannot be set on global policy" -msgid "cannot delete global password policy" -msgstr "prioritas tidak dapat ditetapkan pada kebijakan global" - -msgid "priority cannot be set on global policy" -msgstr "prioritas tidak dapat ditetapkan pada kebijakan global" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted OTP token \"%(value)s\"" -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Menghapus token OTP \"%(value)s\"" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -#, fuzzy -#| msgid "Domain" -msgid "domain" -msgstr "Domain" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -#, fuzzy -#| msgid "Bind rule type" -msgid "id range type" -msgstr "Tipe aturan bind" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted trust \"%(value)s\"" -msgstr "Host \"%(value)s\" dihapus" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d host matched" -#| msgid_plural "%(count)d hosts matched" -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d host sesuai" - -#, fuzzy -#| msgid "cannot stat() configuration file %s\n" -msgid "trust configuration" -msgstr "tidak dapat melakukan stat() berkas konfigurasi %s\n" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified CA \"%(value)s\"" -msgid "Modified \"%(value)s\" trust configuration" -msgstr "CA \"%(value)s\" diubah" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "sidgen_was_run" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -#, fuzzy -#| msgid "Domain" -msgid "Domain enabled" -msgstr "Domain" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, fuzzy -#| msgid "Unable to remove entry\n" -msgid "not allowed to remotely add agent" -msgstr "Tak bisa menghapus entri\n" - -#, fuzzy, python-format -#| msgid "Enabled CA \"%(value)s\"" -msgid "Enabled trust domain \"%(value)s\"" -msgstr "CA \"%(value)s\" difungsikan" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -#| msgid "Disabled CA \"%(value)s\"" -msgid "Disabled trust domain \"%(value)s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified segment \"%(value)s\"" -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dimodifikasi" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted segment \"%(value)s\"" -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dihapus" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "%(count)s pengguna cocok" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added segment \"%(value)s\"" -msgid "Added privilege \"%(value)s\"" -msgstr "Segmen \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -#| msgid "Deleted segment \"%(value)s\"" -msgid "Deleted privilege \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dihapus" - -#, fuzzy, python-format -#| msgid "Modified segment \"%(value)s\"" -msgid "Modified privilege \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -#| msgid "%(count)s server matched" -#| msgid_plural "%(count)s servers matched" -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)s server cocok" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -23564,666 +24191,43 @@ msgstr "Hapus semua prinsipal di realm ini" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "" -msgid "delegation" +msgid "self service permission" msgstr "" -msgid "delegations" -msgstr "" +#, fuzzy +#| msgid "Service Options" +msgid "self service permissions" +msgstr "Opsi Layanan" -msgid "Delegations" -msgstr "" +#, fuzzy +#| msgid "Service Options" +msgid "Self Service Permissions" +msgstr "Opsi Layanan" -msgid "Delegation" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added segment \"%(value)s\"" -msgid "Added delegation \"%(value)s\"" -msgstr "Segmen \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -#| msgid "Deleted segment \"%(value)s\"" -msgid "Deleted delegation \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dihapus" - -#, fuzzy, python-format -#| msgid "Modified segment \"%(value)s\"" -msgid "Modified delegation \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -#| msgid "%(count)d group matched" -#| msgid_plural "%(count)d groups matched" -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "%(count)d grup cocok" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" +msgid "Self Service Permission" msgstr "" #, fuzzy, python-format #| msgid "Added user \"%(value)s\"" -msgid "Added HBAC rule \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" msgstr "Pengguna \"%(value)s\" ditambahkan" -#, fuzzy, python-format -#| msgid "Deleted ACI \"%(value)s\"" -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dihapus" - -#, fuzzy, python-format -#| msgid "Modified ACI \"%(value)s\"" -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dimodifikasi" - -#, fuzzy, python-format -#| msgid "%(count)d ACI matched" -#| msgid_plural "%(count)d ACIs matched" -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "%(count)d ACI cocok" - -#, fuzzy, python-format -#| msgid "Enabled CA \"%(value)s\"" -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "CA \"%(value)s\" difungsikan" - -#, fuzzy, python-format -#| msgid "Disabled CA \"%(value)s\"" -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -#, fuzzy -#| msgid "Operation failed: %s\n" -msgid "operation not defined" -msgstr "Operasi gagal: %s\n" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -#, fuzzy -#| msgid "Failed service/service groups" -msgid "Member service groups" -msgstr "Grup layanan/layanan gagal" - -#, fuzzy -#| msgid "Failed service/service groups" -msgid "Member HBAC service groups" -msgstr "Grup layanan/layanan gagal" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(otype)s \"%(oname)s\" not found" -msgid "container entry (%(container)s) not found" -msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" - -#, fuzzy, python-format -#| msgid "%(otype)s \"%(oname)s\" not found" -msgid "%(parent)s: %(oname)s not found" -msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" - -#, fuzzy, python-format -#| msgid "key named %(key)s already exists" -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "kunci bernama %(key)s sudah ada" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "harus TRUE atau FALSE" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "Entry %s not found" -msgid "manager %(manager)s not found" -msgstr "Entri %s tidak ditemukan" - -#, fuzzy -#| msgid "must be a certificate" -msgid "Issuer of the certificate" -msgstr "harus merupakan sebuah sertifikat" - -#, fuzzy -#| msgid "must be a certificate" -msgid "Subject of the certificate" -msgstr "harus merupakan sebuah sertifikat" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - #, fuzzy, python-format #| msgid "Deleted user \"%(value)s\"" -msgid "Undeleted user account \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Staged user account \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" msgstr "Pengguna \"%(value)s\" dihapus" -#, fuzzy, python-format -#| msgid "Disabled CA \"%(value)s\"" -msgid "Disabled user account \"%(value)s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -#, fuzzy, python-format -#| msgid "Enabled CA \"%(value)s\"" -msgid "Enabled user account \"%(value)s\"" -msgstr "CA \"%(value)s\" difungsikan" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Unlocked account \"%(value)s\"" -msgstr "Host \"%(value)s\" dihapus" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "fork() failed\n" -msgid "%(host)s failed" -msgstr "fork() gagal\n" - -#, fuzzy, python-format -#| msgid "Account disabled" -msgid "Account disabled: %(disabled)s" -msgstr "Akun dinonaktifkan" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added certificates to user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - #, fuzzy, python-format #| msgid "Modified user \"%(value)s\"" -msgid "Removed certificates from user \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" msgstr "Pengguna \"%(value)s\" dimodifikasi" -msgid "Add new principal alias to the user entry" -msgstr "" - #, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy -#| msgid "Remove all principals in this realm" -msgid "Remove principal alias from the user entry" -msgstr "Hapus semua prinsipal di realm ini" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "%(count)s server cocok" #, python-format msgid "all masters must have %(role)s role enabled" @@ -24408,25 +24412,6 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - #, fuzzy #| msgid "must be a certificate" msgid "Request must be a dict" @@ -24452,6 +24437,25 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #, python-format msgid "must equal %r" msgstr "" diff --git a/po/ja.po b/po/ja.po index efbcb4b14..d5c5edf5b 100644 --- a/po/ja.po +++ b/po/ja.po @@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Japanese\n" @@ -18,6 +18,99 @@ msgstr "" "Plural-Forms: nplurals=1; plural=0\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + #, fuzzy, c-format #| msgid "Out of memory!?\n" msgid "Out of memory!\n" @@ -279,99 +372,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - #, c-format msgid "cannot open configuration file %s\n" msgstr "" @@ -9764,6 +9764,107 @@ msgid "" "Establish bi-directional trust. By default trust is inbound one-way only." msgstr "" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +#, fuzzy +#| msgid "Delete an HBAC service group." +msgid "Delete a Certificate Profile." +msgstr "HBAC サービスグループを削除します。" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for Certificate Profiles." +msgstr "役割を検索します。" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +#, fuzzy +#| msgid "Display the properties of an HBAC rule." +msgid "Display the properties of a Certificate Profile." +msgstr "HBAC ルールのプロパティーを表示します。" + +msgid "Write profile configuration to file" +msgstr "" + msgid "" "\n" "ID ranges\n" @@ -9976,107 +10077,6 @@ msgid "" " " msgstr "" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -#, fuzzy -#| msgid "Delete an HBAC service group." -msgid "Delete a Certificate Profile." -msgstr "HBAC サービスグループを削除します。" - -#, fuzzy -#| msgid "Search for roles." -msgid "Search for Certificate Profiles." -msgstr "役割を検索します。" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -#, fuzzy -#| msgid "Display the properties of an HBAC rule." -msgid "Display the properties of a Certificate Profile." -msgstr "HBAC ルールのプロパティーを表示します。" - -msgid "Write profile configuration to file" -msgstr "" - msgid "Remove users that can manage this token." msgstr "" @@ -12311,162 +12311,20 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "Additional instructions:" +msgid "Results are truncated, try a more specific search" msgstr "" #, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" +msgid "Unknown option: %(option)s" msgstr "" -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." +msgid "Client version. Used to determine if server will accept request." msgstr "" -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" +msgid "any of the configured servers" msgstr "" -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "unknown error %(code)d from %(server)s: %(error)s" -msgid "DNS server %(server)s: %(error)s." -msgstr "%(server)s から未知のエラー %(code)d: %(error)s" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." +msgid "Exceeded number of tries to forward a request." msgstr "" #, python-format @@ -12527,6 +12385,156 @@ msgstr "検索オプション" msgid "No file to read" msgstr "" +msgid "incorrect type" +msgstr "" + +msgid "Only one value is allowed" +msgstr "" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +msgid "must be an integer" +msgstr "整数である必要があります" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "少なくとも %(minvalue)d である必要があります" + +#, fuzzy, python-format +#| msgid "can be at most %(maxlength)d bytes" +msgid "can be at most %(maxvalue)d" +msgstr "大きくても %(maxlength)d バイトである必要があります" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be a decimal number" +msgstr "整数である必要があります" + +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)d" +msgid "must be at least %(minvalue)s" +msgstr "少なくとも %(minvalue)d である必要があります" + +#, fuzzy, python-format +#| msgid "can be at most %(maxlength)d bytes" +msgid "can be at most %(maxvalue)s" +msgstr "大きくても %(maxlength)d バイトである必要があります" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "パターン \"%(pattern)s\" が一致する必要があります" + +msgid "must be binary data" +msgstr "バイナリーデータである必要があります" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "少なくとも %(minlength)d バイトである必要があります" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "大きくても %(maxlength)d バイトである必要があります" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "ちょうど %(length)d バイトである必要があります" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be a certificate" +msgstr "整数である必要があります" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "Unicode テキストである必要があります" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "少なくとも %(minlength)d 文字である必要があります" + +#, fuzzy, python-format +#| msgid "can be at most %(maxlength)d bytes" +msgid "can be at most %(maxlength)d characters" +msgstr "大きくても %(maxlength)d バイトである必要があります" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "ちょうど %(length)d 文字である必要があります" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)d" +msgid "must be '%(value)s'" +msgstr "少なくとも %(minvalue)d である必要があります" + +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)d" +msgid "must be one of %(values)s" +msgstr "少なくとも %(minvalue)d である必要があります" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be datetime value" +msgstr "少なくとも %(minvalue)d である必要があります" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be DNS name" +msgstr "整数である必要があります" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be absolute" +msgstr "整数である必要があります" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be relative" +msgstr "整数である必要があります" + +#, fuzzy +#| msgid "must be binary data" +msgid "must be dictionary" +msgstr "バイナリーデータである必要があります" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + msgid "A dictionary representing an LDAP entry" msgstr "" @@ -12538,16 +12546,6 @@ msgstr "ACI 値の一覧" msgid "All commands should at least have a result" msgstr "" -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" @@ -12915,168 +12913,162 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" -msgid "incorrect type" +msgid "Additional instructions:" msgstr "" -msgid "Only one value is allowed" -msgstr "" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "整数である必要があります" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "少なくとも %(minvalue)d である必要があります" - -#, fuzzy, python-format -#| msgid "can be at most %(maxlength)d bytes" -msgid "can be at most %(maxvalue)d" -msgstr "大きくても %(maxlength)d バイトである必要があります" - -#, fuzzy -#| msgid "must be an integer" -msgid "must be a decimal number" -msgstr "整数である必要があります" - -#, fuzzy, python-format -#| msgid "must be at least %(minvalue)d" -msgid "must be at least %(minvalue)s" -msgstr "少なくとも %(minvalue)d である必要があります" - -#, fuzzy, python-format -#| msgid "can be at most %(maxlength)d bytes" -msgid "can be at most %(maxvalue)s" -msgstr "大きくても %(maxlength)d バイトである必要があります" - #, python-format msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." msgstr "" #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "パターン \"%(pattern)s\" が一致する必要があります" - -msgid "must be binary data" -msgstr "バイナリーデータである必要があります" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "少なくとも %(minlength)d バイトである必要があります" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "大きくても %(maxlength)d バイトである必要があります" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "ちょうど %(length)d バイトである必要があります" - -#, fuzzy -#| msgid "must be an integer" -msgid "must be a certificate" -msgstr "整数である必要があります" - -msgid "must be a certificate signing request" +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" msgstr "" #, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "Unicode テキストである必要があります" - -msgid "Leading and trailing spaces are not allowed" +msgid "'%(option)s' option is deprecated. %(additional_info)s" msgstr "" #, python-format -msgid "must be at least %(minlength)d characters" -msgstr "少なくとも %(minlength)d 文字である必要があります" - -#, fuzzy, python-format -#| msgid "can be at most %(maxlength)d bytes" -msgid "can be at most %(maxlength)d characters" -msgstr "大きくても %(maxlength)d バイトである必要があります" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "ちょうど %(length)d 文字である必要があります" - -#, python-format -msgid "The character %(char)r is not allowed." +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" msgstr "" #, fuzzy, python-format -#| msgid "must be at least %(minvalue)d" -msgid "must be '%(value)s'" -msgstr "少なくとも %(minvalue)d である必要があります" +#| msgid "unknown error %(code)d from %(server)s: %(error)s" +msgid "DNS server %(server)s: %(error)s." +msgstr "%(server)s から未知のエラー %(code)d: %(error)s" -#, fuzzy, python-format -#| msgid "must be at least %(minvalue)d" -msgid "must be one of %(values)s" -msgstr "少なくとも %(minvalue)d である必要があります" - -#, fuzzy -#| msgid "must be at least %(minvalue)d" -msgid "must be datetime value" -msgstr "少なくとも %(minvalue)d である必要があります" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -#, fuzzy -#| msgid "must be an integer" -msgid "must be DNS name" -msgstr "整数である必要があります" - -#, fuzzy -#| msgid "must be an integer" -msgid "must be absolute" -msgstr "整数である必要があります" - -#, fuzzy -#| msgid "must be an integer" -msgid "must be relative" -msgstr "整数である必要があります" - -#, fuzzy -#| msgid "must be binary data" -msgid "must be dictionary" -msgstr "バイナリーデータである必要があります" - -msgid "must be Kerberos principal" +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." msgstr "" #, python-format -msgid "%(filename)s: file not found" +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" -#, python-brace-format -msgid "Unable to parse option {item}" +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." msgstr "" -msgid "any of the configured servers" +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" msgstr "" -msgid "Exceeded number of tries to forward a request." +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." msgstr "" msgid "Filename is empty" @@ -13185,6 +13177,18 @@ msgstr "" msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + #, python-format msgid "Retrieving CA cert chain failed: %s" msgstr "" @@ -13201,10 +13205,6 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" -#, python-format -msgid "objectclass %s not found" -msgstr "" - #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" @@ -13330,116 +13330,10 @@ msgid "%(count)d automount key matched" msgid_plural "%(count)d automount keys matched" msgstr[0] "" +#, python-format msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -#, fuzzy -#| msgid "Certificates" -msgid "Certificate Profile" -msgstr "証明書" - -#, fuzzy -#| msgid "Certificates" -msgid "Certificate Profiles" -msgstr "証明書" - -msgid "Profile configuration" -msgstr "" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "" @@ -13663,20 +13557,4221 @@ msgstr "" msgid "%i CAs removed." msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "ACI with name \"%s\" not found" +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "名前 \"%s\" の ACI が見つかりませんでした" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "ACI with name \"%s\" not found" +msgid "Auto member rule: %s not found!" +msgstr "名前 \"%s\" の ACI が見つかりませんでした" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "HBAC ルールを検索します。" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "役割に関する情報を表示します。" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +#, fuzzy +#| msgid "Display information about an HBAC service group." +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "HBAC サービスグループに関する情報を表示します。" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "グループ" + +msgid "User Group" +msgstr "ユーザーグループ" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Delete group." +msgid "Deleted group \"%(value)s\"" +msgstr "グループを削除します。" + +#, fuzzy +#| msgid "Delete group." +msgid "privileged group" +msgstr "グループを削除します。" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Not a managed group" +msgstr "新しいグループを作成します。" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Search for HBAC services." +msgid "Search for DNS servers." +msgstr "HBAC サービスを検索します。" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +#, fuzzy +#| msgid "Display information about an HBAC service." +msgid "Display configuration of a DNS server." +msgstr "HBAC サービスに関する情報を表示します。" + +#, fuzzy +#| msgid "Add a new user." +msgid "Add a new DNS server." +msgstr "新しいユーザーを追加します。" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Delete a user." +msgid "Delete a DNS server" +msgstr "ユーザーを削除します。" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "HBAC サービス" + +#, fuzzy +#| msgid "HBAC Service" +msgid "HBAC Services" +msgstr "HBAC サービス" + +msgid "HBAC Service" +msgstr "HBAC サービス" + +#, fuzzy, python-format +#| msgid "Add a new HBAC service group." +msgid "Added HBAC service \"%(value)s\"" +msgstr "新しい HBAC サービスグループを追加します。" + +#, fuzzy, python-format +#| msgid "Delete an HBAC service group." +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "HBAC サービスグループを削除します。" + +#, fuzzy, python-format +#| msgid "Modify an HBAC service group." +msgid "Modified HBAC service \"%(value)s\"" +msgstr "HBAC サービスグループを変更します。" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" + +msgid "HBAC service group" +msgstr "HBAC サービスグループ" + +msgid "HBAC service groups" +msgstr "HBAC サービスグループ" + +msgid "HBAC Service Groups" +msgstr "HBAC サービスグループ" + +msgid "HBAC Service Group" +msgstr "HBAC サービスグループ" + +#, fuzzy, python-format +#| msgid "Add a new HBAC service group." +msgid "Added HBAC service group \"%(value)s\"" +msgstr "新しい HBAC サービスグループを追加します。" + +#, fuzzy, python-format +#| msgid "Delete an HBAC service group." +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "HBAC サービスグループを削除します。" + +#, fuzzy, python-format +#| msgid "Modify an HBAC service group." +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "HBAC サービスグループを変更します。" + +#, fuzzy, python-format +#| msgid "HBAC service group" +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "HBAC サービスグループ" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate mapping data" +msgstr "証明書" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, fuzzy, python-format +#| msgid "can be at most %(maxlength)d bytes" +msgid "can be at most %(len)d characters" +msgstr "大きくても %(maxlength)d バイトである必要があります" + +msgid "Issuer" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject" +msgstr "" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +#, fuzzy +#| msgid "groups" +msgid "netgroups" +msgstr "グループ" + +#, fuzzy +#| msgid "groups" +msgid "Netgroups" +msgstr "グループ" + +#, fuzzy +#| msgid "group" +msgid "Netgroup" +msgstr "グループ" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +#, fuzzy +#| msgid "invalid domain-name: %s" +msgid "invalid attribute name" +msgstr "無効なドメイン名: %s" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Delete an HBAC service group." +msgid "Delete Class of Service entry" +msgstr "HBAC サービスグループを削除します。" + +#, fuzzy +#| msgid "Modify an HBAC service group." +msgid "Modify Class of Service entry" +msgstr "HBAC サービスグループを変更します。" + +msgid "Display Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Search for an HBAC service group." +msgid "Search for Class of Service entry" +msgstr "HBAC サービスグループを検索します。" + +msgid "password policy" +msgstr "パスワードポリシー" + +msgid "password policies" +msgstr "パスワードポリシー" + +msgid "Password Policies" +msgstr "パスワードポリシー" + +#, fuzzy +#| msgid "Password Policies" +msgid "Password Policy" +msgstr "パスワードポリシー" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove member from a named service delegation." +msgstr "HBAC サービスグループからメンバーを削除します。" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +#, fuzzy +#| msgid "users" +msgid "stage users" +msgstr "ユーザー" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate chain" +msgstr "証明書" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject email address" +msgstr "" + +msgid "Subject DNS name" +msgstr "" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +#, fuzzy +#| msgid "IP Address" +msgid "Subject IP Address" +msgstr "IP アドレス" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "フィンガープリント (SHA1)" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "Fingerprint (SHA256)" +msgstr "フィンガープリント (SHA1)" + +msgid "Serial number (hex)" +msgstr "" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +#, fuzzy +#| msgid "Account Status" +msgid "Status" +msgstr "アカウント状態" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "sudo コマンド" + +msgid "sudo commands" +msgstr "sudo コマンド" + +msgid "Sudo Commands" +msgstr "sudo コマンド" + +#, fuzzy, python-format +#| msgid "Sudo Commands" +msgid "Added Sudo Command \"%(value)s\"" +msgstr "sudo コマンド" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" + +#, fuzzy +#| msgid "Sudo Rules" +msgid "" +"\n" +"Sudo Rules\n" +msgstr "sudo ルール" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "sudo ルール" + +msgid "Sudo Rules" +msgstr "sudo ルール" + +msgid "Sudo Rule" +msgstr "sudo ルール" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "ユーザー" + +#, fuzzy +#| msgid "sudo command" +msgid "command" +msgstr "sudo コマンド" + +#, fuzzy +#| msgid "sudo commands" +msgid "commands" +msgstr "sudo コマンド" + +msgid "runAs user" +msgstr "" + +#, fuzzy +#| msgid "users" +msgid "runAs users" +msgstr "ユーザー" + +#, fuzzy +#| msgid "groups" +msgid "group runAs" +msgstr "グループ" + +#, fuzzy +#| msgid "host groups" +msgid "runAs groups" +msgstr "ホストグループ" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +#, fuzzy +#| msgid "sudo command" +msgid "sudo command group" +msgstr "sudo コマンド" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo command groups" +msgstr "sudo コマンド" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust type" +msgstr "" + +#, fuzzy +#| msgid "Account Status" +msgid "Trust status" +msgstr "アカウント状態" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " msgstr "" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +#, fuzzy +#| msgid "Search for roles." +msgid "server roles" +msgstr "役割を検索します。" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "役割" + +msgid "IPA role name" +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +msgid "Vault configuration" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Profile" +msgstr "証明書" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Profiles" +msgstr "証明書" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "ホストグループ" + +msgid "Host Group" +msgstr "ホストグループ" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "host group" +msgid "hostgroup" +msgstr "ホストグループ" + +#, fuzzy +#| msgid "host group" +msgid "privileged hostgroup" +msgstr "ホストグループ" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +#, fuzzy +#| msgid "Kerberos Key" +msgid "Kerberos Ticket Policy" +msgstr "Kerberos キー" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +#, fuzzy +#| msgid "Options" +msgid "locations" +msgstr "オプション" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +msgid "Location name" +msgstr "" + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +msgid "Servers" +msgstr "" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +#, fuzzy +#| msgid "Add a new host." +msgid "Add a new IPA location." +msgstr "新しいホストを追加します。" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Delete an HBAC rule." +msgid "Delete an IPA location." +msgstr "HBAC ルールを削除します。" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "HBAC Service" +msgid "IPA Server" +msgstr "HBAC サービス" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Modify information about an IPA location." +msgstr "役割に関する情報を表示します。" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Search for hosts." +msgid "Search for IPA locations." +msgstr "ホストを検索します。" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about an IPA location." +msgstr "役割に関する情報を表示します。" + +msgid "Servers in location" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Disable a user account." +msgid "Disabled user account \"%(value)s\"" +msgstr "ユーザーアカウントを無効化します。" + +#, fuzzy, python-format +#| msgid "Enable a user account." +msgid "Enabled user account \"%(value)s\"" +msgstr "ユーザーアカウントを有効化します。" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +#, fuzzy +#| msgid "URL" +msgid "URI" +msgstr "URL" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" + +msgid "A list of ACI values" +msgstr "ACI 値の一覧" + +#, fuzzy +#| msgid "" +#| "at least one of: type, filter, subtree, targetgroup, attrs or memberof " +#| "are required" +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" +"少なくとも type, filter, subtree, targetgroup, attrs または memberof のどれか" +"が必要です" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"少なくとも type, filter, subtree, targetgroup, attrs または memberof のどれか" +"が必要です" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "グループ '%s' が存在しません" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "名前 \"%s\" の ACI が見つかりませんでした" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "ACI" + +#, fuzzy +#| msgid "ACIs" +msgid "ACI" +msgstr "ACI" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "A list of ACI values" +msgid "Deleted ACI \"%(value)s\"" +msgstr "ACI 値の一覧" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" msgstr "" msgid "" @@ -14226,9 +18321,6 @@ msgstr "" msgid "Managedby permission" msgstr "" -msgid "DNS is not configured" -msgstr "" - msgid "cannot be used when a zone is specified" msgstr "" @@ -14452,1376 +18544,570 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, python-brace-format msgid "" -"\n" -"DNS server configuration\n" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." msgstr "" msgid "" "\n" -"Manipulate DNS server configuration\n" +"API Schema\n" msgstr "" msgid "" "\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" +"Provides API introspection capabilities.\n" msgstr "" msgid "" "\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" +" Show user-find details:\n" +" ipa command-show user-find\n" msgstr "" msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" msgstr "" -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." +msgid "Documentation" msgstr "" -msgid "Modify DNS server configuration" +msgid "Exclude from" +msgstr "" + +msgid "Include in" msgstr "" #, python-format -msgid "Modified DNS server \"%(value)s\"" +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Version" +msgstr "権限" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +msgid "Method name" +msgstr "" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a command." +msgstr "役割に関する情報を表示します。" + +#, fuzzy +#| msgid "Search for hosts." +msgid "Search for commands." +msgstr "ホストを検索します。" + +msgid "Return command defaults" +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a class." +msgstr "役割に関する情報を表示します。" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for classes." +msgstr "役割を検索します。" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a help topic." +msgstr "役割に関する情報を表示します。" + +#, fuzzy +#| msgid "Search for hosts." +msgid "Search for help topics." +msgstr "ホストを検索します。" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "CLI name" +msgstr "ACI 名" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +#, fuzzy +#| msgid "Default host group" +msgid "Default from" +msgstr "標準のホストグループ" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +#, fuzzy +#| msgid "host group" +msgid "Option group" +msgstr "ホストグループ" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a command parameter." +msgstr "役割に関する情報を表示します。" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search command parameters." +msgstr "役割を検索します。" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a command output." +msgstr "役割に関する情報を表示します。" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for command outputs." +msgstr "グループを検索します。" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +#, fuzzy +#| msgid "HBAC service groups" +msgid "Member service groups" +msgstr "HBAC サービスグループ" + +#, fuzzy +#| msgid "HBAC service groups" +msgid "Member HBAC service groups" +msgstr "HBAC サービスグループ" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" msgstr "" #, fuzzy #| msgid "Search for HBAC services." -msgid "Search for DNS servers." +msgid "Indirect Member HBAC service" msgstr "HBAC サービスを検索します。" -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - #, fuzzy -#| msgid "Display information about an HBAC service." -msgid "Display configuration of a DNS server." -msgstr "HBAC サービスに関する情報を表示します。" +#| msgid "Add members to an HBAC service group." +msgid "Indirect Member HBAC service group" +msgstr "HBAC サービスグループにメンバーを追加します。" -#, fuzzy -#| msgid "Add a new user." -msgid "Add a new DNS server." -msgstr "新しいユーザーを追加します。" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" +msgid "Invalid format. Should be name=value" msgstr "" -#, fuzzy -#| msgid "Delete a user." -msgid "Delete a DNS server" -msgstr "ユーザーを削除します。" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" +msgid "An IPA master host cannot be deleted or disabled" msgstr "" -msgid "REST API is not logged in." +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" msgstr "" #, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "HBAC サービス" - -#, fuzzy -#| msgid "HBAC Service" -msgid "HBAC Services" -msgstr "HBAC サービス" - -msgid "HBAC Service" -msgstr "HBAC サービス" - -#, fuzzy, python-format -#| msgid "Add a new HBAC service group." -msgid "Added HBAC service \"%(value)s\"" -msgstr "新しい HBAC サービスグループを追加します。" - -#, fuzzy, python-format -#| msgid "Delete an HBAC service group." -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "HBAC サービスグループを削除します。" - -#, fuzzy, python-format -#| msgid "Modify an HBAC service group." -msgid "Modified HBAC service \"%(value)s\"" -msgstr "HBAC サービスグループを変更します。" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" - -msgid "HBAC service group" -msgstr "HBAC サービスグループ" - -msgid "HBAC service groups" -msgstr "HBAC サービスグループ" - -msgid "HBAC Service Groups" -msgstr "HBAC サービスグループ" - -msgid "HBAC Service Group" -msgstr "HBAC サービスグループ" - -#, fuzzy, python-format -#| msgid "Add a new HBAC service group." -msgid "Added HBAC service group \"%(value)s\"" -msgstr "新しい HBAC サービスグループを追加します。" - -#, fuzzy, python-format -#| msgid "Delete an HBAC service group." -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "HBAC サービスグループを削除します。" - -#, fuzzy, python-format -#| msgid "Modify an HBAC service group." -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "HBAC サービスグループを変更します。" - -#, fuzzy, python-format -#| msgid "HBAC service group" -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "HBAC サービスグループ" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -#, fuzzy -#| msgid "users" -msgid "stage users" -msgstr "ユーザー" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, fuzzy, python-format -#| msgid "can be at most %(maxlength)d bytes" -msgid "can be at most %(len)d characters" -msgstr "大きくても %(maxlength)d バイトである必要があります" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" +msgid "container entry (%(container)s) not found" msgstr "" #, python-format -msgid "Modified stage user \"%(value)s\"" +msgid "%(parent)s: %(oname)s not found" msgstr "" #, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" +msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "" #, python-format -msgid "Entry has no '%(attribute)s'" +msgid "attribute \"%(attribute)s\" not allowed" msgstr "" #, python-format -msgid "active user with name \"%(user)s\" already exists" +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" msgstr "" #, python-format -msgid "Stage user %s activated" +msgid "Rename the %(ldap_obj_name)s object" msgstr "" -msgid "Add one or more certificates to the stageuser entry" +msgid "the entry was deleted while being modified" msgstr "" #, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" +msgid "%s" msgstr "" #, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" +msgid "%s to add" msgstr "" #, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" +msgid "%s to remove" msgstr "" #, python-format msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "ホストグループ" - -msgid "Host Group" -msgstr "ホストグループ" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." msgstr "" #, python-format msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." msgstr "" #, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -#, fuzzy -#| msgid "host group" -msgid "hostgroup" -msgstr "ホストグループ" - -#, fuzzy -#| msgid "host group" -msgid "privileged hostgroup" -msgstr "ホストグループ" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" +msgid "added attribute value to entry %(value)s" msgstr "" #, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -msgid "Vault configuration" -msgstr "" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -#, fuzzy -#| msgid "groups" -msgid "netgroups" -msgstr "グループ" - -#, fuzzy -#| msgid "groups" -msgid "Netgroups" -msgstr "グループ" - -#, fuzzy -#| msgid "group" -msgid "Netgroup" -msgstr "グループ" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -#, fuzzy -#| msgid "invalid domain-name: %s" -msgid "invalid attribute name" -msgstr "無効なドメイン名: %s" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" - -msgid "A list of ACI values" -msgstr "ACI 値の一覧" - -#, fuzzy -#| msgid "" -#| "at least one of: type, filter, subtree, targetgroup, attrs or memberof " -#| "are required" -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" -"少なくとも type, filter, subtree, targetgroup, attrs または memberof のどれか" -"が必要です" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" -"少なくとも type, filter, subtree, targetgroup, attrs または memberof のどれか" -"が必要です" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "グループ '%s' が存在しません" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "名前 \"%s\" の ACI が見つかりませんでした" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "ACI" - -#, fuzzy -#| msgid "ACIs" -msgid "ACI" -msgstr "ACI" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "A list of ACI values" -msgid "Deleted ACI \"%(value)s\"" -msgstr "ACI 値の一覧" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -#, fuzzy -#| msgid "must be at least %(minvalue)d" -msgid "must be at least 10" -msgstr "少なくとも %(minvalue)d である必要があります" - -msgid "configuration options" -msgstr "" - -msgid "Configuration" -msgstr "" - -msgid "Maximum hostname length" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" +msgid "removed attribute values from entry %(value)s" msgstr "" -msgid "IPA master capable of PKINIT" +msgid "one or more values to remove" msgstr "" -msgid "IPA master which can process PKINIT requests" +msgid "The deny type has been deprecated." msgstr "" #, fuzzy #| msgid "HBAC services" -msgid "IPA CA servers" +msgid "HBAC rules" msgstr "HBAC サービス" -msgid "IPA servers configured as certificate authority" +#, fuzzy +#| msgid "Rules" +msgid "HBAC Rules" +msgstr "ルール" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" msgstr "" -msgid "Hidden IPA CA servers" +#, fuzzy, python-format +#| msgid "Delete an HBAC rule." +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "HBAC ルールを削除します。" + +#, fuzzy, python-format +#| msgid "Modify an HBAC rule." +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "HBAC ルールを変更します。" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" + +#, fuzzy, python-format +#| msgid "Enable an HBAC rule." +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "HBAC ルールを有効化します。" + +#, fuzzy, python-format +#| msgid "Disable an HBAC rule." +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "HBAC ルールを無効化します。" + +msgid "Access time" msgstr "" -msgid "Hidden IPA servers configured as certificate authority" +msgid "Add source hosts and hostgroups to an HBAC rule." msgstr "" -msgid "IPA CA renewal master" +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" -msgid "Renewal master for IPA certificate authority" +msgid "Unresolved rules in --rules" msgstr "" -msgid "IPA servers configured as key recovery agent" +#, python-format +msgid "Access granted: %s" msgstr "" -msgid "Hidden IPA KRA servers" +msgid "ID View" msgstr "" -msgid "Hidden IPA servers configured as key recovery agent" +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" msgstr "" msgid "Domain resolution order" @@ -15830,235 +19116,183 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, fuzzy, python-format -#| msgid "invalid domain-name: %s" -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "無効なドメイン名: %s" - #, python-format -msgid "Server has no information about domain '%(domain)s'" +msgid "Added ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -#, fuzzy -#| msgid "Group '%s' does not exist" -msgid "The group doesn't exist" -msgstr "グループ '%s' が存在しません" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" +msgid "Deleted ID View \"%(value)s\"" msgstr "" #, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" +msgid "Modified an ID View \"%(value)s\"" msgstr "" #, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "グループ" - -msgid "User Group" -msgstr "ユーザーグループ" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -#, fuzzy, python-format -#| msgid "Delete group." -msgid "Deleted group \"%(value)s\"" -msgstr "グループを削除します。" - -#, fuzzy -#| msgid "Delete group." -msgid "privileged group" -msgstr "グループを削除します。" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" msgstr[0] "" -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgid "Default Trust View cannot be applied on hosts" msgstr "" -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" msgstr "" #, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "ID View applied to %i host." msgstr "" -msgid "not allowed to modify user entries" +#, python-format +msgid "ID View applied to %i hosts." msgstr "" -msgid "not allowed to modify group entries" +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" msgstr "" #, fuzzy -#| msgid "Create a new group." -msgid "Not a managed group" -msgstr "新しいグループを作成します。" +#| msgid "Add a new HBAC service." +msgid "Add a new ID override." +msgstr "新しい HBAC サービスを追加します。" -msgid "Add users that can manage members of this group." +#, python-format +msgid "Added ID override \"%(value)s\"" msgstr "" -msgid "Remove users that can manage members of this group." +#, fuzzy +#| msgid "Delete an HBAC rule." +msgid "Delete an ID override." +msgstr "HBAC ルールを削除します。" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" msgstr "" +#, fuzzy +#| msgid "Modify an HBAC service." +msgid "Modify an ID override." +msgstr "HBAC サービスを変更します。" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +#, fuzzy +#| msgid "Search for an HBAC service group." +msgid "Search for an ID override." +msgstr "HBAC サービスグループを検索します。" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" + +#, fuzzy +#| msgid "Display information about an HBAC service." +msgid "Display information about an ID override." +msgstr "HBAC サービスに関する情報を表示します。" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" + #, fuzzy #| msgid "Permissions" msgid "" @@ -16286,1281 +19520,35 @@ msgid "%(count)d permission matched" msgid_plural "%(count)d permissions matched" msgstr[0] "" -msgid "" -"\n" -"OTP Tokens\n" +msgid "delegation" msgstr "" -msgid "" -"\n" -"Manage OTP tokens.\n" +msgid "delegations" msgstr "" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" +msgid "Delegations" msgstr "" -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -#, fuzzy -#| msgid "URL" -msgid "URI" -msgstr "URL" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" +msgid "Delegation" msgstr "" #, python-format -msgid "Deleted OTP token \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" msgstr "" #, python-format -msgid "Modified OTP token \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "" -#, fuzzy -#| msgid "Sudo Rules" -msgid "" -"\n" -"Sudo Rules\n" -msgstr "sudo ルール" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "sudo ルール" - -msgid "Sudo Rules" -msgstr "sudo ルール" - -msgid "Sudo Rule" -msgstr "sudo ルール" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "ユーザー" - -#, fuzzy -#| msgid "sudo command" -msgid "command" -msgstr "sudo コマンド" - -#, fuzzy -#| msgid "sudo commands" -msgid "commands" -msgstr "sudo コマンド" - -msgid "runAs user" -msgstr "" - -#, fuzzy -#| msgid "users" -msgid "runAs users" -msgstr "ユーザー" - -#, fuzzy -#| msgid "groups" -msgid "group runAs" -msgstr "グループ" - -#, fuzzy -#| msgid "host groups" -msgid "runAs groups" -msgstr "ホストグループ" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -msgid "sudo command" -msgstr "sudo コマンド" - -msgid "sudo commands" -msgstr "sudo コマンド" - -msgid "Sudo Commands" -msgstr "sudo コマンド" - -#, fuzzy, python-format -#| msgid "Sudo Commands" -msgid "Added Sudo Command \"%(value)s\"" -msgstr "sudo コマンド" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -#, fuzzy -#| msgid "sudo command" -msgid "sudo command group" -msgstr "sudo コマンド" - -#, fuzzy -#| msgid "sudo commands" -msgid "sudo command groups" -msgstr "sudo コマンド" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -#, fuzzy -#| msgid "Kerberos Key" -msgid "Kerberos Ticket Policy" -msgstr "Kerberos キー" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -#, fuzzy -#| msgid "Options" -msgid "locations" -msgstr "オプション" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -msgid "Location name" -msgstr "" - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -msgid "Servers" -msgstr "" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -#, fuzzy -#| msgid "Add a new host." -msgid "Add a new IPA location." -msgstr "新しいホストを追加します。" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -#, fuzzy -#| msgid "Delete an HBAC rule." -msgid "Delete an IPA location." -msgstr "HBAC ルールを削除します。" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -#, fuzzy -#| msgid "HBAC Service" -msgid "IPA Server" -msgstr "HBAC サービス" - -#, fuzzy -#| msgid "Display information about a role." -msgid "Modify information about an IPA location." -msgstr "役割に関する情報を表示します。" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -#, fuzzy -#| msgid "Search for hosts." -msgid "Search for IPA locations." -msgstr "ホストを検索します。" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" - -#, fuzzy -#| msgid "Display information about a role." -msgid "Display information about an IPA location." -msgstr "役割に関する情報を表示します。" - -msgid "Servers in location" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -#| msgid "Permissions" -msgid "Version" -msgstr "権限" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -msgid "Method name" -msgstr "" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -#, fuzzy -#| msgid "Display information about a role." -msgid "Display information about a command." -msgstr "役割に関する情報を表示します。" - -#, fuzzy -#| msgid "Search for hosts." -msgid "Search for commands." -msgstr "ホストを検索します。" - -msgid "Return command defaults" -msgstr "" - -#, fuzzy -#| msgid "Display information about a role." -msgid "Display information about a class." -msgstr "役割に関する情報を表示します。" - -#, fuzzy -#| msgid "Search for roles." -msgid "Search for classes." -msgstr "役割を検索します。" - -#, fuzzy -#| msgid "Display information about a role." -msgid "Display information about a help topic." -msgstr "役割に関する情報を表示します。" - -#, fuzzy -#| msgid "Search for hosts." -msgid "Search for help topics." -msgstr "ホストを検索します。" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -#| msgid "ACI name" -msgid "CLI name" -msgstr "ACI 名" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -#, fuzzy -#| msgid "Default host group" -msgid "Default from" -msgstr "標準のホストグループ" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -#, fuzzy -#| msgid "host group" -msgid "Option group" -msgstr "ホストグループ" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -#, fuzzy -#| msgid "Display information about a role." -msgid "Display information about a command parameter." -msgstr "役割に関する情報を表示します。" - -#, fuzzy -#| msgid "Search for roles." -msgid "Search command parameters." -msgstr "役割を検索します。" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -#, fuzzy -#| msgid "Display information about a role." -msgid "Display information about a command output." -msgstr "役割に関する情報を表示します。" - -#, fuzzy -#| msgid "Search for groups." -msgid "Search for command outputs." -msgstr "グループを検索します。" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" - -#, fuzzy -#| msgid "Modify a role." -msgid "" -"Modify ID range.\n" -"\n" -msgstr "役割を変更します。" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -#, fuzzy -#| msgid "Permissions" -msgid "Self Service Permissions" -msgstr "権限" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -#, fuzzy -#| msgid "Search for roles." -msgid "server roles" -msgstr "役割を検索します。" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "役割" - -msgid "IPA role name" -msgstr "" - msgid "HBAC rule and local members cannot both be set" msgstr "" @@ -17624,990 +19612,199 @@ msgstr "" msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "" -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - #, fuzzy -#| msgid "Certificates" -msgid "Certificate chain" -msgstr "証明書" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "Subject" -msgstr "" - -msgid "Subject email address" -msgstr "" - -msgid "Subject DNS name" -msgstr "" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -#, fuzzy -#| msgid "IP Address" -msgid "Subject IP Address" -msgstr "IP アドレス" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -msgid "Issuer" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "フィンガープリント (SHA1)" - -#, fuzzy -#| msgid "Fingerprint (SHA1)" -msgid "Fingerprint (SHA256)" -msgstr "フィンガープリント (SHA1)" - -msgid "Serial number (hex)" -msgstr "" - -msgid "Request status" -msgstr "" - -msgid "Include certificate chain in output" -msgstr "" - +#| msgid "HBAC services" msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -#, fuzzy -#| msgid "Account Status" -msgid "Status" -msgstr "アカウント状態" - -msgid "Revoked" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -#, fuzzy -#| msgid "Add a new HBAC service." -msgid "Add a new ID override." -msgstr "新しい HBAC サービスを追加します。" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -#, fuzzy -#| msgid "Delete an HBAC rule." -msgid "Delete an ID override." -msgstr "HBAC ルールを削除します。" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -#, fuzzy -#| msgid "Modify an HBAC service." -msgid "Modify an ID override." -msgstr "HBAC サービスを変更します。" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -#, fuzzy -#| msgid "Search for an HBAC service group." -msgid "Search for an ID override." -msgstr "HBAC サービスグループを検索します。" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" +"\n" +"IPA servers\n" +msgstr "HBAC サービス" #, fuzzy #| msgid "Display information about an HBAC service." -msgid "Display information about an ID override." +msgid "" +"\n" +"Get information about installed IPA servers.\n" msgstr "HBAC サービスに関する情報を表示します。" -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" - msgid "" "\n" -"Auto Membership Rule.\n" +" Find all servers:\n" +" ipa server-find\n" msgstr "" msgid "" "\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" msgstr "" -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, fuzzy, python-format -#| msgid "ACI with name \"%s\" not found" -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "名前 \"%s\" の ACI が見つかりませんでした" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "ACI with name \"%s\" not found" -msgid "Auto member rule: %s not found!" -msgstr "名前 \"%s\" の ACI が見つかりませんでした" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" +msgid "server" msgstr "" #, fuzzy -#| msgid "Search for HBAC rules." -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "HBAC ルールを検索します。" +#| msgid "HBAC services" +msgid "servers" +msgstr "HBAC サービス" + +#, fuzzy +#| msgid "HBAC Service" +msgid "IPA Servers" +msgstr "HBAC サービス" + +msgid "Server location" +msgstr "" + +msgid "Service weight" +msgstr "" + +#, fuzzy +#| msgid "Search for HBAC services." +msgid "Weight for server services" +msgstr "HBAC サービスを検索します。" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" +msgstr "" + +#, fuzzy +#| msgid "Display information about an HBAC service." +msgid "Modify information about an IPA server." +msgstr "HBAC サービスに関する情報を表示します。" #, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" +msgid "Modified IPA server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" msgstr[0] "" -#, fuzzy -#| msgid "Display information about a role." -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "役割に関する情報を表示します。" +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" msgstr "" #, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" #, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -#, fuzzy -#| msgid "Display information about an HBAC service group." -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "HBAC サービスグループに関する情報を表示します。" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" msgstr "" #, python-format -msgid "Task DN = '%s'" +msgid "Failed to remove server %(master)s from server list: %(err)s" msgstr "" -msgid "Automember" +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +msgid "Server state" +msgstr "" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." msgstr "" msgid "" "\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" +"Session Support for IPA\n" msgstr "" msgid "" @@ -18793,6 +19990,859 @@ msgstr "HBAC ルールを有効化します。" msgid "Enabled CA \"%(value)s\"" msgstr "" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" + +#, fuzzy +#| msgid "Display information about an HBAC service group." +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "HBAC サービスグループに関する情報を表示します。" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "User Options" +msgid "User logins" +msgstr "ユーザーオプション" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 10" +msgstr "少なくとも %(minvalue)d である必要があります" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#, fuzzy +#| msgid "HBAC services" +msgid "IPA CA servers" +msgstr "HBAC サービス" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, fuzzy, python-format +#| msgid "invalid domain-name: %s" +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "無効なドメイン名: %s" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +#, fuzzy +#| msgid "Group '%s' does not exist" +msgid "The group doesn't exist" +msgstr "グループ '%s' が存在しません" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "ホスト" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" + +#, fuzzy +#| msgid "Modify a role." +msgid "" +"Modify ID range.\n" +"\n" +msgstr "役割を変更します。" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + msgid "Internationalization messages" msgstr "" @@ -19918,12 +21968,6 @@ msgstr "証明書" msgid "REVOKED" msgstr "" -msgid "Serial Number" -msgstr "" - -msgid "Serial Number (hex)" -msgstr "" - #, fuzzy #| msgid "Fingerprint" msgid "SHA1 Fingerprint" @@ -19992,11 +22036,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -#, fuzzy -#| msgid "Certificates" -msgid "Certificate mapping data" -msgstr "証明書" - msgid "Configuration string" msgstr "" @@ -20788,9 +22827,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "ホスト" - #, fuzzy #| msgid "Group Options" msgid "Netgroup Settings" @@ -20914,11 +22950,6 @@ msgstr "" msgid "Add password policy" msgstr "パスワードポリシー" -#, fuzzy -#| msgid "Password Policies" -msgid "Password Policy" -msgstr "パスワードポリシー" - #, fuzzy #| msgid "password policies" msgid "Remove password policies" @@ -21414,17 +23445,6 @@ msgstr "" msgid "Remove domains" msgstr "" -msgid "Trust direction" -msgstr "" - -#, fuzzy -#| msgid "Account Status" -msgid "Trust status" -msgstr "アカウント状態" - -msgid "Trust type" -msgstr "" - msgid "Alternative UPN suffixes" msgstr "" @@ -21983,9 +24003,6 @@ msgstr "sudo ルール" msgid "Topology" msgstr "" -msgid "Trusts" -msgstr "" - msgid "True" msgstr "" @@ -22096,1412 +24113,6 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" - -#, fuzzy -#| msgid "HBAC services" -msgid "" -"\n" -"IPA servers\n" -msgstr "HBAC サービス" - -#, fuzzy -#| msgid "Display information about an HBAC service." -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "HBAC サービスに関する情報を表示します。" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -#, fuzzy -#| msgid "HBAC services" -msgid "servers" -msgstr "HBAC サービス" - -#, fuzzy -#| msgid "HBAC Service" -msgid "IPA Servers" -msgstr "HBAC サービス" - -msgid "Server location" -msgstr "" - -msgid "Service weight" -msgstr "" - -#, fuzzy -#| msgid "Search for HBAC services." -msgid "Weight for server services" -msgstr "HBAC サービスを検索します。" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -#, fuzzy -#| msgid "Display information about an HBAC service." -msgid "Modify information about an IPA server." -msgstr "HBAC サービスに関する情報を表示します。" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -msgid "Server state" -msgstr "" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -#, fuzzy -#| msgid "Remove members from an HBAC service group." -msgid "Remove member from a named service delegation." -msgstr "HBAC サービスグループからメンバーを削除します。" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -#, fuzzy -#| msgid "Delete an HBAC service group." -msgid "Delete Class of Service entry" -msgstr "HBAC サービスグループを削除します。" - -#, fuzzy -#| msgid "Modify an HBAC service group." -msgid "Modify Class of Service entry" -msgstr "HBAC サービスグループを変更します。" - -msgid "Display Class of Service entry" -msgstr "" - -#, fuzzy -#| msgid "Search for an HBAC service group." -msgid "Search for Class of Service entry" -msgstr "HBAC サービスグループを検索します。" - -msgid "password policy" -msgstr "パスワードポリシー" - -msgid "password policies" -msgstr "パスワードポリシー" - -msgid "Password Policies" -msgstr "パスワードポリシー" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" - -#, fuzzy -#| msgid "Display information about an HBAC service group." -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "HBAC サービスグループに関する情報を表示します。" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#, fuzzy -#| msgid "User Options" -msgid "User logins" -msgstr "ユーザーオプション" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -23676,644 +24287,37 @@ msgstr "HBAC サービスグループからメンバーを削除します。" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "" -msgid "delegation" +msgid "self service permission" msgstr "" -msgid "delegations" +msgid "self service permissions" msgstr "" -msgid "Delegations" -msgstr "" +#, fuzzy +#| msgid "Permissions" +msgid "Self Service Permissions" +msgstr "権限" -msgid "Delegation" +msgid "Self Service Permission" msgstr "" #, python-format -msgid "Added delegation \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted delegation \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "Modified delegation \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" msgstr[0] "" -msgid "The deny type has been deprecated." -msgstr "" - -#, fuzzy -#| msgid "HBAC services" -msgid "HBAC rules" -msgstr "HBAC サービス" - -#, fuzzy -#| msgid "Rules" -msgid "HBAC Rules" -msgstr "ルール" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "Delete an HBAC rule." -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "HBAC ルールを削除します。" - -#, fuzzy, python-format -#| msgid "Modify an HBAC rule." -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "HBAC ルールを変更します。" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" - -#, fuzzy, python-format -#| msgid "Enable an HBAC rule." -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "HBAC ルールを有効化します。" - -#, fuzzy, python-format -#| msgid "Disable an HBAC rule." -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "HBAC ルールを無効化します。" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -#, fuzzy -#| msgid "HBAC service groups" -msgid "Member service groups" -msgstr "HBAC サービスグループ" - -#, fuzzy -#| msgid "HBAC service groups" -msgid "Member HBAC service groups" -msgstr "HBAC サービスグループ" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -#, fuzzy -#| msgid "Search for HBAC services." -msgid "Indirect Member HBAC service" -msgstr "HBAC サービスを検索します。" - -#, fuzzy -#| msgid "Add members to an HBAC service group." -msgid "Indirect Member HBAC service group" -msgstr "HBAC サービスグループにメンバーを追加します。" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "Disable a user account." -msgid "Disabled user account \"%(value)s\"" -msgstr "ユーザーアカウントを無効化します。" - -#, fuzzy, python-format -#| msgid "Enable a user account." -msgid "Enabled user account \"%(value)s\"" -msgstr "ユーザーアカウントを有効化します。" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - #, python-format msgid "all masters must have %(role)s role enabled" msgstr "" @@ -24495,25 +24499,6 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - #, fuzzy #| msgid "must be an integer" msgid "Request must be a dict" @@ -24539,6 +24524,25 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #, python-format msgid "must equal %r" msgstr "" diff --git a/po/kn.po b/po/kn.po index 5bc0bcb4c..1dd30195e 100644 --- a/po/kn.po +++ b/po/kn.po @@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Kannada\n" @@ -18,6 +18,107 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n!=1)\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Service principal" +msgid "Removing principal %s\n" +msgstr "Service principal" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Kerberos principal" +msgid "Unable to parse principal\n" +msgstr "Kerberos principal" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +#, fuzzy +#| msgid "Mount information" +msgid "Print debugging information" +msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Kerberos Service Principal Name" +msgstr "Kerberos principal" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "Realm name" +msgstr "ನಿಯಮದ ಹೆಸರು" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + #, c-format msgid "Out of memory!\n" msgstr "" @@ -279,107 +380,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -#| msgid "Service principal" -msgid "Removing principal %s\n" -msgstr "Service principal" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, fuzzy, c-format -#| msgid "Kerberos principal" -msgid "Unable to parse principal\n" -msgstr "Kerberos principal" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -#, fuzzy -#| msgid "Mount information" -msgid "Print debugging information" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -#, fuzzy -#| msgid "Kerberos principal" -msgid "Kerberos Service Principal Name" -msgstr "Kerberos principal" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -#, fuzzy -#| msgid "Rule name" -msgid "Realm name" -msgstr "ನಿಯಮದ ಹೆಸರು" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - #, c-format msgid "cannot open configuration file %s\n" msgstr "" @@ -9442,6 +9442,105 @@ msgid "" "Establish bi-directional trust. By default trust is inbound one-way only." msgstr "" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +#| msgid "Group description" +msgid "Profile description" +msgstr "ಗುಂಪಿನ ವಿವರಣೆ" + +#, fuzzy +#| msgid "A description of this role-group" +msgid "Brief description of this profile" +msgstr "ಈ ರೋಲ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "" "\n" "ID ranges\n" @@ -9654,105 +9753,6 @@ msgid "" " " msgstr "" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -#| msgid "Group description" -msgid "Profile description" -msgstr "ಗುಂಪಿನ ವಿವರಣೆ" - -#, fuzzy -#| msgid "A description of this role-group" -msgid "Brief description of this profile" -msgstr "ಈ ರೋಲ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - msgid "Remove users that can manage this token." msgstr "" @@ -12011,162 +12011,20 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "Additional instructions:" -msgstr "" +msgid "Results are truncated, try a more specific search" +msgstr "ಫಲಿತಾಂಶಗಳು ಕತ್ತರಿಸಲ್ಪಟ್ಟಿವೆ, ಹೆಚ್ಚ್ಹು ನಿರ್ದಿಷ್ಟವಾದ ಶೋಧನೆ ಪ್ರಯತ್ನಿಸಿ" #, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" +msgid "Unknown option: %(option)s" msgstr "" -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." +msgid "Client version. Used to determine if server will accept request." msgstr "" -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" +msgid "any of the configured servers" msgstr "" -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "unknown error %(code)d from %(server)s: %(error)s" -msgid "DNS server %(server)s: %(error)s." -msgstr "%(server)s ಸರ್ವರ್‌ನಿಂದ ಅಜ್ಞಾತ ದೋಷ %(code)d: %(error)s" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." +msgid "Exceeded number of tries to forward a request." msgstr "" #, python-format @@ -12223,6 +12081,158 @@ msgstr "" msgid "No file to read" msgstr "" +msgid "incorrect type" +msgstr "ಸರಿಯಲ್ಲದ ಬಗೆ" + +msgid "Only one value is allowed" +msgstr "ಕೇವಲ ಒಂದು ಬೆಲೆ ಮಾತ್ರ ಅನುಮೋದಿಸಲಾಗಿದೆ" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "ನಿಜ (True) ಅಥವಾ ಸುಳ್ಳು (False) ಆಗಿರಲೇಬೇಕು" + +msgid "must be an integer" +msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxvalue)d ಆಗಿರಬಹುದು" + +msgid "must be a decimal number" +msgstr "ದಶಾಂಶ ಸಂಖ್ಯೆ ಆಗಿರಲೇಬೇಕು" + +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)d" +msgid "must be at least %(minvalue)s" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" + +#, fuzzy, python-format +#| msgid "can be at most %(maxvalue)d" +msgid "can be at most %(maxvalue)s" +msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxvalue)d ಆಗಿರಬಹುದು" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "ನಮೂನೆ \"%(pattern)s\" ಹೊಂದಾಣಿಕೆಯಾಗಲೇಬೇಕು" + +msgid "must be binary data" +msgstr "ಬೈನರಿ ಡಾಟಾ ಆಗಿರಲೇಬೇಕು" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minlength)d ಬೈಟ್ಸ್ ಆಗಿರಲೇಬೇಕು" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಬೈಟ್ಸ್ ಆಗಿರಬಹುದು" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "ನಿಖರವಾಗಿ %(length)d ಬೈಟ್ಸ್ ಆಗಿರಲೇಬೇಕು" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be a certificate" +msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" + +#, fuzzy +#| msgid "Failure decoding Certificate Signing Request: %s" +msgid "must be a certificate signing request" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ಸಹಿಯ ಕೋರಿಕೆಯ ಡಿಕೋಡಿಂಗ್‌ನ ವಿಫಲತೆ: %s" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ಸಹಿಯ ಕೋರಿಕೆಯ ಡಿಕೋಡಿಂಗ್‌ನ ವಿಫಲತೆ: %s" + +msgid "must be Unicode text" +msgstr "ಯುನಿಕೋಡ್ ಪಠ್ಯ ಆಗಿರಲೇಬೇಕು" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minlength)d ಅಕ್ಷರಗಳು ಇರಲೇಬೇಕು" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಅಕ್ಷರಗಳು ಇರಬಹುದು" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "ನಿಖರವಾಗಿ %(length)d ಅಕ್ಷರಗಳು ಇರಲೇಬೇಕು" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)d" +msgid "must be '%(value)s'" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" + +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)d" +msgid "must be one of %(values)s" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be datetime value" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be DNS name" +msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be absolute" +msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be relative" +msgstr "ನಿಜ (True) ಅಥವಾ ಸುಳ್ಳು (False) ಆಗಿರಲೇಬೇಕು" + +#, fuzzy +#| msgid "must be binary data" +msgid "must be dictionary" +msgstr "ಬೈನರಿ ಡಾಟಾ ಆಗಿರಲೇಬೇಕು" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "must be Kerberos principal" +msgstr "Kerberos principal" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +#, fuzzy +#| msgid "Service principal" +msgid "Service principal is required" +msgstr "Service principal" + msgid "A dictionary representing an LDAP entry" msgstr "" @@ -12232,16 +12242,6 @@ msgstr "" msgid "All commands should at least have a result" msgstr "" -msgid "Results are truncated, try a more specific search" -msgstr "ಫಲಿತಾಂಶಗಳು ಕತ್ತರಿಸಲ್ಪಟ್ಟಿವೆ, ಹೆಚ್ಚ್ಹು ನಿರ್ದಿಷ್ಟವಾದ ಶೋಧನೆ ಪ್ರಯತ್ನಿಸಿ" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" @@ -12614,170 +12614,162 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" -msgid "incorrect type" -msgstr "ಸರಿಯಲ್ಲದ ಬಗೆ" - -msgid "Only one value is allowed" -msgstr "ಕೇವಲ ಒಂದು ಬೆಲೆ ಮಾತ್ರ ಅನುಮೋದಿಸಲಾಗಿದೆ" - -msgid "this option is deprecated" +msgid "Additional instructions:" msgstr "" -msgid "must be True or False" -msgstr "ನಿಜ (True) ಅಥವಾ ಸುಳ್ಳು (False) ಆಗಿರಲೇಬೇಕು" - -msgid "must be an integer" -msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxvalue)d ಆಗಿರಬಹುದು" - -msgid "must be a decimal number" -msgstr "ದಶಾಂಶ ಸಂಖ್ಯೆ ಆಗಿರಲೇಬೇಕು" - -#, fuzzy, python-format -#| msgid "must be at least %(minvalue)d" -msgid "must be at least %(minvalue)s" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" - -#, fuzzy, python-format -#| msgid "can be at most %(maxvalue)d" -msgid "can be at most %(maxvalue)s" -msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxvalue)d ಆಗಿರಬಹುದು" - #, python-format msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." msgstr "" #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "ನಮೂನೆ \"%(pattern)s\" ಹೊಂದಾಣಿಕೆಯಾಗಲೇಬೇಕು" - -msgid "must be binary data" -msgstr "ಬೈನರಿ ಡಾಟಾ ಆಗಿರಲೇಬೇಕು" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minlength)d ಬೈಟ್ಸ್ ಆಗಿರಲೇಬೇಕು" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಬೈಟ್ಸ್ ಆಗಿರಬಹುದು" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "ನಿಖರವಾಗಿ %(length)d ಬೈಟ್ಸ್ ಆಗಿರಲೇಬೇಕು" - -#, fuzzy -#| msgid "must be an integer" -msgid "must be a certificate" -msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" - -#, fuzzy -#| msgid "Failure decoding Certificate Signing Request: %s" -msgid "must be a certificate signing request" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ಸಹಿಯ ಕೋರಿಕೆಯ ಡಿಕೋಡಿಂಗ್‌ನ ವಿಫಲತೆ: %s" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ಸಹಿಯ ಕೋರಿಕೆಯ ಡಿಕೋಡಿಂಗ್‌ನ ವಿಫಲತೆ: %s" - -msgid "must be Unicode text" -msgstr "ಯುನಿಕೋಡ್ ಪಠ್ಯ ಆಗಿರಲೇಬೇಕು" - -msgid "Leading and trailing spaces are not allowed" +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" msgstr "" #, python-format -msgid "must be at least %(minlength)d characters" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minlength)d ಅಕ್ಷರಗಳು ಇರಲೇಬೇಕು" +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" #, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಅಕ್ಷರಗಳು ಇರಬಹುದು" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "ನಿಖರವಾಗಿ %(length)d ಅಕ್ಷರಗಳು ಇರಲೇಬೇಕು" - -#, python-format -msgid "The character %(char)r is not allowed." +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" msgstr "" #, fuzzy, python-format -#| msgid "must be at least %(minvalue)d" -msgid "must be '%(value)s'" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" - -#, fuzzy, python-format -#| msgid "must be at least %(minvalue)d" -msgid "must be one of %(values)s" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" - -#, fuzzy -#| msgid "must be at least %(minvalue)d" -msgid "must be datetime value" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -#, fuzzy -#| msgid "must be an integer" -msgid "must be DNS name" -msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" - -#, fuzzy -#| msgid "must be an integer" -msgid "must be absolute" -msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" - -#, fuzzy -#| msgid "must be True or False" -msgid "must be relative" -msgstr "ನಿಜ (True) ಅಥವಾ ಸುಳ್ಳು (False) ಆಗಿರಲೇಬೇಕು" - -#, fuzzy -#| msgid "must be binary data" -msgid "must be dictionary" -msgstr "ಬೈನರಿ ಡಾಟಾ ಆಗಿರಲೇಬೇಕು" - -#, fuzzy -#| msgid "Kerberos principal" -msgid "must be Kerberos principal" -msgstr "Kerberos principal" +#| msgid "unknown error %(code)d from %(server)s: %(error)s" +msgid "DNS server %(server)s: %(error)s." +msgstr "%(server)s ಸರ್ವರ್‌ನಿಂದ ಅಜ್ಞಾತ ದೋಷ %(code)d: %(error)s" #, python-format -msgid "Malformed principal: '%(value)s'" +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" -#, fuzzy -#| msgid "Service principal" -msgid "Service principal is required" -msgstr "Service principal" - #, python-format -msgid "%(filename)s: file not found" +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." msgstr "" -#, python-brace-format -msgid "Unable to parse option {item}" +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" -msgid "any of the configured servers" +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." msgstr "" -msgid "Exceeded number of tries to forward a request." +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." msgstr "" msgid "Filename is empty" @@ -12884,6 +12876,18 @@ msgstr "" msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + #, python-format msgid "Retrieving CA cert chain failed: %s" msgstr "" @@ -12900,10 +12904,6 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" -#, python-format -msgid "objectclass %s not found" -msgstr "" - #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" @@ -13063,123 +13063,10 @@ msgid_plural "%(count)d automount keys matched" msgstr[0] "" msgstr[1] "" +#, python-format msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -#, fuzzy -#| msgid "Certificate" -msgid "Certificate Profile" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -#, fuzzy -#| msgid "Certificate" -msgid "Certificate Profiles" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "Profile configuration" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Imported profile \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted profile \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy -#| msgid "Certificate operation cannot be completed: %(error)s" -msgid "Certificate profiles cannot be renamed" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ಕಾರ್ಯಾಚರಣೆಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲು ಆಗುತ್ತಿಲ್ಲ: %(error)s" - -msgid "Insufficient privilege to modify a certificate profile." +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "" @@ -13414,22 +13301,4426 @@ msgstr "" msgid "%i CAs removed." msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "ACI with name \"%s\" not found" +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added automember rule \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added condition(s) to \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "ACI with name \"%s\" not found" +msgid "Auto member rule: %s not found!" +msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted hostgroup \"%(value)s\"" +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified automember rule \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted automember rule \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +#| msgid "Groups" +msgid "groups" +msgstr "ಗುಂಪುಗಳು" + +#, fuzzy +#| msgid "User Groups" +msgid "User Group" +msgstr "ಬಳಕೆದಾರರ ಗುಂಪುಗಳು" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy +#| msgid "Target group" +msgid "privileged group" +msgstr "Target ಗುಂಪು" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "DNS Servers" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +msgid "DNS Server" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "DNS Server name" +msgstr "ಸೇವೆಯ ಹೆಸರು" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified DNS server \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Delete a DNS server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "HBAC services" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, fuzzy +#| msgid "Services" +msgid "HBAC Services" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, fuzzy +#| msgid "Services" +msgid "HBAC Service" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "User group" +msgid "HBAC service group" +msgstr "ಬಳಕೆದಾರ ಗುಂಪು" + +#, fuzzy +#| msgid "User group" +msgid "HBAC service groups" +msgstr "ಬಳಕೆದಾರ ಗುಂಪು" + +#, fuzzy +#| msgid "User Groups" +msgid "HBAC Service Groups" +msgstr "ಬಳಕೆದಾರರ ಗುಂಪುಗಳು" + +msgid "HBAC Service Group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be TRUE or FALSE" +msgstr "ನಿಜ (True) ಅಥವಾ ಸುಳ್ಳು (False) ಆಗಿರಲೇಬೇಕು" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +#, fuzzy +#| msgid "Principal name" +msgid "Principal alias" +msgstr "Principal ಹೆಸರು" + +#, fuzzy +#| msgid "User password" +msgid "User password expiration" +msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" + +msgid "SSH public key fingerprint" +msgstr "" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Base-64 encoded user certificate" +msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate mapping data" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +#, fuzzy +#| msgid "Home directory base" +msgid "SMB Home Directory" +msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" + +#, fuzzy +#| msgid "Home directory base" +msgid "SMB Home Directory Drive" +msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, fuzzy, python-format +#| msgid "can be at most %(maxlength)d characters" +msgid "can be at most %(len)d characters" +msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಅಕ್ಷರಗಳು ಇರಬಹುದು" + +msgid "Issuer" +msgstr "" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Issuer of the certificate" +msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" + +msgid "Subject" +msgstr "ವಿಷಯ" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added segment \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted segment \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified segment \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified topology suffix \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +#, fuzzy +#| msgid "LDAP URI" +msgid "Invalid LDAP URI." +msgstr "LDAP URI" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +#, fuzzy +#| msgid "Netgroups" +msgid "netgroups" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" + +msgid "Netgroups" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" + +#, fuzzy +#| msgid "Netgroups" +msgid "Netgroup" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added netgroup \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted netgroup \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified netgroup \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Changed password for \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "invalid port number" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added privilege \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted privilege \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified privilege \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Password" +msgid "password policy" +msgstr "ಗುಪ್ತಪದ" + +msgid "password policies" +msgstr "" + +#, fuzzy +#| msgid "Password" +msgid "Password Policies" +msgstr "ಗುಪ್ತಪದ" + +#, fuzzy +#| msgid "Password" +msgid "Password Policy" +msgstr "ಗುಪ್ತಪದ" + +#, fuzzy +#| msgid "Max renew" +msgid "Max repeat" +msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" + +#, fuzzy +#| msgid "Minimum number of character classes" +msgid "Maximum number of same consecutive characters" +msgstr "ಕನಿಷ್ಟ ಸಂಖ್ಯೆಯ ಕ್ಯಾರಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" + +#, fuzzy +#| msgid "Max renew" +msgid "Max sequence" +msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "ಬಳಕೆದಾರನ ಹೆಸರು" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +#, fuzzy +#| msgid "Maximum password lifetime (in days)" +msgid "Maximum password life must be greater than minimum." +msgstr "ಗುಪ್ತಪದದ ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ (ದಿನಗಳಲ್ಲಿ)" + +#, fuzzy +#| msgid "priority cannot be set on global policy" +msgid "cannot delete global password policy" +msgstr "ಗ್ಲೋಬಲ್ ಪಾಲಿಸಿಯಲ್ಲಿ ಆದ್ಯತೆಯನ್ನು ಸೆಟ್ ಮಾಡಲಾಗುವುದಿಲ್ಲ" + +msgid "priority cannot be set on global policy" +msgstr "ಗ್ಲೋಬಲ್ ಪಾಲಿಸಿಯಲ್ಲಿ ಆದ್ಯತೆಯನ್ನು ಸೆಟ್ ಮಾಡಲಾಗುವುದಿಲ್ಲ" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Member principals" +msgstr "Kerberos principal" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, fuzzy, python-format +#| msgid "Member hosts" +msgid "member %s" +msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್‌ಗಳು" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added service delegation rule \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Users" +msgid "Stage Users" +msgstr "ಬಳಕೆದಾರರು" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +#, fuzzy +#| msgid "Member users" +msgid "stage users" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added stage user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted stage user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified stage user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Activate a stage user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Base-64 encoded certificate." +msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate chain" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "X.509 certificate chain" +msgstr "" + +#, fuzzy +#| msgid "Email address" +msgid "Subject email address" +msgstr "ಇಮೇಲ್ ವಿಳಾಸ" + +#, fuzzy +#| msgid "Subject" +msgid "Subject DNS name" +msgstr "ವಿಷಯ" + +#, fuzzy +#| msgid "Street address" +msgid "Subject X.400 address" +msgstr "ಕೇರಿ ವಿಳಾಸ" + +#, fuzzy +#| msgid "Home directory base" +msgid "Subject directory name" +msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" + +msgid "Subject EDI Party name" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject URI" +msgstr "ವಿಷಯ" + +#, fuzzy +#| msgid "Street address" +msgid "Subject IP Address" +msgstr "ಕೇರಿ ವಿಳಾಸ" + +#, fuzzy +#| msgid "Subject" +msgid "Subject OID" +msgstr "ವಿಷಯ" + +#, fuzzy +#| msgid "Subject" +msgid "Subject UPN" +msgstr "ವಿಷಯ" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Subject Kerberos principal name" +msgstr "Kerberos principal" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial number (hex)" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +msgid "Request status" +msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" + +msgid "Include certificate chain in output" +msgstr "" + +#, fuzzy +#| msgid "automatically add the principal if it doesn't exist" +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "ಸ್ವಯಂಚಾಲಿತವಾಗಿ principal ಸೇರಿಸಿ ಅದು ಅಸ್ತಿತ್ವದಲ್ಲಿ ಇಲ್ಲದಿದ್ದಲ್ಲಿ" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +#, fuzzy +#| msgid "automatically add the principal if it doesn't exist" +msgid "The principal for this request doesn't exist." +msgstr "ಸ್ವಯಂಚಾಲಿತವಾಗಿ principal ಸೇರಿಸಿ ಅದು ಅಸ್ತಿತ್ವದಲ್ಲಿ ಇಲ್ಲದಿದ್ದಲ್ಲಿ" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "ರದ್ದು ಮಾಡಲಾಗಿದೆ" + +msgid "Revocation reason" +msgstr "ರದ್ದು ಮಾಡುವುದಕ್ಕೆ ಕಾರಣ" + +#, fuzzy +#| msgid "Reason for revoking the certificate (0-10)" +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "ಪ್ರಮಾಣಪತ್ರವನ್ನು (0-10) ರದ್ದು ಮಾಡಲು ಕಾರಣ" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +#, fuzzy +#| msgid "Revocation reason" +msgid "7 is not a valid revocation reason" +msgstr "ರದ್ದು ಮಾಡುವುದಕ್ಕೆ ಕಾರಣ" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +#, fuzzy +#| msgid "Users" +msgid "users" +msgstr "ಬಳಕೆದಾರರು" + +msgid "command" +msgstr "" + +msgid "commands" +msgstr "" + +msgid "runAs user" +msgstr "" + +#, fuzzy +#| msgid "Member users" +msgid "runAs users" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +#, fuzzy +#| msgid "Netgroups" +msgid "group runAs" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" + +#, fuzzy +#| msgid "Member groups" +msgid "runAs groups" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +#, fuzzy +#| msgid "Group description" +msgid "Trust direction" +msgstr "ಗುಂಪಿನ ವಿವರಣೆ" + +msgid "Trust type" +msgstr "" + +#, fuzzy +#| msgid "Request status" +msgid "Trust status" +msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +#, fuzzy +#| msgid "External host" +msgid "External trust" +msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " msgstr "" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." msgstr "" +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted trust \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +#, fuzzy +#| msgid "Mount information" +msgid "trust configuration" +msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified \"%(value)s\" trust configuration" +msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "Name" +msgstr "" + +#, fuzzy +#| msgid "GID" +msgid "SID" +msgstr "GID" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "Domain enabled" +msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Enabled trust domain \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Disabled trust domain \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +#, fuzzy +#| msgid "Request status" +msgid "Role status" +msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "IPA role name" +msgstr "ನಿಯಮದ ಹೆಸರು" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Group container" +msgid "vaultcontainer" +msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" + +#, fuzzy +#| msgid "Group container" +msgid "vaultcontainers" +msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" + +#, fuzzy +#| msgid "Group container" +msgid "Vault Containers" +msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" + +#, fuzzy +#| msgid "Group container" +msgid "Vault Container" +msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy +#| msgid "Mount information" +msgid "Vault configuration" +msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Archived data into vault \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Retrieve data from a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Profile" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Profiles" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "Profile configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Imported profile \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted profile \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy +#| msgid "Certificate operation cannot be completed: %(error)s" +msgid "Certificate profiles cannot be renamed" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ಕಾರ್ಯಾಚರಣೆಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲು ಆಗುತ್ತಿಲ್ಲ: %(error)s" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "Host Groups" +msgid "host groups" +msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" + +#, fuzzy +#| msgid "Host Groups" +msgid "Host Group" +msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy +#| msgid "Host-group" +msgid "hostgroup" +msgstr "ಹೋಸ್ಟ್-ಗುಂಪು" + +#, fuzzy +#| msgid "Member host-groups" +msgid "privileged hostgroup" +msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ಗಳು" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Kerberos Ticket Policy" +msgstr "Kerberos principal" + +#, fuzzy +#| msgid "Max life" +msgid "OTP max life" +msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +#, fuzzy +#| msgid "Max renew" +msgid "OTP max renew" +msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +#, fuzzy +#| msgid "Max life" +msgid "RADIUS max life" +msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +#, fuzzy +#| msgid "Max renew" +msgid "RADIUS max renew" +msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +#, fuzzy +#| msgid "Max life" +msgid "PKINIT max life" +msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +#, fuzzy +#| msgid "Max renew" +msgid "PKINIT max renew" +msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "" +"\n" +"IPA locations\n" +msgstr "ಸ್ಥಳ" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "location" +msgstr "ಸ್ಥಳ" + +#, fuzzy +#| msgid "Location" +msgid "locations" +msgstr "ಸ್ಥಳ" + +#, fuzzy +#| msgid "Location" +msgid "IPA Locations" +msgstr "ಸ್ಥಳ" + +#, fuzzy +#| msgid "Location" +msgid "IPA Location" +msgstr "ಸ್ಥಳ" + +#, fuzzy +#| msgid "Location" +msgid "Location name" +msgstr "ಸ್ಥಳ" + +#, fuzzy +#| msgid "NIS domain name" +msgid "IPA location name" +msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" + +#, fuzzy +#| msgid "Netgroup description" +msgid "IPA Location description" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ವಿವರಣೆ" + +#, fuzzy +#| msgid "Services" +msgid "Servers" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added IPA location \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Delete an IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted IPA location \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "IPA Server" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified IPA location \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "Role" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added role \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted role \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified role \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Undeleted user account \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Staged user account \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Disabled user account \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Enabled user account \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Unlocked account \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy +#| msgid "User login" +msgid "Failed logins" +msgstr "ಬಳಕೆದಾರನ ಪ್ರವೇಶ" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +#, fuzzy +#| msgid "Time to live" +msgid "Time now" +msgstr "ಉಳಿದಿರಬೇಕಾದ ಸಮಯ" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificates from user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +#, fuzzy +#| msgid "UID" +msgid "URI" +msgstr "UID" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "cannot be empty" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Deleted ACI \"%(value)s\"" +msgid "A list of ACI values" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"ಕನಿಷ್ಟ ಒಂದು : ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ, ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್, attrs ಅಥವಾ memberof ಗಳ ಅಗತ್ಯವಿದೆ" + +#, fuzzy +#| msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgid "filter and memberof are mutually exclusive" +msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" + +#, fuzzy +#| msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgid "group, permission and self are mutually exclusive" +msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr " '%s' ಗುಂಪು ಅಸ್ತಿತ್ವದಲ್ಲಿಲ್ಲ" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "ACIs" + +#, fuzzy +#| msgid "ACIs" +msgid "ACI" +msgstr "ACIs" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +#, fuzzy, python-format +#| msgid "Created ACI \"%(value)s\"" +msgid "Renamed ACI to \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" + msgid "" "\n" "Domain Name System (DNS)\n" @@ -13976,9 +18267,6 @@ msgstr "" msgid "Managedby permission" msgstr "" -msgid "DNS is not configured" -msgstr "" - msgid "cannot be used when a zone is specified" msgstr "" @@ -14211,1442 +18499,560 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, python-brace-format msgid "" -"\n" -"DNS server configuration\n" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." msgstr "" msgid "" "\n" -"Manipulate DNS server configuration\n" +"API Schema\n" msgstr "" msgid "" "\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" +"Provides API introspection capabilities.\n" msgstr "" msgid "" "\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" +" Show user-find details:\n" +" ipa command-show user-find\n" msgstr "" -msgid "DNS server" -msgstr "" - -msgid "DNS servers" +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" msgstr "" #, fuzzy -#| msgid "Services" -msgid "DNS Servers" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" +#| msgid "Location" +msgid "Documentation" +msgstr "ಸ್ಥಳ" -msgid "DNS Server" +msgid "Exclude from" msgstr "" -#, fuzzy -#| msgid "Service name" -msgid "DNS Server name" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified DNS server \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "Search for DNS servers." +msgid "Include in" msgstr "" #, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" +msgid "Results should contain primary key attribute only (\"%s\")" msgstr "" -msgid "Display configuration of a DNS server." +msgid "Help topic" msgstr "" -msgid "Add a new DNS server." +#, fuzzy +#| msgid "Permissions" +msgid "Version" +msgstr "ಅನುಮತಿಗಳು" + +msgid "Parameters" msgstr "" -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added new DNS server \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Delete a DNS server" +msgid "Method of" msgstr "" -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted DNS server \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" +#, fuzzy +#| msgid "Netgroup name" +msgid "Method name" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ಹೆಸರು" -msgid "REST API is not logged in." +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +#, fuzzy +#| msgid "Character classes" +msgid "Search for classes." +msgstr "ಕ್ಯಾರೆಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +#, fuzzy +#| msgid "Request id" +msgid "Required" +msgstr "ಬೇಡಿಕೆ ID" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "CLI name" +msgstr "ACI ಹೆಸರು" + +#, fuzzy +#| msgid "User password" +msgid "Confirm (password)" +msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" + +#, fuzzy +#| msgid "Default shell" +msgid "Default" +msgstr "ಡೀಫಾಲ್ಟ್ ಶೆಲ್" + +#, fuzzy +#| msgid "Default users group" +msgid "Default from" +msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" msgstr "" #, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgid "%(metaobject)s: %(oname)s not found" msgstr "" -msgid "Unable to communicate with CMS" +msgid "Display information about a command parameter." msgstr "" -msgid "Response from CA was not valid JSON" +msgid "Search command parameters." msgstr "" -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#, fuzzy -#| msgid "Services" -msgid "HBAC services" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, fuzzy -#| msgid "Services" -msgid "HBAC Services" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, fuzzy -#| msgid "Services" -msgid "HBAC Service" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - #, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -#| msgid "User group" -msgid "HBAC service group" -msgstr "ಬಳಕೆದಾರ ಗುಂಪು" - -#, fuzzy -#| msgid "User group" -msgid "HBAC service groups" -msgstr "ಬಳಕೆದಾರ ಗುಂಪು" - -#, fuzzy -#| msgid "User Groups" -msgid "HBAC Service Groups" -msgstr "ಬಳಕೆದಾರರ ಗುಂಪುಗಳು" - -msgid "HBAC Service Group" +msgid "%(command_name)s: %(oname)s not found" msgstr "" -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" +msgid "Display information about a command output." +msgstr "" -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" +msgid "Search for command outputs." +msgstr "" -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" +msgid "Store and provide schema for commands and topics" +msgstr "" -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" +msgid "Fingerprint of schema cached by client" msgstr "" #, fuzzy -#| msgid "Users" -msgid "Stage Users" -msgstr "ಬಳಕೆದಾರರು" +#| msgid "Member groups" +msgid "Member service groups" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" +#, fuzzy +#| msgid "Member groups" +msgid "Member HBAC service groups" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" #, fuzzy #| msgid "Member users" -msgid "stage users" +msgid "Member ID user overrides" msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added stage user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "givenname is required" +msgid "Indirect Member ID user overrides" msgstr "" -msgid "sn is required" +msgid "Indirect Member permissions" msgstr "" -#, fuzzy, python-format -#| msgid "can be at most %(maxlength)d characters" -msgid "can be at most %(len)d characters" -msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಅಕ್ಷರಗಳು ಇರಬಹುದು" +msgid "Indirect Member HBAC service" +msgstr "" -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted stage user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" +msgid "Indirect Member HBAC service group" +msgstr "" -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified stage user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" +msgid "Invalid format. Should be name=value" +msgstr "" -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Activate a stage user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" +msgid "entry" +msgstr "" -msgid "Entry RDN is not 'uid'" +msgid "entries" +msgstr "" + +msgid "Entry" msgstr "" #, python-format -msgid "Entry has no '%(attribute)s'" +msgid "container entry (%(container)s) not found" msgstr "" #, python-format -msgid "active user with name \"%(user)s\" already exists" +msgid "%(parent)s: %(oname)s not found" msgstr "" #, python-format -msgid "Stage user %s activated" +msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "" -msgid "Add one or more certificates to the stageuser entry" +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" msgstr "" #, fuzzy, python-format #| msgid "Added user \"%(value)s\"" -msgid "Added certificates to stageuser \"%(value)s\"" +msgid "Added HBAC rule \"%(value)s\"" msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - #, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added segment \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted segment \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified segment \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added topology suffix \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified topology suffix \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -#| msgid "Host Groups" -msgid "host groups" -msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" - -#, fuzzy -#| msgid "Host Groups" -msgid "Host Group" -msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy -#| msgid "Host-group" -msgid "hostgroup" -msgstr "ಹೋಸ್ಟ್-ಗುಂಪು" - -#, fuzzy -#| msgid "Member host-groups" -msgid "privileged hostgroup" -msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ಗಳು" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -#, fuzzy -#| msgid "Group container" -msgid "vaultcontainer" -msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" - -#, fuzzy -#| msgid "Group container" -msgid "vaultcontainers" -msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" - -#, fuzzy -#| msgid "Group container" -msgid "Vault Containers" -msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" - -#, fuzzy -#| msgid "Group container" -msgid "Vault Container" -msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added vault \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted vault \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified vault \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy -#| msgid "Mount information" -msgid "Vault configuration" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Archived data into vault \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Retrieve data from a vault." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -#, fuzzy -#| msgid "Netgroups" -msgid "netgroups" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" - -msgid "Netgroups" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" - -#, fuzzy -#| msgid "Netgroups" -msgid "Netgroup" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added netgroup \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted netgroup \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified netgroup \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Changed password for \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -#, fuzzy -#| msgid "Serial number" -msgid "invalid port number" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy #| msgid "Deleted ACI \"%(value)s\"" -msgid "A list of ACI values" +msgid "Deleted HBAC rule \"%(value)s\"" msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" -"ಕನಿಷ್ಟ ಒಂದು : ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ, ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್, attrs ಅಥವಾ memberof ಗಳ ಅಗತ್ಯವಿದೆ" - -#, fuzzy -#| msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgid "filter and memberof are mutually exclusive" -msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" - -#, fuzzy -#| msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgid "group, permission and self are mutually exclusive" -msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr " '%s' ಗುಂಪು ಅಸ್ತಿತ್ವದಲ್ಲಿಲ್ಲ" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "ACIs" - -#, fuzzy -#| msgid "ACIs" -msgid "ACI" -msgstr "ACIs" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Modified ACI \"%(value)s\"" +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified HBAC rule \"%(value)s\"" msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" #, fuzzy, python-format #| msgid "Created ACI \"%(value)s\"" -msgid "Renamed ACI to \"%(value)s\"" +msgid "Enabled HBAC rule \"%(value)s\"" msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Access time" +msgstr "ಪ್ರವೇಶದ ಸಮಯ" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + msgid "" "\n" -"Server configuration\n" +"Simulate use of Host-based access controls\n" "\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"NOTES:\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" "\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" "\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" +" --user, --host, and --service are mandatory, others are optional.\n" "\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" "\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, fuzzy, python-format +#| msgid "Access time" +msgid "Access granted: %s" +msgstr "ಪ್ರವೇಶದ ಸಮಯ" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" msgstr "" #, fuzzy -#| msgid "must be at least %(minvalue)d" -msgid "must be at least 10" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" - -msgid "configuration options" -msgstr "" - -#, fuzzy -#| msgid "Mount information" -msgid "Configuration" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -#, fuzzy -#| msgid "Min length" -msgid "Maximum hostname length" -msgstr "ಕನಿಷ್ಟ ಉದ್ದ" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" +#| msgid "Host category the rule applies to" +msgid "Hosts the view applies to" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" msgid "Domain resolution order" msgstr "" @@ -15654,237 +19060,190 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -msgid "IPA servers configured as domain name server" +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID View \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted ID View \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified an ID View \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" msgstr "" -msgid "Hidden IPA DNS servers" +msgid "not found" msgstr "" -msgid "Hidden IPA servers configured as domain name server" +msgid "ID View cannot be applied to IPA master" msgstr "" -msgid "DNSec key master" +msgid "ID View already applied" msgstr "" -msgid "Empty domain is not allowed" +msgid "value" msgstr "" #, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" +msgid "ID View applied to %i host." msgstr "" #, python-format -msgid "Server has no information about domain '%(domain)s'" +msgid "ID View applied to %i hosts." msgstr "" #, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -#, fuzzy -#| msgid "Group '%s' does not exist" -msgid "The group doesn't exist" -msgstr " '%s' ಗುಂಪು ಅಸ್ತಿತ್ವದಲ್ಲಿಲ್ಲ" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" +msgid "ID View cleared from %i host." msgstr "" #, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" +msgid "ID View cleared from %i hosts." msgstr "" msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" -#, fuzzy -#| msgid "Groups" -msgid "groups" -msgstr "ಗುಂಪುಗಳು" +msgid "IPA object" +msgstr "" -#, fuzzy -#| msgid "User Groups" -msgid "User Group" -msgstr "ಬಳಕೆದಾರರ ಗುಂಪುಗಳು" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "gid cannot be set for external group" +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" msgstr "" #, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" -#, fuzzy -#| msgid "Target group" -msgid "privileged group" -msgstr "Target ಗುಂಪು" +msgid "Default Trust View cannot contain IPA users" +msgstr "" -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" +msgid "Add a new ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Delete an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Modify an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified an ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" #, fuzzy, python-format #| msgid "%(count)d variables" -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgid "Display information about an ID override." msgstr "" -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" msgstr "" +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified an User ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + #, fuzzy, python-format #| msgid "Deleted group \"%(value)s\"" -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" -msgid "not allowed to modify user entries" -msgstr "" +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" #, fuzzy #| msgid "Permissions" @@ -16126,1310 +19485,39 @@ msgid_plural "%(count)d permissions matched" msgstr[0] "" msgstr[1] "" -msgid "" -"\n" -"OTP Tokens\n" +msgid "delegation" msgstr "" -msgid "" -"\n" -"Manage OTP tokens.\n" +msgid "delegations" msgstr "" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" +msgid "Delegations" msgstr "" -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -#, fuzzy -#| msgid "UID" -msgid "URI" -msgstr "UID" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "cannot be empty" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -#, fuzzy -#| msgid "Users" -msgid "users" -msgstr "ಬಳಕೆದಾರರು" - -msgid "command" -msgstr "" - -msgid "commands" -msgstr "" - -msgid "runAs user" -msgstr "" - -#, fuzzy -#| msgid "Member users" -msgid "runAs users" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -#, fuzzy -#| msgid "Netgroups" -msgid "group runAs" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" - -#, fuzzy -#| msgid "Member groups" -msgid "runAs groups" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Deleted ACI \"%(value)s\"" -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Modified ACI \"%(value)s\"" -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" +msgid "Delegation" msgstr "" #, fuzzy, python-format #| msgid "Added group \"%(value)s\"" -msgid "Added Sudo Command Group \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" #, fuzzy, python-format #| msgid "Deleted group \"%(value)s\"" -msgid "Deleted Sudo Command Group \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" #, fuzzy, python-format #| msgid "Modified group \"%(value)s\"" -msgid "Modified Sudo Command Group \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" #, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "" msgstr[1] "" -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -#, fuzzy -#| msgid "Kerberos principal" -msgid "Kerberos Ticket Policy" -msgstr "Kerberos principal" - -#, fuzzy -#| msgid "Max life" -msgid "OTP max life" -msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -#, fuzzy -#| msgid "Max renew" -msgid "OTP max renew" -msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -#, fuzzy -#| msgid "Max life" -msgid "RADIUS max life" -msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -#, fuzzy -#| msgid "Max renew" -msgid "RADIUS max renew" -msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -#, fuzzy -#| msgid "Max life" -msgid "PKINIT max life" -msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -#, fuzzy -#| msgid "Max renew" -msgid "PKINIT max renew" -msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -#, fuzzy -#| msgid "Location" -msgid "" -"\n" -"IPA locations\n" -msgstr "ಸ್ಥಳ" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -#, fuzzy -#| msgid "Location" -msgid "location" -msgstr "ಸ್ಥಳ" - -#, fuzzy -#| msgid "Location" -msgid "locations" -msgstr "ಸ್ಥಳ" - -#, fuzzy -#| msgid "Location" -msgid "IPA Locations" -msgstr "ಸ್ಥಳ" - -#, fuzzy -#| msgid "Location" -msgid "IPA Location" -msgstr "ಸ್ಥಳ" - -#, fuzzy -#| msgid "Location" -msgid "Location name" -msgstr "ಸ್ಥಳ" - -#, fuzzy -#| msgid "NIS domain name" -msgid "IPA location name" -msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" - -#, fuzzy -#| msgid "Netgroup description" -msgid "IPA Location description" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ವಿವರಣೆ" - -#, fuzzy -#| msgid "Services" -msgid "Servers" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added IPA location \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Delete an IPA location." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted IPA location \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "IPA Server" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified IPA location \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -#, fuzzy -#| msgid "Location" -msgid "Documentation" -msgstr "ಸ್ಥಳ" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -#| msgid "Permissions" -msgid "Version" -msgstr "ಅನುಮತಿಗಳು" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -#| msgid "Netgroup name" -msgid "Method name" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ಹೆಸರು" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -#, fuzzy -#| msgid "Character classes" -msgid "Search for classes." -msgstr "ಕ್ಯಾರೆಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -#, fuzzy -#| msgid "Request id" -msgid "Required" -msgstr "ಬೇಡಿಕೆ ID" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -#| msgid "ACI name" -msgid "CLI name" -msgstr "ACI ಹೆಸರು" - -#, fuzzy -#| msgid "User password" -msgid "Confirm (password)" -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" - -#, fuzzy -#| msgid "Default shell" -msgid "Default" -msgstr "ಡೀಫಾಲ್ಟ್ ಶೆಲ್" - -#, fuzzy -#| msgid "Default users group" -msgid "Default from" -msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -#, fuzzy -#| msgid "NIS domain name" -msgid "local domain range" -msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added ID range \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted ACI \"%(value)s\"" -msgid "Deleted ID range \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified ACI \"%(value)s\"" -msgid "Modified ID range \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -#, fuzzy -#| msgid "Permissions" -msgid "Self Service Permissions" -msgstr "ಅನುಮತಿಗಳು" - -msgid "Self Service Permission" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added selfservice \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted selfservice \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified selfservice \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -#, fuzzy -#| msgid "Request status" -msgid "Role status" -msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -#, fuzzy -#| msgid "Rule name" -msgid "IPA role name" -msgstr "ನಿಯಮದ ಹೆಸರು" - msgid "HBAC rule and local members cannot both be set" msgstr "" @@ -17499,1028 +19587,199 @@ msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗ msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "pyhbac is not installed." +msgid "" +"\n" +"IPA servers\n" msgstr "" msgid "" "\n" -"IPA certificate operations\n" +"Get information about installed IPA servers.\n" msgstr "" msgid "" "\n" -"Implements a set of commands for managing server SSL certificates.\n" +" Find all servers:\n" +" ipa server-find\n" msgstr "" msgid "" "\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" msgstr "" -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" +msgid "server" msgstr "" -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" +msgid "servers" msgstr "" #, fuzzy -#| msgid "Base-64 encoded server certificate" -msgid "Base-64 encoded certificate." -msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" +#| msgid "Services" +msgid "IPA Servers" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" #, fuzzy -#| msgid "Certificate" -msgid "Certificate chain" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "Subject" -msgstr "ವಿಷಯ" +#| msgid "Location" +msgid "Server location" +msgstr "ಸ್ಥಳ" #, fuzzy -#| msgid "Email address" -msgid "Subject email address" -msgstr "ಇಮೇಲ್ ವಿಳಾಸ" +#| msgid "Service name" +msgid "Service weight" +msgstr "ಸೇವೆಯ ಹೆಸರು" -#, fuzzy -#| msgid "Subject" -msgid "Subject DNS name" -msgstr "ವಿಷಯ" - -#, fuzzy -#| msgid "Street address" -msgid "Subject X.400 address" -msgstr "ಕೇರಿ ವಿಳಾಸ" - -#, fuzzy -#| msgid "Home directory base" -msgid "Subject directory name" -msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" - -msgid "Subject EDI Party name" +msgid "Weight for server services" msgstr "" -#, fuzzy -#| msgid "Subject" -msgid "Subject URI" -msgstr "ವಿಷಯ" - -#, fuzzy -#| msgid "Street address" -msgid "Subject IP Address" -msgstr "ಕೇರಿ ವಿಳಾಸ" - -#, fuzzy -#| msgid "Subject" -msgid "Subject OID" -msgstr "ವಿಷಯ" - -#, fuzzy -#| msgid "Subject" -msgid "Subject UPN" -msgstr "ವಿಷಯ" - -#, fuzzy -#| msgid "Kerberos principal" -msgid "Subject Kerberos principal name" -msgstr "Kerberos principal" - -msgid "Subject Other Name" +msgid "Service relative weight" msgstr "" -msgid "Issuer" +msgid "Relative weight for server services (counts per location)" msgstr "" -msgid "Issuer DN" +msgid "Enabled server roles" msgstr "" -msgid "Not Before" +msgid "List of enabled roles" msgstr "" -msgid "Not After" +msgid "Modify information about an IPA server." msgstr "" -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -#, fuzzy -#| msgid "Serial number" -msgid "Serial number (hex)" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -msgid "Request status" -msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" - -msgid "Include certificate chain in output" -msgstr "" - -#, fuzzy -#| msgid "automatically add the principal if it doesn't exist" -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "ಸ್ವಯಂಚಾಲಿತವಾಗಿ principal ಸೇರಿಸಿ ಅದು ಅಸ್ತಿತ್ವದಲ್ಲಿ ಇಲ್ಲದಿದ್ದಲ್ಲಿ" +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified IPA server \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" #, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -#, fuzzy -#| msgid "automatically add the principal if it doesn't exist" -msgid "The principal for this request doesn't exist." -msgstr "ಸ್ವಯಂಚಾಲಿತವಾಗಿ principal ಸೇರಿಸಿ ಅದು ಅಸ್ತಿತ್ವದಲ್ಲಿ ಇಲ್ಲದಿದ್ದಲ್ಲಿ" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Revoked" -msgstr "ರದ್ದು ಮಾಡಲಾಗಿದೆ" - -msgid "Revocation reason" -msgstr "ರದ್ದು ಮಾಡುವುದಕ್ಕೆ ಕಾರಣ" - -#, fuzzy -#| msgid "Reason for revoking the certificate (0-10)" -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "ಪ್ರಮಾಣಪತ್ರವನ್ನು (0-10) ರದ್ದು ಮಾಡಲು ಕಾರಣ" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -#, fuzzy -#| msgid "Revocation reason" -msgid "7 is not a valid revocation reason" -msgstr "ರದ್ದು ಮಾಡುವುದಕ್ಕೆ ಕಾರಣ" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" msgstr[0] "" msgstr[1] "" -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -#, fuzzy -#| msgid "Host category the rule applies to" -msgid "Hosts the view applies to" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added ID View \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Deleted ACI \"%(value)s\"" -msgid "Deleted ID View \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Modified ACI \"%(value)s\"" -msgid "Modified an ID View \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Delete an ID override." -msgstr "" - #, fuzzy, python-format #| msgid "Deleted service \"%(value)s\"" -msgid "Deleted ID override \"%(value)s\"" +msgid "Deleted IPA server \"%(value)s\"" msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" -msgid "Modify an ID override." +msgid "Ignore topology errors" msgstr "" -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified an ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "ID override" +msgid "Ignore topology connectivity problems after removal" msgstr "" -msgid "ID overrides cannot be renamed" +msgid "Ignore check for last remaining CA or DNS server" msgstr "" -msgid "Search for an ID override." +msgid "Skip a check whether the last CA master or DNS server is removed" msgstr "" -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "Display information about an ID override." +msgid "Force server removal" msgstr "" -msgid "User ID override" +msgid "Force server removal even if it does not exist" msgstr "" -msgid "User ID overrides" +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" msgstr "" #, fuzzy -#| msgid "Base-64 encoded server certificate" -msgid "Base-64 encoded user certificate" -msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" +#| msgid "Service name" +msgid "Server state" +msgstr "ಸೇವೆಯ ಹೆಸರು" #, fuzzy, python-format #| msgid "Added service \"%(value)s\"" -msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgid "Changed server state of \"%(value)s\"." msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" -msgid "Remove one or more certificates to the idoverrideuser entry" +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." msgstr "" #, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added User ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted User ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified an User ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Auto Membership Rule.\n" +msgid "Cannot hide last enabled %(name)s server." msgstr "" msgid "" "\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, fuzzy, python-format -#| msgid "ACI with name \"%s\" not found" -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added automember rule \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added condition(s) to \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "ACI with name \"%s\" not found" -msgid "Auto member rule: %s not found!" -msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted hostgroup \"%(value)s\"" -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified automember rule \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted automember rule \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" +"Session Support for IPA\n" msgstr "" msgid "" @@ -18705,6 +19964,883 @@ msgstr "" msgid "Enabled CA \"%(value)s\"" msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "User login" +msgid "User logins" +msgstr "ಬಳಕೆದಾರನ ಪ್ರವೇಶ" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 10" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" + +msgid "configuration options" +msgstr "" + +#, fuzzy +#| msgid "Mount information" +msgid "Configuration" +msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" + +#, fuzzy +#| msgid "Min length" +msgid "Maximum hostname length" +msgstr "ಕನಿಷ್ಟ ಉದ್ದ" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +#, fuzzy +#| msgid "Group '%s' does not exist" +msgid "The group doesn't exist" +msgstr " '%s' ಗುಂಪು ಅಸ್ತಿತ್ವದಲ್ಲಿಲ್ಲ" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "Hosts" +msgid "Host" +msgstr "ಹೋಸ್ಟ್‌ಗಳು" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Base-64 encoded host certificate" +msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial Number" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial Number (hex)" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy +#| msgid "Password used in bulk enrollment" +msgid "Password cannot be set on enrolled host." +msgstr "ದೊಡ್ಡ ಪ್ರಮಾಣದ ದಾಖಲಾತಿಯಲ್ಲಿ ಬಳಸಲಾದ ಗುಪ್ತಪದ" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Disabled host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added certificates to host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Removed certificates from host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Removed aliases from host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "local domain range" +msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified ID range \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + msgid "Internationalization messages" msgstr "" @@ -19862,16 +21998,6 @@ msgstr "ಪ್ರಮಾಣಪತ್ರ" msgid "REVOKED" msgstr "" -#, fuzzy -#| msgid "Serial number" -msgid "Serial Number" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -#, fuzzy -#| msgid "Serial number" -msgid "Serial Number (hex)" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - msgid "SHA1 Fingerprint" msgstr "" @@ -19936,11 +22062,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -#, fuzzy -#| msgid "Certificate" -msgid "Certificate mapping data" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - msgid "Configuration string" msgstr "" @@ -20717,11 +22838,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -#, fuzzy -#| msgid "Hosts" -msgid "Host" -msgstr "ಹೋಸ್ಟ್‌ಗಳು" - #, fuzzy #| msgid "Netgroup description" msgid "Netgroup Settings" @@ -20847,11 +22963,6 @@ msgstr "" msgid "Add password policy" msgstr "" -#, fuzzy -#| msgid "Password" -msgid "Password Policy" -msgstr "ಗುಪ್ತಪದ" - msgid "Remove password policies" msgstr "" @@ -21339,19 +23450,6 @@ msgstr "" msgid "Remove domains" msgstr "" -#, fuzzy -#| msgid "Group description" -msgid "Trust direction" -msgstr "ಗುಂಪಿನ ವಿವರಣೆ" - -#, fuzzy -#| msgid "Request status" -msgid "Trust status" -msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" - -msgid "Trust type" -msgstr "" - msgid "Alternative UPN suffixes" msgstr "" @@ -21911,9 +24009,6 @@ msgstr "" msgid "Topology" msgstr "" -msgid "Trusts" -msgstr "" - msgid "True" msgstr "" @@ -22028,1470 +24123,6 @@ msgstr "ಬೇಡಿಕೆ ID" msgid "Unsupported value" msgstr "" -msgid "Role" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added role \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted role \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified role \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -#, fuzzy -#| msgid "Services" -msgid "IPA Servers" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, fuzzy -#| msgid "Location" -msgid "Server location" -msgstr "ಸ್ಥಳ" - -#, fuzzy -#| msgid "Service name" -msgid "Service weight" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified IPA server \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted IPA server \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -#, fuzzy -#| msgid "Service name" -msgid "Server state" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Changed server state of \"%(value)s\"." -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -#, fuzzy -#| msgid "Kerberos principal" -msgid "Member principals" -msgstr "Kerberos principal" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, fuzzy, python-format -#| msgid "Member hosts" -msgid "member %s" -msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್‌ಗಳು" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added service delegation rule \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted service delegation \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added service delegation target \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -#, fuzzy -#| msgid "LDAP URI" -msgid "Invalid LDAP URI." -msgstr "LDAP URI" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#, fuzzy -#| msgid "Base-64 encoded server certificate" -msgid "Base-64 encoded host certificate" -msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" - -#, fuzzy -#| msgid "Principal name" -msgid "Principal alias" -msgstr "Principal ಹೆಸರು" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy -#| msgid "Password used in bulk enrollment" -msgid "Password cannot be set on enrolled host." -msgstr "ದೊಡ್ಡ ಪ್ರಮಾಣದ ದಾಖಲಾತಿಯಲ್ಲಿ ಬಳಸಲಾದ ಗುಪ್ತಪದ" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Disabled host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added certificates to host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Removed certificates from host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added new aliases to host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Removed aliases from host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -#, fuzzy -#| msgid "Password" -msgid "password policy" -msgstr "ಗುಪ್ತಪದ" - -msgid "password policies" -msgstr "" - -#, fuzzy -#| msgid "Password" -msgid "Password Policies" -msgstr "ಗುಪ್ತಪದ" - -#, fuzzy -#| msgid "Max renew" -msgid "Max repeat" -msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" - -#, fuzzy -#| msgid "Minimum number of character classes" -msgid "Maximum number of same consecutive characters" -msgstr "ಕನಿಷ್ಟ ಸಂಖ್ಯೆಯ ಕ್ಯಾರಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" - -#, fuzzy -#| msgid "Max renew" -msgid "Max sequence" -msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -#| msgid "User name" -msgid "User check" -msgstr "ಬಳಕೆದಾರನ ಹೆಸರು" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -#, fuzzy -#| msgid "Maximum password lifetime (in days)" -msgid "Maximum password life must be greater than minimum." -msgstr "ಗುಪ್ತಪದದ ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ (ದಿನಗಳಲ್ಲಿ)" - -#, fuzzy -#| msgid "priority cannot be set on global policy" -msgid "cannot delete global password policy" -msgstr "ಗ್ಲೋಬಲ್ ಪಾಲಿಸಿಯಲ್ಲಿ ಆದ್ಯತೆಯನ್ನು ಸೆಟ್ ಮಾಡಲಾಗುವುದಿಲ್ಲ" - -msgid "priority cannot be set on global policy" -msgstr "ಗ್ಲೋಬಲ್ ಪಾಲಿಸಿಯಲ್ಲಿ ಆದ್ಯತೆಯನ್ನು ಸೆಟ್ ಮಾಡಲಾಗುವುದಿಲ್ಲ" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -#, fuzzy -#| msgid "External host" -msgid "External trust" -msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted trust \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -#, fuzzy -#| msgid "Mount information" -msgid "trust configuration" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified ACI \"%(value)s\"" -msgid "Modified \"%(value)s\" trust configuration" -msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy -#| msgid "GID" -msgid "SID" -msgstr "GID" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -#, fuzzy -#| msgid "NIS domain name" -msgid "Domain enabled" -msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Enabled trust domain \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Disabled trust domain \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#, fuzzy -#| msgid "User login" -msgid "User logins" -msgstr "ಬಳಕೆದಾರನ ಪ್ರವೇಶ" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added privilege \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted privilege \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified privilege \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "%(count)d variables" -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -23677,667 +24308,40 @@ msgstr "" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" -msgid "delegation" +msgid "self service permission" msgstr "" -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added delegation \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted delegation \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified delegation \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Deleted ACI \"%(value)s\"" -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Modified ACI \"%(value)s\"" -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Created ACI \"%(value)s\"" -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Deleted ACI \"%(value)s\"" -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Access time" -msgstr "ಪ್ರವೇಶದ ಸಮಯ" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, fuzzy, python-format -#| msgid "Access time" -msgid "Access granted: %s" -msgstr "ಪ್ರವೇಶದ ಸಮಯ" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" +msgid "self service permissions" msgstr "" #, fuzzy -#| msgid "Member groups" -msgid "Member service groups" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" +#| msgid "Permissions" +msgid "Self Service Permissions" +msgstr "ಅನುಮತಿಗಳು" -#, fuzzy -#| msgid "Member groups" -msgid "Member HBAC service groups" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" - -#, fuzzy -#| msgid "Member users" -msgid "Member ID user overrides" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -#, fuzzy -#| msgid "must be True or False" -msgid "must be TRUE or FALSE" -msgstr "ನಿಜ (True) ಅಥವಾ ಸುಳ್ಳು (False) ಆಗಿರಲೇಬೇಕು" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#, fuzzy -#| msgid "User password" -msgid "User password expiration" -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -#, fuzzy -#| msgid "Home directory base" -msgid "SMB Home Directory" -msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" - -#, fuzzy -#| msgid "Home directory base" -msgid "SMB Home Directory Drive" -msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#, fuzzy -#| msgid "Base-64 encoded server certificate" -msgid "Issuer of the certificate" -msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." +msgid "Self Service Permission" msgstr "" #, fuzzy, python-format #| msgid "Added service \"%(value)s\"" -msgid "Added certificate mappings to user \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" #, fuzzy, python-format #| msgid "Modified user \"%(value)s\"" -msgid "Removed certificate mappings from user \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - #, python-format -msgid "Added user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Undeleted user account \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Staged user account \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Disabled user account \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Enabled user account \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Unlocked account \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy -#| msgid "User login" -msgid "Failed logins" -msgstr "ಬಳಕೆದಾರನ ಪ್ರವೇಶ" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -#, fuzzy -#| msgid "Time to live" -msgid "Time now" -msgstr "ಉಳಿದಿರಬೇಕಾದ ಸಮಯ" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added certificates to user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Removed certificates from user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added new aliases to user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Removed aliases from user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" #, python-format msgid "all masters must have %(role)s role enabled" @@ -24518,25 +24522,6 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - #, fuzzy #| msgid "Request status" msgid "Request must be a dict" @@ -24562,6 +24547,25 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #, python-format msgid "must equal %r" msgstr "" diff --git a/po/mr.po b/po/mr.po index 7f3837b37..6a8e9e08a 100644 --- a/po/mr.po +++ b/po/mr.po @@ -3,7 +3,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Marathi\n" @@ -14,6 +14,99 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + #, c-format msgid "Out of memory!\n" msgstr "" @@ -268,99 +361,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - #, c-format msgid "cannot open configuration file %s\n" msgstr "" @@ -8960,6 +8960,101 @@ msgid "" "Establish bi-directional trust. By default trust is inbound one-way only." msgstr "" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "" "\n" "ID ranges\n" @@ -9172,101 +9267,6 @@ msgid "" " " msgstr "" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - msgid "Remove users that can manage this token." msgstr "" @@ -11487,162 +11487,20 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "Additional instructions:" +msgid "Results are truncated, try a more specific search" msgstr "" #, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" +msgid "Unknown option: %(option)s" msgstr "" -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." +msgid "Client version. Used to determine if server will accept request." msgstr "" -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" +msgid "any of the configured servers" msgstr "" -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "error on server '%(server)s': %(error)s" -msgid "DNS server %(server)s: %(error)s." -msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." +msgid "Exceeded number of tries to forward a request." msgstr "" #, python-format @@ -11696,6 +11554,136 @@ msgstr "वापरात नसलेले पर्याय" msgid "No file to read" msgstr "कोणतीही फाइल वाचण्यासाठी नाही " +msgid "incorrect type" +msgstr "" + +msgid "Only one value is allowed" +msgstr "" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +msgid "must be an integer" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +msgid "must be a certificate" +msgstr "" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, python-format +msgid "must be '%(value)s'" +msgstr "" + +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +msgid "must be datetime value" +msgstr "" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +msgid "must be DNS name" +msgstr "" + +msgid "must be absolute" +msgstr "" + +msgid "must be relative" +msgstr "" + +msgid "must be dictionary" +msgstr "" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + msgid "A dictionary representing an LDAP entry" msgstr "" @@ -11705,16 +11693,6 @@ msgstr "" msgid "All commands should at least have a result" msgstr "" -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" @@ -12077,148 +12055,162 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" -msgid "incorrect type" -msgstr "" - -msgid "Only one value is allowed" -msgstr "" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)s" +msgid "Additional instructions:" msgstr "" #, python-format msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." msgstr "" #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" msgstr "" #, python-format -msgid "must be at least %(minlength)d bytes" +msgid "'%(option)s' option is deprecated. %(additional_info)s" msgstr "" #, python-format -msgid "can be at most %(maxlength)d bytes" +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "DNS server %(server)s: %(error)s." +msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -msgid "must be a certificate" -msgstr "" - -msgid "must be a certificate signing request" +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." msgstr "" #, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "must be at least %(minlength)d characters" +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." msgstr "" #, python-format -msgid "can be at most %(maxlength)d characters" +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" msgstr "" #, python-format -msgid "must be exactly %(length)d characters" +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." msgstr "" #, python-format -msgid "The character %(char)r is not allowed." +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." msgstr "" #, python-format -msgid "must be '%(value)s'" +msgid "'%(command)s' is deprecated. %(additional_info)s" msgstr "" #, python-format -msgid "must be one of %(values)s" -msgstr "" - -msgid "must be datetime value" -msgstr "" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -msgid "must be relative" -msgstr "" - -msgid "must be dictionary" -msgstr "" - -msgid "must be Kerberos principal" +msgid "%(line)s" msgstr "" #, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" +msgid "Search result has been truncated: %(reason)s" msgstr "" #, python-format -msgid "%(filename)s: file not found" +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." msgstr "" -#, python-brace-format -msgid "Unable to parse option {item}" +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" msgstr "" -msgid "any of the configured servers" +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." msgstr "" -msgid "Exceeded number of tries to forward a request." +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." msgstr "" msgid "Filename is empty" @@ -12321,6 +12313,18 @@ msgstr "" msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + #, python-format msgid "Retrieving CA cert chain failed: %s" msgstr "" @@ -12337,10 +12341,6 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" -#, python-format -msgid "objectclass %s not found" -msgstr "" - #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" @@ -12468,113 +12468,10 @@ msgid_plural "%(count)d automount keys matched" msgstr[0] "" msgstr[1] "" +#, python-format msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "" @@ -12798,20 +12695,4143 @@ msgstr "" msgid "%i CAs removed." msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "" + +msgid "User Group" +msgstr "" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject" +msgstr "" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Password Policy" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "वापरात नसलेले पर्याय" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject email address" +msgstr "" + +msgid "Subject DNS name" +msgstr "" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +msgid "Subject IP Address" +msgstr "" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +msgid "Serial number (hex)" +msgstr "" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "'add' option" +msgstr "वापरात नसलेले पर्याय" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +#, fuzzy +#| msgid "Topic commands:" +msgid "sudo command" +msgstr "विषय आदेश:" + +#, fuzzy +#| msgid "Topic commands:" +msgid "sudo commands" +msgstr "विषय आदेश:" + +#, fuzzy +#| msgid "Topic commands:" +msgid "Sudo Commands" +msgstr "विषय आदेश:" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "" + +#, fuzzy +#| msgid "Topic commands:" +msgid "command" +msgstr "विषय आदेश:" + +#, fuzzy +#| msgid "Topic commands:" +msgid "commands" +msgstr "विषय आदेश:" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust type" +msgstr "" + +msgid "Trust status" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " msgstr "" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +msgid "Vault configuration" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "" + +msgid "Host Group" +msgstr "" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +msgid "hostgroup" +msgstr "" + +msgid "privileged hostgroup" +msgstr "" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Location name" +msgstr "आदेशाचे नाव " + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +msgid "Servers" +msgstr "" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +msgid "IPA Server" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "A list of ACI values" +msgstr "" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" msgstr "" msgid "" @@ -13358,9 +17378,6 @@ msgstr "" msgid "Managedby permission" msgstr "" -msgid "DNS is not configured" -msgstr "" - msgid "cannot be used when a zone is specified" msgstr "" @@ -13579,1341 +17596,535 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, python-brace-format msgid "" -"\n" -"DNS server configuration\n" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." msgstr "" -msgid "" -"\n" -"Manipulate DNS server configuration\n" +msgid "Server does not support domain level functionality" msgstr "" -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" +msgid "Domain Level cannot be lowered." msgstr "" #, python-brace-format -msgid "Topology management requires minimum domain level {0} " +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." msgstr "" -msgid "segment" +msgid "" +"\n" +"API Schema\n" msgstr "" -msgid "segments" +msgid "" +"\n" +"Provides API introspection capabilities.\n" msgstr "" -msgid "Topology Segments" +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" msgstr "" -msgid "Topology Segment" +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" msgstr "" #, python-format -msgid "left node is not a topology node: %(leftnode)s" +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Version" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Method name" +msgstr "आदेशाचे नाव " + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command." +msgstr "" + +#, fuzzy +#| msgid "Topic or Command" +msgid "Search for commands." +msgstr "विषय किंवा आदेश" + +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "CLI name" +msgstr "आदेशाचे नाव " + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +#, fuzzy +#| msgid "Positional arguments" +msgid "Positional argument" +msgstr "positional वितर्क" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." msgstr "" #, python-format -msgid "right node is not a topology node: %(rightnode)s" +msgid "%(command_name)s: %(oname)s not found" msgstr "" -msgid "left node and right node must not be the same" +msgid "Display information about a command output." msgstr "" -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" +msgid "Search for command outputs." msgstr "" -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" msgstr "" #, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" msgstr[0] "" msgstr[1] "" #, python-format -msgid "Added segment \"%(value)s\"" +msgid "Enabled HBAC rule \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted segment \"%(value)s\"" +msgid "Disabled HBAC rule \"%(value)s\"" msgstr "" -#, python-format -msgid "Modified segment \"%(value)s\"" +msgid "Access time" msgstr "" -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" +msgid "Add source hosts and hostgroups to an HBAC rule." msgstr "" msgid "" "\n" -"Verify replication topology for suffix.\n" +"Simulate use of Host-based access controls\n" "\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"Groups of hosts.\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" "\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" "\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" "\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "" - -msgid "Host Group" -msgstr "" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -msgid "hostgroup" -msgstr "" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" +"HBACTEST AND TRUSTED DOMAINS\n" "\n" -"Vaults\n" -msgstr "" - -msgid "" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" "\n" -"Manage vaults.\n" -msgstr "" - -msgid "" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" "\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -msgid "Vault configuration" -msgstr "" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" -msgid "must be at least 10" +msgid "Unresolved rules in --rules" msgstr "" -msgid "configuration options" +#, python-format +msgid "Access granted: %s" msgstr "" -msgid "Configuration" +msgid "ID View" msgstr "" -msgid "Maximum hostname length" +msgid "system ID View" msgstr "" -msgid "IPA masters" +msgid "ID Views" msgstr "" -msgid "List of all IPA masters" +msgid "User object overrides" msgstr "" -msgid "Hidden IPA masters" +msgid "Group object overrides" msgstr "" -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" +msgid "Hosts the view applies to" msgstr "" msgid "Domain resolution order" @@ -14922,229 +18133,177 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Empty domain is not allowed" +#, python-format +msgid "Added ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" +msgid "Deleted ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Server has no information about domain '%(domain)s'" +msgid "Modified an ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, fuzzy, python-format -#| msgid "error on server '%(server)s': %(error)s" -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" msgstr[0] "" msgstr[1] "" -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgid "Default Trust View cannot be applied on hosts" msgstr "" -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" msgstr "" #, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "ID View applied to %i host." msgstr "" -msgid "not allowed to modify user entries" +#, python-format +msgid "ID View applied to %i hosts." msgstr "" -msgid "not allowed to modify group entries" +#, python-format +msgid "ID View cleared from %i host." msgstr "" -msgid "Not a managed group" +#, python-format +msgid "ID View cleared from %i hosts." msgstr "" -msgid "Add users that can manage members of this group." +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" -msgid "Remove users that can manage members of this group." +msgid "IPA object" msgstr "" +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" "Permissions\n" @@ -15365,1240 +18524,38 @@ msgid_plural "%(count)d permissions matched" msgstr[0] "" msgstr[1] "" -msgid "" -"\n" -"OTP Tokens\n" +msgid "delegation" msgstr "" -msgid "" -"\n" -"Manage OTP tokens.\n" +msgid "delegations" msgstr "" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" +#, fuzzy +#| msgid "Deprecated options" +msgid "Delegations" +msgstr "वापरात नसलेले पर्याय" -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" +msgid "Delegation" msgstr "" #, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" +msgid "Added delegation \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted OTP token \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" msgstr "" #, python-format -msgid "Modified OTP token \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "" msgstr[1] "" -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -#, fuzzy -#| msgid "Topic commands:" -msgid "command" -msgstr "विषय आदेश:" - -#, fuzzy -#| msgid "Topic commands:" -msgid "commands" -msgstr "विषय आदेश:" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, fuzzy -#| msgid "Topic commands:" -msgid "sudo command" -msgstr "विषय आदेश:" - -#, fuzzy -#| msgid "Topic commands:" -msgid "sudo commands" -msgstr "विषय आदेश:" - -#, fuzzy -#| msgid "Topic commands:" -msgid "Sudo Commands" -msgstr "विषय आदेश:" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -#, fuzzy -#| msgid "Command name" -msgid "Location name" -msgstr "आदेशाचे नाव " - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -msgid "Servers" -msgstr "" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -msgid "IPA Server" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Version" -msgstr "" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -#| msgid "Command name" -msgid "Method name" -msgstr "आदेशाचे नाव " - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command." -msgstr "" - -#, fuzzy -#| msgid "Topic or Command" -msgid "Search for commands." -msgstr "विषय किंवा आदेश" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -#| msgid "Command name" -msgid "CLI name" -msgstr "आदेशाचे नाव " - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -#, fuzzy -#| msgid "Positional arguments" -msgid "Positional argument" -msgstr "positional वितर्क" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "IPA role name" -msgstr "" - msgid "HBAC rule and local members cannot both be set" msgstr "" @@ -16662,974 +18619,189 @@ msgstr "" msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "" -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -#, fuzzy -#| msgid "Deprecated options" msgid "" "\n" -"IPA certificate operations\n" -msgstr "वापरात नसलेले पर्याय" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" +"IPA servers\n" msgstr "" msgid "" "\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" +"Get information about installed IPA servers.\n" msgstr "" msgid "" "\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" +" Find all servers:\n" +" ipa server-find\n" msgstr "" msgid "" "\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" msgstr "" -msgid "" -"\n" -"In order to request a certificate:\n" +msgid "server" msgstr "" -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" +msgid "servers" msgstr "" -msgid "" -"\n" -"SEARCHING:\n" +msgid "IPA Servers" msgstr "" -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" +msgid "Server location" msgstr "" -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" +msgid "Service weight" msgstr "" -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" +msgid "Weight for server services" msgstr "" -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" +msgid "Service relative weight" msgstr "" -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgid "Relative weight for server services (counts per location)" msgstr "" -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" +msgid "Enabled server roles" msgstr "" -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" +msgid "List of enabled roles" msgstr "" -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" +msgid "Modify information about an IPA server." msgstr "" #, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgid "Modified IPA server \"%(value)s\"" msgstr "" #, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "Subject" -msgstr "" - -msgid "Subject email address" -msgstr "" - -msgid "Subject DNS name" -msgstr "" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -msgid "Subject IP Address" -msgstr "" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -msgid "Issuer" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Serial number (hex)" -msgstr "" - -msgid "Request status" -msgstr "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -#, fuzzy -#| msgid "Deprecated options" -msgid "'add' option" -msgstr "वापरात नसलेले पर्याय" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" msgstr[0] "" msgstr[1] "" #, python-format -msgid "Search for certificates with these owner %s." +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" msgstr "" #, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" #, python-format -msgid "Added ID View \"%(value)s\"" +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" msgstr "" #, python-format -msgid "Deleted ID View \"%(value)s\"" +msgid "Failed to cleanup server principals/keys: %(err)s" msgstr "" #, python-format -msgid "Modified an ID View \"%(value)s\"" +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" msgstr "" #, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" +msgid "Forcing removal of %(hostname)s" msgstr "" -msgid "not found" +msgid "Ignoring topology connectivity errors." msgstr "" -msgid "ID View cannot be applied to IPA master" +msgid "Server has already been deleted" msgstr "" -msgid "ID View already applied" +msgid "Agreements deleted" msgstr "" -msgid "value" +msgid "Following segments were not deleted:" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +msgid "Server state" msgstr "" #, python-format -msgid "ID View applied to %i host." +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." msgstr "" #, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Auto Membership Rule.\n" +msgid "Cannot hide last enabled %(name)s server." msgstr "" msgid "" "\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" +"Session Support for IPA\n" msgstr "" msgid "" @@ -17800,6 +18972,851 @@ msgstr "" msgid "Enabled CA \"%(value)s\"" msgstr "" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + msgid "Internationalization messages" msgstr "" @@ -18861,12 +20878,6 @@ msgstr "" msgid "REVOKED" msgstr "" -msgid "Serial Number" -msgstr "" - -msgid "Serial Number (hex)" -msgstr "" - msgid "SHA1 Fingerprint" msgstr "" @@ -18919,9 +20930,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -msgid "Certificate mapping data" -msgstr "" - msgid "Configuration string" msgstr "" @@ -19652,9 +21660,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "" - msgid "Netgroup Settings" msgstr "" @@ -19770,9 +21775,6 @@ msgstr "" msgid "Add password policy" msgstr "" -msgid "Password Policy" -msgstr "" - msgid "Remove password policies" msgstr "" @@ -20226,15 +22228,6 @@ msgstr "" msgid "Remove domains" msgstr "" -msgid "Trust direction" -msgstr "" - -msgid "Trust status" -msgstr "" - -msgid "Trust type" -msgstr "" - msgid "Alternative UPN suffixes" msgstr "" @@ -20767,9 +22760,6 @@ msgstr "" msgid "Topology" msgstr "" -msgid "Trusts" -msgstr "" - msgid "True" msgstr "" @@ -20872,1398 +22862,6 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -msgid "IPA Servers" -msgstr "" - -msgid "Server location" -msgstr "" - -msgid "Service weight" -msgstr "" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "error on server '%(server)s': %(error)s" -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -msgid "Server state" -msgstr "" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -msgid "Password Policies" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -22429,630 +23027,36 @@ msgstr "" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "" -msgid "delegation" +msgid "self service permission" msgstr "" -msgid "delegations" +msgid "self service permissions" msgstr "" -#, fuzzy -#| msgid "Deprecated options" -msgid "Delegations" -msgstr "वापरात नसलेले पर्याय" +msgid "Self Service Permissions" +msgstr "" -msgid "Delegation" +msgid "Self Service Permission" msgstr "" #, python-format -msgid "Added delegation \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted delegation \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "Modified delegation \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" msgstr[0] "" msgstr[1] "" -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - #, python-format msgid "all masters must have %(role)s role enabled" msgstr "" @@ -23232,25 +23236,6 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - msgid "Request must be a dict" msgstr "" @@ -23272,6 +23257,25 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #, python-format msgid "must equal %r" msgstr "" diff --git a/po/nl.po b/po/nl.po index 651d9ec9b..083b08acf 100644 --- a/po/nl.po +++ b/po/nl.po @@ -3,7 +3,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Dutch\n" @@ -14,6 +14,99 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + #, c-format msgid "Out of memory!\n" msgstr "" @@ -266,99 +359,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - #, c-format msgid "cannot open configuration file %s\n" msgstr "" @@ -8923,6 +8923,101 @@ msgid "" "Establish bi-directional trust. By default trust is inbound one-way only." msgstr "" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "" "\n" "ID ranges\n" @@ -9135,101 +9230,6 @@ msgid "" " " msgstr "" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - msgid "Remove users that can manage this token." msgstr "" @@ -11450,161 +11450,20 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "Additional instructions:" +msgid "Results are truncated, try a more specific search" msgstr "" #, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" +msgid "Unknown option: %(option)s" msgstr "" -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." +msgid "Client version. Used to determine if server will accept request." msgstr "" -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" +msgid "any of the configured servers" msgstr "" -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." +msgid "Exceeded number of tries to forward a request." msgstr "" #, python-format @@ -11658,6 +11517,136 @@ msgstr "" msgid "No file to read" msgstr "" +msgid "incorrect type" +msgstr "" + +msgid "Only one value is allowed" +msgstr "" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +msgid "must be an integer" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +msgid "must be a certificate" +msgstr "" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, python-format +msgid "must be '%(value)s'" +msgstr "" + +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +msgid "must be datetime value" +msgstr "" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +msgid "must be DNS name" +msgstr "" + +msgid "must be absolute" +msgstr "" + +msgid "must be relative" +msgstr "" + +msgid "must be dictionary" +msgstr "" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + msgid "A dictionary representing an LDAP entry" msgstr "" @@ -11667,16 +11656,6 @@ msgstr "" msgid "All commands should at least have a result" msgstr "" -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" @@ -12035,148 +12014,161 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" -msgid "incorrect type" -msgstr "" - -msgid "Only one value is allowed" -msgstr "" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)s" +msgid "Additional instructions:" msgstr "" #, python-format msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." msgstr "" #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" msgstr "" #, python-format -msgid "must be at least %(minlength)d bytes" +msgid "'%(option)s' option is deprecated. %(additional_info)s" msgstr "" #, python-format -msgid "can be at most %(maxlength)d bytes" +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" msgstr "" #, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -msgid "must be a certificate" -msgstr "" - -msgid "must be a certificate signing request" +msgid "DNS server %(server)s: %(error)s." msgstr "" #, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "must be at least %(minlength)d characters" +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." msgstr "" #, python-format -msgid "can be at most %(maxlength)d characters" +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "must be exactly %(length)d characters" +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." msgstr "" #, python-format -msgid "The character %(char)r is not allowed." +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" msgstr "" #, python-format -msgid "must be '%(value)s'" +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." msgstr "" #, python-format -msgid "must be one of %(values)s" -msgstr "" - -msgid "must be datetime value" -msgstr "" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -msgid "must be relative" -msgstr "" - -msgid "must be dictionary" -msgstr "" - -msgid "must be Kerberos principal" +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." msgstr "" #, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" +msgid "'%(command)s' is deprecated. %(additional_info)s" msgstr "" #, python-format -msgid "%(filename)s: file not found" +msgid "%(line)s" msgstr "" -#, python-brace-format -msgid "Unable to parse option {item}" +#, python-format +msgid "Search result has been truncated: %(reason)s" msgstr "" -msgid "any of the configured servers" +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." msgstr "" -msgid "Exceeded number of tries to forward a request." +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." msgstr "" msgid "Filename is empty" @@ -12278,6 +12270,18 @@ msgstr "" msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + #, python-format msgid "Retrieving CA cert chain failed: %s" msgstr "" @@ -12294,10 +12298,6 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" -#, python-format -msgid "objectclass %s not found" -msgstr "" - #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" @@ -12425,113 +12425,10 @@ msgid_plural "%(count)d automount keys matched" msgstr[0] "" msgstr[1] "" +#, python-format msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "" @@ -12755,20 +12652,4127 @@ msgstr "" msgid "%i CAs removed." msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "" + +msgid "User Group" +msgstr "" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject" +msgstr "" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Password Policy" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject email address" +msgstr "" + +msgid "Subject DNS name" +msgstr "" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +msgid "Subject IP Address" +msgstr "" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +msgid "Serial number (hex)" +msgstr "" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "" + +msgid "command" +msgstr "" + +msgid "commands" +msgstr "" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust type" +msgstr "" + +msgid "Trust status" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " msgstr "" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +msgid "Vault configuration" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "" + +msgid "Host Group" +msgstr "" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +msgid "hostgroup" +msgstr "" + +msgid "privileged hostgroup" +msgstr "" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +msgid "Location name" +msgstr "" + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +msgid "Servers" +msgstr "" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +msgid "IPA Server" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "A list of ACI values" +msgstr "" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" msgstr "" msgid "" @@ -13315,9 +17319,6 @@ msgstr "" msgid "Managedby permission" msgstr "" -msgid "DNS is not configured" -msgstr "" - msgid "cannot be used when a zone is specified" msgstr "" @@ -13536,1341 +17537,527 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, python-brace-format msgid "" -"\n" -"DNS server configuration\n" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." msgstr "" -msgid "" -"\n" -"Manipulate DNS server configuration\n" +msgid "Server does not support domain level functionality" msgstr "" -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" +msgid "Domain Level cannot be lowered." msgstr "" #, python-brace-format -msgid "Topology management requires minimum domain level {0} " +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." msgstr "" -msgid "segment" +msgid "" +"\n" +"API Schema\n" msgstr "" -msgid "segments" +msgid "" +"\n" +"Provides API introspection capabilities.\n" msgstr "" -msgid "Topology Segments" +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" msgstr "" -msgid "Topology Segment" +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" msgstr "" #, python-format -msgid "left node is not a topology node: %(leftnode)s" +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Version" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +msgid "Method name" msgstr "" #, python-format -msgid "right node is not a topology node: %(rightnode)s" +msgid "%(pkey)s: %(oname)s not found" msgstr "" -msgid "left node and right node must not be the same" +msgid "Display information about a command." msgstr "" -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" +msgid "Search for commands." msgstr "" -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +msgid "CLI name" +msgstr "" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" msgstr "" #, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" msgstr[0] "" msgstr[1] "" #, python-format -msgid "Added segment \"%(value)s\"" +msgid "Enabled HBAC rule \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted segment \"%(value)s\"" +msgid "Disabled HBAC rule \"%(value)s\"" msgstr "" -#, python-format -msgid "Modified segment \"%(value)s\"" +msgid "Access time" msgstr "" -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" +msgid "Add source hosts and hostgroups to an HBAC rule." msgstr "" msgid "" "\n" -"Verify replication topology for suffix.\n" +"Simulate use of Host-based access controls\n" "\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"Groups of hosts.\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" "\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" "\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" "\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "" - -msgid "Host Group" -msgstr "" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -msgid "hostgroup" -msgstr "" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" +"HBACTEST AND TRUSTED DOMAINS\n" "\n" -"Vaults\n" -msgstr "" - -msgid "" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" "\n" -"Manage vaults.\n" -msgstr "" - -msgid "" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" "\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -msgid "Vault configuration" -msgstr "" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" -msgid "must be at least 10" +msgid "Unresolved rules in --rules" msgstr "" -msgid "configuration options" +#, python-format +msgid "Access granted: %s" msgstr "" -msgid "Configuration" +msgid "ID View" msgstr "" -msgid "Maximum hostname length" +msgid "system ID View" msgstr "" -msgid "IPA masters" +msgid "ID Views" msgstr "" -msgid "List of all IPA masters" +msgid "User object overrides" msgstr "" -msgid "Hidden IPA masters" +msgid "Group object overrides" msgstr "" -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" +msgid "Hosts the view applies to" msgstr "" msgid "Domain resolution order" @@ -14879,228 +18066,177 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Empty domain is not allowed" +#, python-format +msgid "Added ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" +msgid "Deleted ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Server has no information about domain '%(domain)s'" +msgid "Modified an ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" msgstr[0] "" msgstr[1] "" -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgid "Default Trust View cannot be applied on hosts" msgstr "" -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" msgstr "" #, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "ID View applied to %i host." msgstr "" -msgid "not allowed to modify user entries" +#, python-format +msgid "ID View applied to %i hosts." msgstr "" -msgid "not allowed to modify group entries" +#, python-format +msgid "ID View cleared from %i host." msgstr "" -msgid "Not a managed group" +#, python-format +msgid "ID View cleared from %i hosts." msgstr "" -msgid "Add users that can manage members of this group." +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" -msgid "Remove users that can manage members of this group." +msgid "IPA object" msgstr "" +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" "Permissions\n" @@ -15320,1220 +18456,36 @@ msgid_plural "%(count)d permissions matched" msgstr[0] "" msgstr[1] "" -msgid "" -"\n" -"OTP Tokens\n" +msgid "delegation" msgstr "" -msgid "" -"\n" -"Manage OTP tokens.\n" +msgid "delegations" msgstr "" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" +msgid "Delegations" msgstr "" -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" +msgid "Delegation" msgstr "" #, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" +msgid "Added delegation \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted OTP token \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" msgstr "" #, python-format -msgid "Modified OTP token \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "" msgstr[1] "" -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -msgid "command" -msgstr "" - -msgid "commands" -msgstr "" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -msgid "Location name" -msgstr "" - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -msgid "Servers" -msgstr "" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -msgid "IPA Server" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Version" -msgstr "" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -msgid "Method name" -msgstr "" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -msgid "CLI name" -msgstr "" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "IPA role name" -msgstr "" - msgid "HBAC rule and local members cannot both be set" msgstr "" @@ -16597,970 +18549,188 @@ msgstr "" msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "" -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "pyhbac is not installed." +msgid "" +"\n" +"IPA servers\n" msgstr "" msgid "" "\n" -"IPA certificate operations\n" +"Get information about installed IPA servers.\n" msgstr "" msgid "" "\n" -"Implements a set of commands for managing server SSL certificates.\n" +" Find all servers:\n" +" ipa server-find\n" msgstr "" msgid "" "\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" msgstr "" -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" +msgid "server" msgstr "" -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" +msgid "servers" msgstr "" -msgid "" -"\n" -"In order to request a certificate:\n" +msgid "IPA Servers" msgstr "" -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" +msgid "Server location" msgstr "" -msgid "" -"\n" -"SEARCHING:\n" +msgid "Service weight" msgstr "" -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" +msgid "Weight for server services" msgstr "" -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" +msgid "Service relative weight" msgstr "" -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" +msgid "Relative weight for server services (counts per location)" msgstr "" -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" +msgid "Enabled server roles" msgstr "" -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgid "List of enabled roles" msgstr "" -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" +msgid "Modify information about an IPA server." msgstr "" #, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgid "Modified IPA server \"%(value)s\"" msgstr "" #, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "Subject" -msgstr "" - -msgid "Subject email address" -msgstr "" - -msgid "Subject DNS name" -msgstr "" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -msgid "Subject IP Address" -msgstr "" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -msgid "Issuer" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Serial number (hex)" -msgstr "" - -msgid "Request status" -msgstr "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" msgstr[0] "" msgstr[1] "" #, python-format -msgid "Search for certificates with these owner %s." +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" msgstr "" #, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" #, python-format -msgid "Added ID View \"%(value)s\"" +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" msgstr "" #, python-format -msgid "Deleted ID View \"%(value)s\"" +msgid "Failed to remove server %(master)s from server list: %(err)s" msgstr "" #, python-format -msgid "Modified an ID View \"%(value)s\"" +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" msgstr "" #, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" +msgid "Failed to cleanup server principals/keys: %(err)s" msgstr "" #, python-format -msgid "ID View applied to %i host." +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" msgstr "" #, python-format -msgid "ID View applied to %i hosts." +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +msgid "Server state" msgstr "" #, python-format -msgid "ID View cleared from %i host." +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." msgstr "" #, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Auto Membership Rule.\n" +msgid "Cannot hide last enabled %(name)s server." msgstr "" msgid "" "\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" +"Session Support for IPA\n" msgstr "" msgid "" @@ -17731,6 +18901,850 @@ msgstr "" msgid "Enabled CA \"%(value)s\"" msgstr "" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + msgid "Internationalization messages" msgstr "" @@ -18789,12 +20803,6 @@ msgstr "" msgid "REVOKED" msgstr "" -msgid "Serial Number" -msgstr "" - -msgid "Serial Number (hex)" -msgstr "" - msgid "SHA1 Fingerprint" msgstr "" @@ -18847,9 +20855,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -msgid "Certificate mapping data" -msgstr "" - msgid "Configuration string" msgstr "" @@ -19572,9 +21577,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "" - msgid "Netgroup Settings" msgstr "" @@ -19690,9 +21692,6 @@ msgstr "" msgid "Add password policy" msgstr "" -msgid "Password Policy" -msgstr "" - msgid "Remove password policies" msgstr "" @@ -20144,15 +22143,6 @@ msgstr "" msgid "Remove domains" msgstr "" -msgid "Trust direction" -msgstr "" - -msgid "Trust status" -msgstr "" - -msgid "Trust type" -msgstr "" - msgid "Alternative UPN suffixes" msgstr "" @@ -20685,9 +22675,6 @@ msgstr "" msgid "Topology" msgstr "" -msgid "Trusts" -msgstr "" - msgid "True" msgstr "" @@ -20790,1397 +22777,6 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -msgid "IPA Servers" -msgstr "" - -msgid "Server location" -msgstr "" - -msgid "Service weight" -msgstr "" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -msgid "Server state" -msgstr "" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -msgid "Password Policies" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -22346,628 +22942,36 @@ msgstr "" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "" -msgid "delegation" +msgid "self service permission" msgstr "" -msgid "delegations" +msgid "self service permissions" msgstr "" -msgid "Delegations" +msgid "Self Service Permissions" msgstr "" -msgid "Delegation" +msgid "Self Service Permission" msgstr "" #, python-format -msgid "Added delegation \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted delegation \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "Modified delegation \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" msgstr[0] "" msgstr[1] "" -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - #, python-format msgid "all masters must have %(role)s role enabled" msgstr "" @@ -23147,25 +23151,6 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - msgid "Request must be a dict" msgstr "" @@ -23187,6 +23172,25 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #, python-format msgid "must equal %r" msgstr "" diff --git a/po/pa.po b/po/pa.po index ba2e06695..08c0770d3 100644 --- a/po/pa.po +++ b/po/pa.po @@ -3,7 +3,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Punjabi\n" @@ -14,6 +14,101 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to open keytab\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Unable to remove entry\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + #, c-format msgid "Out of memory!\n" msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ!\n" @@ -269,101 +364,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, fuzzy, c-format -#| msgid "Failed to create key!\n" -msgid "Failed to open keytab\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -#| msgid "Failed to create key!\n" -msgid "Unable to remove entry\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - #, c-format msgid "cannot open configuration file %s\n" msgstr "" @@ -9004,6 +9004,101 @@ msgid "" "Establish bi-directional trust. By default trust is inbound one-way only." msgstr "" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "" "\n" "ID ranges\n" @@ -9216,101 +9311,6 @@ msgid "" " " msgstr "" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - msgid "Remove users that can manage this token." msgstr "" @@ -11533,161 +11533,22 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "Additional instructions:" +msgid "Results are truncated, try a more specific search" msgstr "" #, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" +msgid "Unknown option: %(option)s" +msgstr "ਅਣਪਛਾਤੀ ਚੋਣ: %(option)s" + +msgid "Client version. Used to determine if server will accept request." msgstr "" -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" +#, fuzzy +#| msgid "domain is not configured" +msgid "any of the configured servers" +msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." +msgid "Exceeded number of tries to forward a request." msgstr "" #, python-format @@ -11741,6 +11602,136 @@ msgstr "" msgid "No file to read" msgstr "" +msgid "incorrect type" +msgstr "" + +msgid "Only one value is allowed" +msgstr "" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +msgid "must be an integer" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +msgid "must be a certificate" +msgstr "" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, python-format +msgid "must be '%(value)s'" +msgstr "" + +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +msgid "must be datetime value" +msgstr "" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +msgid "must be DNS name" +msgstr "" + +msgid "must be absolute" +msgstr "" + +msgid "must be relative" +msgstr "" + +msgid "must be dictionary" +msgstr "" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + msgid "A dictionary representing an LDAP entry" msgstr "" @@ -11750,16 +11741,6 @@ msgstr "" msgid "All commands should at least have a result" msgstr "" -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "ਅਣਪਛਾਤੀ ਚੋਣ: %(option)s" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" @@ -12116,150 +12097,161 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" -msgid "incorrect type" -msgstr "" - -msgid "Only one value is allowed" -msgstr "" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)s" +msgid "Additional instructions:" msgstr "" #, python-format msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." msgstr "" #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" msgstr "" #, python-format -msgid "must be at least %(minlength)d bytes" +msgid "'%(option)s' option is deprecated. %(additional_info)s" msgstr "" #, python-format -msgid "can be at most %(maxlength)d bytes" +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" msgstr "" #, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -msgid "must be a certificate" -msgstr "" - -msgid "must be a certificate signing request" +msgid "DNS server %(server)s: %(error)s." msgstr "" #, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "must be at least %(minlength)d characters" +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." msgstr "" #, python-format -msgid "can be at most %(maxlength)d characters" +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "must be exactly %(length)d characters" +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." msgstr "" #, python-format -msgid "The character %(char)r is not allowed." +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" msgstr "" #, python-format -msgid "must be '%(value)s'" +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." msgstr "" #, python-format -msgid "must be one of %(values)s" -msgstr "" - -msgid "must be datetime value" -msgstr "" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -msgid "must be relative" -msgstr "" - -msgid "must be dictionary" -msgstr "" - -msgid "must be Kerberos principal" +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." msgstr "" #, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" +msgid "'%(command)s' is deprecated. %(additional_info)s" msgstr "" #, python-format -msgid "%(filename)s: file not found" +msgid "%(line)s" msgstr "" -#, python-brace-format -msgid "Unable to parse option {item}" +#, python-format +msgid "Search result has been truncated: %(reason)s" msgstr "" -#, fuzzy -#| msgid "domain is not configured" -msgid "any of the configured servers" -msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" -msgid "Exceeded number of tries to forward a request." +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." msgstr "" msgid "Filename is empty" @@ -12361,6 +12353,18 @@ msgstr "" msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + #, python-format msgid "Retrieving CA cert chain failed: %s" msgstr "" @@ -12377,10 +12381,6 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" -#, python-format -msgid "objectclass %s not found" -msgstr "" - #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" @@ -12508,115 +12508,10 @@ msgid_plural "%(count)d automount keys matched" msgstr[0] "" msgstr[1] "" +#, python-format msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -#, fuzzy -#| msgid "domain is not configured" -msgid "CA is not configured" -msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "" @@ -12840,20 +12735,4153 @@ msgstr "" msgid "%i CAs removed." msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "domain is not configured" +msgid "Auto Membership is not configured" +msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "" + +msgid "User Group" +msgstr "" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +#, fuzzy +#| msgid "domain is not configured" +msgid "DNS is not configured" +msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject" +msgstr "" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +#, fuzzy +#| msgid "Invalid vault type" +msgid "invalid attribute name" +msgstr "ਗ਼ਲਤ ਵਾਲਟ ਕਿਸਮ" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Password Policy" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "domain is not configured" +msgid "CA is not configured" +msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject email address" +msgstr "" + +msgid "Subject DNS name" +msgstr "" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +msgid "Subject IP Address" +msgstr "" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +msgid "Serial number (hex)" +msgstr "" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "" + +msgid "command" +msgstr "" + +msgid "commands" +msgstr "" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +#, fuzzy +#| msgid "Trust setup" +msgid "AD Trust setup" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +#, fuzzy +#| msgid "Trust setup" +msgid "Trusts" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" + +#, fuzzy +#| msgid "Trust setup" +msgid "Trust" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +#, fuzzy +#| msgid "Trust setup" +msgid "Trust direction" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" + +#, fuzzy +#| msgid "Trust setup" +msgid "Trust type" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" + +#, fuzzy +#| msgid "Trust setup" +msgid "Trust status" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +#, fuzzy +#| msgid "Trust setup" +msgid "trust type" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " msgstr "" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +#, fuzzy +#| msgid "AD domain controller" +msgid "IPA AD trust controllers" +msgstr "AD ਡੋਮੇਨ ਕੰਟਰੋਲਰ" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +#, fuzzy +#| msgid "no trusted domain is configured" +msgid "Trusted domains" +msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +msgid "Vault configuration" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "" + +msgid "Host Group" +msgstr "" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +msgid "hostgroup" +msgstr "" + +msgid "privileged hostgroup" +msgstr "" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +msgid "Location name" +msgstr "" + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +msgid "Servers" +msgstr "" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +msgid "IPA Server" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "A list of ACI values" +msgstr "" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" msgstr "" msgid "" @@ -13400,11 +17428,6 @@ msgstr "" msgid "Managedby permission" msgstr "" -#, fuzzy -#| msgid "domain is not configured" -msgid "DNS is not configured" -msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" - msgid "cannot be used when a zone is specified" msgstr "" @@ -13623,1343 +17646,529 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, python-brace-format msgid "" -"\n" -"DNS server configuration\n" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." msgstr "" -msgid "" -"\n" -"Manipulate DNS server configuration\n" +msgid "Server does not support domain level functionality" msgstr "" -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" +msgid "Domain Level cannot be lowered." msgstr "" #, python-brace-format -msgid "Topology management requires minimum domain level {0} " +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." msgstr "" -msgid "segment" +msgid "" +"\n" +"API Schema\n" msgstr "" -msgid "segments" +msgid "" +"\n" +"Provides API introspection capabilities.\n" msgstr "" -msgid "Topology Segments" +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" msgstr "" -msgid "Topology Segment" +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" msgstr "" #, python-format -msgid "left node is not a topology node: %(leftnode)s" +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Version" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +msgid "Method name" msgstr "" #, python-format -msgid "right node is not a topology node: %(rightnode)s" +msgid "%(pkey)s: %(oname)s not found" msgstr "" -msgid "left node and right node must not be the same" +msgid "Display information about a command." msgstr "" -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" +msgid "Search for commands." msgstr "" -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +msgid "CLI name" +msgstr "" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" msgstr "" #, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" -#, python-format -msgid "Added segment \"%(value)s\"" +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." msgstr "" #, python-format -msgid "Deleted segment \"%(value)s\"" +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" msgstr "" #, python-format -msgid "Modified segment \"%(value)s\"" +msgid "container entry (%(container)s) not found" msgstr "" #, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" +msgid "%(parent)s: %(oname)s not found" msgstr "" #, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "" #, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" +msgid "attribute \"%(attribute)s\" not allowed" msgstr "" #, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "" - -msgid "Host Group" -msgstr "" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -msgid "hostgroup" -msgstr "" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -msgid "Vault configuration" -msgstr "" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" +msgid "these attributes are not allowed: %(attrs)s" msgstr "" #, fuzzy -#| msgid "Invalid vault type" -msgid "invalid attribute name" -msgstr "ਗ਼ਲਤ ਵਾਲਟ ਕਿਸਮ" +#| msgid "domain is not configured" +msgid "attribute is not configurable" +msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" +msgid "No such attribute on this entry" msgstr "" #, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" msgstr "" #, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgid "%s" msgstr "" #, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" +msgid "%s to add" msgstr "" #, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" +msgid "%s to remove" msgstr "" +#, python-format msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." msgstr "" #, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." msgstr "" #, python-format -msgid "Syntax Error: %(error)s" +msgid "added attribute value to entry %(value)s" msgstr "" #, python-format -msgid "invalid DN (%s)" +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" msgstr "" #, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -msgid "ACI" +msgid "Added HBAC rule \"%(value)s\"" msgstr "" #, python-format -msgid "Created ACI \"%(value)s\"" +msgid "Deleted HBAC rule \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted ACI \"%(value)s\"" +msgid "Modified HBAC rule \"%(value)s\"" msgstr "" #, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" msgstr[0] "" msgstr[1] "" #, python-format -msgid "Renamed ACI to \"%(value)s\"" +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." msgstr "" msgid "" "\n" -"Server configuration\n" +"Simulate use of Host-based access controls\n" "\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"NOTES:\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" "\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" "\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" +" --user, --host, and --service are mandatory, others are optional.\n" "\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" "\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" -msgid "must be at least 10" +msgid "Unresolved rules in --rules" msgstr "" -msgid "configuration options" +#, python-format +msgid "Access granted: %s" msgstr "" -msgid "Configuration" +msgid "ID View" msgstr "" -msgid "Maximum hostname length" +msgid "system ID View" msgstr "" -msgid "IPA masters" +msgid "ID Views" msgstr "" -msgid "List of all IPA masters" +msgid "User object overrides" msgstr "" -msgid "Hidden IPA masters" +msgid "Group object overrides" msgstr "" -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" +msgid "Hosts the view applies to" msgstr "" msgid "Domain resolution order" @@ -14968,230 +18177,177 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -#, fuzzy -#| msgid "domain is not configured" -msgid "Empty domain is not allowed" -msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" - #, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" +msgid "Added ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Server has no information about domain '%(domain)s'" +msgid "Deleted ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "The group doesn't exist" +msgid "Modified an ID View \"%(value)s\"" msgstr "" #, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" msgstr[0] "" msgstr[1] "" -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgid "Default Trust View cannot be applied on hosts" msgstr "" -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" msgstr "" #, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "ID View applied to %i host." msgstr "" -msgid "not allowed to modify user entries" +#, python-format +msgid "ID View applied to %i hosts." msgstr "" -msgid "not allowed to modify group entries" +#, python-format +msgid "ID View cleared from %i host." msgstr "" -msgid "Not a managed group" +#, python-format +msgid "ID View cleared from %i hosts." msgstr "" -msgid "Add users that can manage members of this group." +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" -msgid "Remove users that can manage members of this group." +msgid "IPA object" msgstr "" +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" "Permissions\n" @@ -15411,1220 +18567,36 @@ msgid_plural "%(count)d permissions matched" msgstr[0] "" msgstr[1] "" -msgid "" -"\n" -"OTP Tokens\n" +msgid "delegation" msgstr "" -msgid "" -"\n" -"Manage OTP tokens.\n" +msgid "delegations" msgstr "" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" +msgid "Delegations" msgstr "" -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" +msgid "Delegation" msgstr "" #, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" +msgid "Added delegation \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted OTP token \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" msgstr "" #, python-format -msgid "Modified OTP token \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "" msgstr[1] "" -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -msgid "command" -msgstr "" - -msgid "commands" -msgstr "" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -msgid "Location name" -msgstr "" - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -msgid "Servers" -msgstr "" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -msgid "IPA Server" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Version" -msgstr "" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -msgid "Method name" -msgstr "" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -msgid "CLI name" -msgstr "" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "IPA role name" -msgstr "" - msgid "HBAC rule and local members cannot both be set" msgstr "" @@ -16688,972 +18660,188 @@ msgstr "" msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "" -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "pyhbac is not installed." +msgid "" +"\n" +"IPA servers\n" msgstr "" msgid "" "\n" -"IPA certificate operations\n" +"Get information about installed IPA servers.\n" msgstr "" msgid "" "\n" -"Implements a set of commands for managing server SSL certificates.\n" +" Find all servers:\n" +" ipa server-find\n" msgstr "" msgid "" "\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" msgstr "" -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" +msgid "server" msgstr "" -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" +msgid "servers" msgstr "" -msgid "" -"\n" -"In order to request a certificate:\n" +msgid "IPA Servers" msgstr "" -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" +msgid "Server location" msgstr "" -msgid "" -"\n" -"SEARCHING:\n" +msgid "Service weight" msgstr "" -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" +msgid "Weight for server services" msgstr "" -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" +msgid "Service relative weight" msgstr "" -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" +msgid "Relative weight for server services (counts per location)" msgstr "" -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" +msgid "Enabled server roles" msgstr "" -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgid "List of enabled roles" msgstr "" -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" +msgid "Modify information about an IPA server." msgstr "" #, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgid "Modified IPA server \"%(value)s\"" msgstr "" #, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "Subject" -msgstr "" - -msgid "Subject email address" -msgstr "" - -msgid "Subject DNS name" -msgstr "" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -msgid "Subject IP Address" -msgstr "" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -msgid "Issuer" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Serial number (hex)" -msgstr "" - -msgid "Request status" -msgstr "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" msgstr[0] "" msgstr[1] "" #, python-format -msgid "Search for certificates with these owner %s." +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" msgstr "" #, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" #, python-format -msgid "Added ID View \"%(value)s\"" +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" msgstr "" #, python-format -msgid "Deleted ID View \"%(value)s\"" +msgid "Failed to remove server %(master)s from server list: %(err)s" msgstr "" #, python-format -msgid "Modified an ID View \"%(value)s\"" +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" msgstr "" #, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" +msgid "Failed to cleanup server principals/keys: %(err)s" msgstr "" #, python-format -msgid "ID View applied to %i host." +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" msgstr "" #, python-format -msgid "ID View applied to %i hosts." +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +msgid "Server state" msgstr "" #, python-format -msgid "ID View cleared from %i host." +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." msgstr "" #, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Auto Membership Rule.\n" +msgid "Cannot hide last enabled %(name)s server." msgstr "" msgid "" "\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -#, fuzzy -#| msgid "domain is not configured" -msgid "Auto Membership is not configured" -msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" +"Session Support for IPA\n" msgstr "" msgid "" @@ -17824,6 +19012,852 @@ msgstr "" msgid "Enabled CA \"%(value)s\"" msgstr "" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +#, fuzzy +#| msgid "domain is not configured" +msgid "Empty domain is not allowed" +msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + msgid "Internationalization messages" msgstr "" @@ -18888,12 +20922,6 @@ msgstr "" msgid "REVOKED" msgstr "" -msgid "Serial Number" -msgstr "" - -msgid "Serial Number (hex)" -msgstr "" - msgid "SHA1 Fingerprint" msgstr "" @@ -18946,9 +20974,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -msgid "Certificate mapping data" -msgstr "" - msgid "Configuration string" msgstr "" @@ -19671,9 +21696,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "" - msgid "Netgroup Settings" msgstr "" @@ -19789,9 +21811,6 @@ msgstr "" msgid "Add password policy" msgstr "" -msgid "Password Policy" -msgstr "" - msgid "Remove password policies" msgstr "" @@ -20245,21 +22264,6 @@ msgstr "" msgid "Remove domains" msgstr "" -#, fuzzy -#| msgid "Trust setup" -msgid "Trust direction" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" - -#, fuzzy -#| msgid "Trust setup" -msgid "Trust status" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" - -#, fuzzy -#| msgid "Trust setup" -msgid "Trust type" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" - msgid "Alternative UPN suffixes" msgstr "" @@ -20792,11 +22796,6 @@ msgstr "" msgid "Topology" msgstr "" -#, fuzzy -#| msgid "Trust setup" -msgid "Trusts" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" - msgid "True" msgstr "" @@ -20899,1407 +22898,6 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -msgid "IPA Servers" -msgstr "" - -msgid "Server location" -msgstr "" - -msgid "Service weight" -msgstr "" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -msgid "Server state" -msgstr "" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -msgid "Password Policies" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -#, fuzzy -#| msgid "Trust setup" -msgid "AD Trust setup" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -#, fuzzy -#| msgid "Trust setup" -msgid "Trust" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -#, fuzzy -#| msgid "Trust setup" -msgid "trust type" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -#, fuzzy -#| msgid "AD domain controller" -msgid "IPA AD trust controllers" -msgstr "AD ਡੋਮੇਨ ਕੰਟਰੋਲਰ" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -#, fuzzy -#| msgid "no trusted domain is configured" -msgid "Trusted domains" -msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -22465,630 +23063,36 @@ msgstr "" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "" -msgid "delegation" +msgid "self service permission" msgstr "" -msgid "delegations" +msgid "self service permissions" msgstr "" -msgid "Delegations" +msgid "Self Service Permissions" msgstr "" -msgid "Delegation" +msgid "Self Service Permission" msgstr "" #, python-format -msgid "Added delegation \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted delegation \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "Modified delegation \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" msgstr[0] "" msgstr[1] "" -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -#, fuzzy -#| msgid "domain is not configured" -msgid "attribute is not configurable" -msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - #, python-format msgid "all masters must have %(role)s role enabled" msgstr "" @@ -23285,25 +23289,6 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - msgid "Request must be a dict" msgstr "" @@ -23325,6 +23310,25 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #, python-format msgid "must equal %r" msgstr "" diff --git a/po/pl.po b/po/pl.po index 37ef35b31..3aefcdbc7 100644 --- a/po/pl.po +++ b/po/pl.po @@ -3,7 +3,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2020-09-27 10:31+0000\n" "Last-Translator: Piotr Drąg \n" "Language-Team: Polish =20) ? 1 : 2;\n" "X-Generator: Weblate 4.2.2\n" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "Nie można przetworzyć nazwy naczelnika\n" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "Usuwanie naczelnika %s\n" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "Otwarcie tablicy kluczy się nie powiodło\n" + +#, c-format +msgid "principal not found\n" +msgstr "nie odnaleziono naczelnika\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "Nie można usunąć wpisu\n" + +#, c-format +msgid "kvno %d\n" +msgstr "kvno %d\n" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to create control!\n" +msgid "Failed to set cursor '%1$s'\n" +msgstr "Utworzenie kontroli się nie powiodło.\n" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "Nie można przetworzyć naczelnika\n" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "principal not found\n" +msgid "realm not found\n" +msgstr "nie odnaleziono naczelnika\n" + +msgid "Print debugging information" +msgstr "Wyświetlanie informacji o debugowaniu" + +msgid "Debugging output" +msgstr "Wyjście debugowania" + +#, fuzzy +#| msgid "" +#| "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"Naczelnik, dla którego uzyskać tablicę kluczy (np.: ftp/ftp.example." +"com@EXAMPLE.COM)" + +msgid "Kerberos Service Principal Name" +msgstr "Nazwa naczelnika usługi Kerberos" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "Nazwa pliku tablicy kluczy" + +msgid "Remove all principals in this realm" +msgstr "Usuwa wszystkich naczelników w tym obszarze" + +msgid "Realm name" +msgstr "Nazwa obszaru" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "Zainicjowanie kontekstu Kerberosa się nie powiodło\n" + +#, fuzzy, c-format +#| msgid "Failed to open keytab\n" +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "Otwarcie tablicy kluczy się nie powiodło\n" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + #, c-format msgid "Out of memory!\n" msgstr "Brak pamięci.\n" @@ -297,107 +398,6 @@ msgstr "Nazwa komputera musi być w pełni kwalifikowana: %s\n" msgid "The hostname must not be: %s\n" msgstr "Nazwa komputera musi być w pełni kwalifikowana: %s\n" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "Nie można przetworzyć nazwy naczelnika\n" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "Usuwanie naczelnika %s\n" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "Otwarcie tablicy kluczy się nie powiodło\n" - -#, c-format -msgid "principal not found\n" -msgstr "nie odnaleziono naczelnika\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "Nie można usunąć wpisu\n" - -#, c-format -msgid "kvno %d\n" -msgstr "kvno %d\n" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -#| msgid "Failed to create control!\n" -msgid "Failed to set cursor '%1$s'\n" -msgstr "Utworzenie kontroli się nie powiodło.\n" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "Nie można przetworzyć naczelnika\n" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -#| msgid "principal not found\n" -msgid "realm not found\n" -msgstr "nie odnaleziono naczelnika\n" - -msgid "Print debugging information" -msgstr "Wyświetlanie informacji o debugowaniu" - -msgid "Debugging output" -msgstr "Wyjście debugowania" - -#, fuzzy -#| msgid "" -#| "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Naczelnik, dla którego uzyskać tablicę kluczy (np.: ftp/ftp.example." -"com@EXAMPLE.COM)" - -msgid "Kerberos Service Principal Name" -msgstr "Nazwa naczelnika usługi Kerberos" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "Nazwa pliku tablicy kluczy" - -msgid "Remove all principals in this realm" -msgstr "Usuwa wszystkich naczelników w tym obszarze" - -msgid "Realm name" -msgstr "Nazwa obszaru" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Zainicjowanie kontekstu Kerberosa się nie powiodło\n" - -#, fuzzy, c-format -#| msgid "Failed to open keytab\n" -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "Otwarcie tablicy kluczy się nie powiodło\n" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - #, c-format msgid "cannot open configuration file %s\n" msgstr "nie można otworzyć pliku konfiguracji %s\n" @@ -9722,6 +9722,113 @@ msgid "" "Establish bi-directional trust. By default trust is inbound one-way only." msgstr "" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +#| msgid "Group description" +msgid "Profile description" +msgstr "Opis grupy" + +#, fuzzy +#| msgid "A description of this role-group" +msgid "Brief description of this profile" +msgstr "Opis tej grupy rol" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Store issued certificates" +msgstr "Odrzuć certyfikat." + +msgid "Whether to store certs issued using this profile" +msgstr "" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Delete a Certificate Profile." +msgstr "Odrzuć certyfikat." + +msgid "Search for Certificate Profiles." +msgstr "" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Import a Certificate Profile." +msgstr "Odrzuć certyfikat." + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +#, fuzzy +#| msgid "cannot open configuration file %s\n" +msgid "Write profile configuration to file" +msgstr "nie można otworzyć pliku konfiguracji %s\n" + msgid "" "\n" "ID ranges\n" @@ -9934,113 +10041,6 @@ msgid "" " " msgstr "" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -#| msgid "Group description" -msgid "Profile description" -msgstr "Opis grupy" - -#, fuzzy -#| msgid "A description of this role-group" -msgid "Brief description of this profile" -msgstr "Opis tej grupy rol" - -#, fuzzy -#| msgid "Revoke a certificate." -msgid "Store issued certificates" -msgstr "Odrzuć certyfikat." - -msgid "Whether to store certs issued using this profile" -msgstr "" - -#, fuzzy -#| msgid "Revoke a certificate." -msgid "Delete a Certificate Profile." -msgstr "Odrzuć certyfikat." - -msgid "Search for Certificate Profiles." -msgstr "" - -#, fuzzy -#| msgid "Revoke a certificate." -msgid "Import a Certificate Profile." -msgstr "Odrzuć certyfikat." - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -#, fuzzy -#| msgid "cannot open configuration file %s\n" -msgid "Write profile configuration to file" -msgstr "nie można otworzyć pliku konfiguracji %s\n" - msgid "Remove users that can manage this token." msgstr "" @@ -12305,162 +12305,21 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "Additional instructions:" +msgid "Results are truncated, try a more specific search" msgstr "" +"Wyniki zostały obcięte, proszę spróbować bardziej konkretnego wyszukiwania" #, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" +msgid "Unknown option: %(option)s" msgstr "" -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." +msgid "Client version. Used to determine if server will accept request." msgstr "" -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" +msgid "any of the configured servers" msgstr "" -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "unknown error %(code)d from %(server)s: %(error)s" -msgid "DNS server %(server)s: %(error)s." -msgstr "nieznany błąd %(code)d z %(server)s: %(error)s" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." +msgid "Exceeded number of tries to forward a request." msgstr "" #, python-format @@ -12521,6 +12380,159 @@ msgstr "" msgid "No file to read" msgstr "" +msgid "incorrect type" +msgstr "niepoprawny typ" + +msgid "Only one value is allowed" +msgstr "Dozwolona jest tylko jedna wartość" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "musi być prawdą lub fałszem" + +msgid "must be an integer" +msgstr "musi być liczba całkowitą" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "musi wynosić co najmniej %(minvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "może wynosić co najwyżej %(maxvalue)d" + +msgid "must be a decimal number" +msgstr "musi być liczbą dziesiętną" + +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)d" +msgid "must be at least %(minvalue)s" +msgstr "musi wynosić co najmniej %(minvalue)d" + +#, fuzzy, python-format +#| msgid "can be at most %(maxvalue)d" +msgid "can be at most %(maxvalue)s" +msgstr "może wynosić co najwyżej %(maxvalue)d" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "musi pasować do wzorca „%(pattern)s”" + +msgid "must be binary data" +msgstr "musi być danymi binarnymi" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "musi wynosić co najmniej %(minlength)d bajtów" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "może wynosić co najwyżej %(maxlength)d bajtów" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "musi wynosić dokładnie %(length)d bajtów" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "must be a certificate" +msgstr "Odrzuć certyfikat." + +#, fuzzy +#| msgid "Failure decoding Certificate Signing Request: %s" +msgid "must be a certificate signing request" +msgstr "Dekodowanie żądania podpisywania certyfikatu się nie powiodło: %s" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "Dekodowanie żądania podpisywania certyfikatu się nie powiodło: %s" + +msgid "must be Unicode text" +msgstr "musi być tekstem w unikodzie" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "musi wynosić co najmniej %(minlength)d znaków" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "może wynosić co najwyżej %(maxlength)d znaków" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "musi wynosić dokładnie %(length)d znaków" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Found '%(value)s'" +msgid "must be '%(value)s'" +msgstr "Odnaleziono „%(value)s”" + +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)d" +msgid "must be one of %(values)s" +msgstr "musi wynosić co najmniej %(minvalue)d" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be datetime value" +msgstr "musi wynosić co najmniej %(minvalue)d" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be DNS name" +msgstr "musi być liczba całkowitą" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be absolute" +msgstr "musi być liczba całkowitą" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be relative" +msgstr "musi być prawdą lub fałszem" + +#, fuzzy +#| msgid "must be binary data" +msgid "must be dictionary" +msgstr "musi być danymi binarnymi" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "must be Kerberos principal" +msgstr "Naczelnik Kerberosa" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Malformed principal: '%(value)s'" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy +#| msgid "Service principal" +msgid "Service principal is required" +msgstr "Naczelnik usługi" + msgid "A dictionary representing an LDAP entry" msgstr "Słownik reprezentujący wpis LDAP" @@ -12530,17 +12542,6 @@ msgstr "Lista wpisów LDAP" msgid "All commands should at least have a result" msgstr "Wszystkie polecenia powinny powiadać przynajmniej wynik" -msgid "Results are truncated, try a more specific search" -msgstr "" -"Wyniki zostały obcięte, proszę spróbować bardziej konkretnego wyszukiwania" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" @@ -12919,173 +12920,162 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" -msgid "incorrect type" -msgstr "niepoprawny typ" - -msgid "Only one value is allowed" -msgstr "Dozwolona jest tylko jedna wartość" - -msgid "this option is deprecated" +msgid "Additional instructions:" msgstr "" -msgid "must be True or False" -msgstr "musi być prawdą lub fałszem" - -msgid "must be an integer" -msgstr "musi być liczba całkowitą" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "musi wynosić co najmniej %(minvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "może wynosić co najwyżej %(maxvalue)d" - -msgid "must be a decimal number" -msgstr "musi być liczbą dziesiętną" - -#, fuzzy, python-format -#| msgid "must be at least %(minvalue)d" -msgid "must be at least %(minvalue)s" -msgstr "musi wynosić co najmniej %(minvalue)d" - -#, fuzzy, python-format -#| msgid "can be at most %(maxvalue)d" -msgid "can be at most %(maxvalue)s" -msgstr "może wynosić co najwyżej %(maxvalue)d" - #, python-format msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." msgstr "" #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "musi pasować do wzorca „%(pattern)s”" - -msgid "must be binary data" -msgstr "musi być danymi binarnymi" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "musi wynosić co najmniej %(minlength)d bajtów" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "może wynosić co najwyżej %(maxlength)d bajtów" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "musi wynosić dokładnie %(length)d bajtów" - -#, fuzzy -#| msgid "Revoke a certificate." -msgid "must be a certificate" -msgstr "Odrzuć certyfikat." - -#, fuzzy -#| msgid "Failure decoding Certificate Signing Request: %s" -msgid "must be a certificate signing request" -msgstr "Dekodowanie żądania podpisywania certyfikatu się nie powiodło: %s" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "Dekodowanie żądania podpisywania certyfikatu się nie powiodło: %s" - -msgid "must be Unicode text" -msgstr "musi być tekstem w unikodzie" - -msgid "Leading and trailing spaces are not allowed" +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" msgstr "" #, python-format -msgid "must be at least %(minlength)d characters" -msgstr "musi wynosić co najmniej %(minlength)d znaków" +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" #, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "może wynosić co najwyżej %(maxlength)d znaków" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "musi wynosić dokładnie %(length)d znaków" - -#, python-format -msgid "The character %(char)r is not allowed." +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" msgstr "" #, fuzzy, python-format -#| msgid "Found '%(value)s'" -msgid "must be '%(value)s'" -msgstr "Odnaleziono „%(value)s”" +#| msgid "unknown error %(code)d from %(server)s: %(error)s" +msgid "DNS server %(server)s: %(error)s." +msgstr "nieznany błąd %(code)d z %(server)s: %(error)s" -#, fuzzy, python-format -#| msgid "must be at least %(minvalue)d" -msgid "must be one of %(values)s" -msgstr "musi wynosić co najmniej %(minvalue)d" - -#, fuzzy -#| msgid "must be at least %(minvalue)d" -msgid "must be datetime value" -msgstr "musi wynosić co najmniej %(minvalue)d" - -msgid "does not match any of accepted formats: " +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" -msgid "incomplete time value" +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." msgstr "" -#, fuzzy -#| msgid "must be an integer" -msgid "must be DNS name" -msgstr "musi być liczba całkowitą" - -#, fuzzy -#| msgid "must be an integer" -msgid "must be absolute" -msgstr "musi być liczba całkowitą" - -#, fuzzy -#| msgid "must be True or False" -msgid "must be relative" -msgstr "musi być prawdą lub fałszem" - -#, fuzzy -#| msgid "must be binary data" -msgid "must be dictionary" -msgstr "musi być danymi binarnymi" - -#, fuzzy -#| msgid "Kerberos principal" -msgid "must be Kerberos principal" -msgstr "Naczelnik Kerberosa" - -#, fuzzy, python-format -#| msgid "Modified service \"%(value)s\"" -msgid "Malformed principal: '%(value)s'" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy -#| msgid "Service principal" -msgid "Service principal is required" -msgstr "Naczelnik usługi" - -#, fuzzy, python-format -#| msgid "File %(file)s not found" -msgid "%(filename)s: file not found" -msgstr "Nie odnaleziono pliku %(file)s" - -#, fuzzy, python-brace-format -#| msgid "Unable to parse principal\n" -msgid "Unable to parse option {item}" -msgstr "Nie można przetworzyć naczelnika\n" - -msgid "any of the configured servers" +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" -msgid "Exceeded number of tries to forward a request." +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." msgstr "" msgid "Filename is empty" @@ -13192,6 +13182,21 @@ msgstr "" msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "%(filename)s: file not found" +msgstr "Nie odnaleziono pliku %(file)s" + +#, fuzzy, python-brace-format +#| msgid "Unable to parse principal\n" +msgid "Unable to parse option {item}" +msgstr "Nie można przetworzyć naczelnika\n" + +#, fuzzy, python-format +#| msgid "Host '%(host)s' not found" +msgid "objectclass %s not found" +msgstr "Nie odnaleziono komputera „%(host)s”" + #, python-format msgid "Retrieving CA cert chain failed: %s" msgstr "" @@ -13208,11 +13213,6 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" -#, fuzzy, python-format -#| msgid "Host '%(host)s' not found" -msgid "objectclass %s not found" -msgstr "Nie odnaleziono komputera „%(host)s”" - #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" @@ -13382,129 +13382,10 @@ msgstr[0] "Pasuje %(count)d komputer" msgstr[1] "Pasuje %(count)d komputery" msgstr[2] "Pasuje %(count)d komputerów" +#, python-format msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -#, fuzzy -#| msgid "DNS is not configured" -msgid "CA is not configured" -msgstr "DNS nie jest skonfigurowany" - -msgid "invalid Profile ID" -msgstr "" - -#, fuzzy -#| msgid "Certificate Revoked" -msgid "Certificate Profile" -msgstr "Odrzucono certyfikat" - -#, fuzzy -#| msgid "Certificate Revoked" -msgid "Certificate Profiles" -msgstr "Odrzucono certyfikat" - -#, fuzzy -#| msgid "Configuration" -msgid "Profile configuration" -msgstr "Konfiguracja" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Imported profile \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted profile \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified service \"%(value)s\"" -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy -#| msgid "Certificate operation cannot be completed: %(error)s" -msgid "Certificate profiles cannot be renamed" -msgstr "Nie można ukończyć działania na certyfikacie: %(error)s" - -msgid "Insufficient privilege to modify a certificate profile." +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "" @@ -13751,22 +13632,4608 @@ msgstr "" msgid "%i CAs removed." msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(pkey)s: %(oname)s not found" +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(pkey)s: nie odnaleziono %(oname)s" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added automember rule \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy +#| msgid "DNS is not configured" +msgid "Auto Membership is not configured" +msgstr "DNS nie jest skonfigurowany" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "ACI with name \"%s\" not found" +msgid "Auto member rule: %s not found!" +msgstr "Nie odnaleziono ACI o nazwie „%s”" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted hostgroup \"%(value)s\"" +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Usunięto grupę komputerów „%(value)s”" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified automember rule \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Usunięto użytkownika „%(value)s”" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "Pasuje %(count)d użytkownik" +msgstr[1] "Pasuje %(count)d użytkowników" +msgstr[2] "Pasuje %(count)d użytkowników" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +#, fuzzy +#| msgid "member %s" +msgid "Automember" +msgstr "członek %s" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +#| msgid "Groups" +msgid "groups" +msgstr "Grupy" + +#, fuzzy +#| msgid "User Groups" +msgid "User Group" +msgstr "Grupy użytkowników" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Dodano grupę „%(value)s”" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +#, fuzzy +#| msgid "Target group" +msgid "privileged group" +msgstr "Grupa docelowa" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Zmodyfikowano grupę „%(value)s”" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "Pasuje %(count)d grupa" +msgstr[1] "Pasują %(count)d grupy" +msgstr[2] "Pasuje %(count)d grup" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" + +msgid "not allowed to modify user entries" +msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" + +msgid "not allowed to modify group entries" +msgstr "modyfikowanie wpisów grup nie jest dozwolone" + +msgid "Not a managed group" +msgstr "Nie jest zarządzaną grupą" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "" +"\n" +"DNS server configuration\n" +msgstr "Konfiguracja" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "DNS Servers" +msgstr "Usługi" + +msgid "DNS Server" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "DNS Server name" +msgstr "Nazwa serwera" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "DNS is not configured" +msgstr "DNS nie jest skonfigurowany" + +msgid "Modify DNS server configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified DNS server \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +msgid "Search for DNS servers." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA DNS Server is not installed" +msgstr "Serwer IPA do użycia" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +msgid "Delete a DNS server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "HBAC services" +msgstr "Usługi" + +#, fuzzy +#| msgid "Services" +msgid "HBAC Services" +msgstr "Usługi" + +#, fuzzy +#| msgid "Services" +msgid "HBAC Service" +msgstr "Usługi" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added HBAC service \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified HBAC service \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC service group" +msgstr "Opis grupy usługi HBAC" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC service groups" +msgstr "Opis grupy usługi HBAC" + +#, fuzzy +#| msgid "Service Groups" +msgid "HBAC Service Groups" +msgstr "Grupy usług" + +#, fuzzy +#| msgid "Service Groups" +msgid "HBAC Service Group" +msgstr "Grupy usług" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be TRUE or FALSE" +msgstr "musi być prawdą lub fałszem" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +#, fuzzy +#| msgid "Principal name" +msgid "Principal alias" +msgstr "Nazwa naczelnika" + +#, fuzzy +#| msgid "User password" +msgid "User password expiration" +msgstr "Hasło użytkownika" + +msgid "SSH public key fingerprint" +msgstr "" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Base-64 encoded user certificate" +msgstr "Certyfikat serwera zakodowany za pomocą Base-64" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate mapping data" +msgstr "Certyfikat" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +#, fuzzy +#| msgid "Home directory" +msgid "SMB Home Directory" +msgstr "Katalog domowy" + +#, fuzzy +#| msgid "Home directory base" +msgid "SMB Home Directory Drive" +msgstr "Podstawa katalogu domowego" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "manager %(manager)s not found" +msgstr "%(parent)s: nie odnaleziono %(oname)s" + +#, fuzzy, python-format +#| msgid "can be at most %(maxlength)d characters" +msgid "can be at most %(len)d characters" +msgstr "może wynosić co najwyżej %(maxlength)d znaków" + +msgid "Issuer" +msgstr "Wydawca" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Issuer of the certificate" +msgstr "Odrzuć certyfikat." + +msgid "Subject" +msgstr "Temat" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Subject of the certificate" +msgstr "Odrzuć certyfikat." + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "File %(file)s not found" +msgid "{role}: role not found" +msgstr "Nie odnaleziono pliku %(file)s" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added segment \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted segment \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified segment \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Found '%(value)s'" +msgid "%(value)s" +msgstr "Odnaleziono „%(value)s”" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" +"Naczelnik Kerberosa %s już istnieje. Należy użyć polecenia „ipa user-mod”, " +"aby ustawić go ręcznie." + +#, fuzzy, python-format +#| msgid "" +#| "Kerberos principal %s already exists. Use 'ipa user-mod' to set it " +#| "manually." +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" +"Naczelnik Kerberosa %s już istnieje. Należy użyć polecenia „ipa user-mod”, " +"aby ustawić go ręcznie." + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" +"Dodanie użytkownika do domyślnej grupy się nie powiodło. Należy użyć " +"polecenia „ipa group-add-member”, aby dodać go ręcznie." + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +#, fuzzy +#| msgid "LDAP URI" +msgid "Invalid LDAP URI." +msgstr "Adres URI LDAP" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +#, fuzzy +#| msgid "Default group for new users" +msgid "Default group for new users not found" +msgstr "Domyślna grupa dla nowych użytkowników" + +#, fuzzy +#| msgid "Netgroups" +msgid "netgroups" +msgstr "Grupy sieciowe" + +msgid "Netgroups" +msgstr "Grupy sieciowe" + +#, fuzzy +#| msgid "Netgroups" +msgid "Netgroup" +msgstr "Grupy sieciowe" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added netgroup \"%(value)s\"" +msgstr "Dodano grupę „%(value)s”" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified netgroup \"%(value)s\"" +msgstr "Zmodyfikowano grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "Pasuje %(count)d grupa" +msgstr[1] "Pasują %(count)d grupy" +msgstr[2] "Pasuje %(count)d grup" + +msgid "One time password commands" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "OTP configuration options" +msgstr "Konfiguracja" + +#, fuzzy +#| msgid "Configuration" +msgid "OTP Configuration" +msgstr "Konfiguracja" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Zmieniono hasło dla „%(value)s”" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "invalid port number" +msgstr "Numer seryjny" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added privilege \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted privilege \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified privilege \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" +"priorytet musi być unikalną wartością (%(prio)d jest już używane przez " +"%(gname)s)" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Password Policy" +msgid "password policy" +msgstr "Polityka haseł" + +#, fuzzy +#| msgid "Password Policy" +msgid "password policies" +msgstr "Polityka haseł" + +#, fuzzy +#| msgid "Password Policy" +msgid "Password Policies" +msgstr "Polityka haseł" + +msgid "Password Policy" +msgstr "Polityka haseł" + +#, fuzzy +#| msgid "Max renew" +msgid "Max repeat" +msgstr "Maksymalne odnowienie" + +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of same consecutive characters" +msgstr "Maksymalna liczba zwróconych wpisów" + +#, fuzzy +#| msgid "Max renew" +msgid "Max sequence" +msgstr "Maksymalne odnowienie" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "Nazwa użytkownika" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "Maksymalny czas życia hasła musi być wyższy niż minimalny." + +#, fuzzy +#| msgid "priority cannot be set on global policy" +msgid "cannot delete global password policy" +msgstr "nie można ustawiać priorytetu dla globalnej polityki" + +msgid "priority cannot be set on global policy" +msgstr "nie można ustawiać priorytetu dla globalnej polityki" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +#, fuzzy +#| msgid "Realm name" +msgid "Realm domains" +msgstr "Nazwa obszaru" + +#, fuzzy +#| msgid "Realm name" +msgid "Realm Domains" +msgstr "Nazwa obszaru" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Member principals" +msgstr "Naczelnik Kerberosa" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "członek %s" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +#, fuzzy +#| msgid "Service category" +msgid "Service delegation rules" +msgstr "Kategoria usług" + +#, fuzzy +#| msgid "Service category" +msgid "Service delegation rule" +msgstr "Kategoria usług" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "privileged service delegation rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +#, fuzzy +#| msgid "Service group name" +msgid "Service delegation target" +msgstr "Nazwa grupy usługi" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "privileged service delegation target" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Users" +msgid "Stage Users" +msgstr "Użytkownicy" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +#, fuzzy +#| msgid "Member users" +msgid "stage users" +msgstr "Elementy użytkowników" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added stage user \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted stage user \"%(value)s\"" +msgstr "Usunięto użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified stage user \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "Pasuje %(count)d użytkownik" +msgstr[1] "Pasuje %(count)d użytkowników" +msgstr[2] "Pasuje %(count)d użytkowników" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Activate a stage user \"%(value)s\"" +msgstr "Usunięto użytkownika „%(value)s”" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "DNS is not configured" +msgid "CA is not configured" +msgstr "DNS nie jest skonfigurowany" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Host '%(host)s' not found" +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "Nie odnaleziono komputera „%(host)s”" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Base-64 encoded certificate." +msgstr "Certyfikat serwera zakodowany za pomocą Base-64" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate chain" +msgstr "Certyfikat" + +msgid "X.509 certificate chain" +msgstr "" + +#, fuzzy +#| msgid "Email address" +msgid "Subject email address" +msgstr "Adres e-mail" + +#, fuzzy +#| msgid "Subject" +msgid "Subject DNS name" +msgstr "Temat" + +#, fuzzy +#| msgid "Street address" +msgid "Subject X.400 address" +msgstr "Adres zamieszkania" + +#, fuzzy +#| msgid "Home directory base" +msgid "Subject directory name" +msgstr "Podstawa katalogu domowego" + +msgid "Subject EDI Party name" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject URI" +msgstr "Temat" + +#, fuzzy +#| msgid "Street address" +msgid "Subject IP Address" +msgstr "Adres zamieszkania" + +#, fuzzy +#| msgid "Subject" +msgid "Subject OID" +msgstr "Temat" + +#, fuzzy +#| msgid "Subject" +msgid "Subject UPN" +msgstr "Temat" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Subject Kerberos principal name" +msgstr "Naczelnik Kerberosa" + +#, fuzzy +#| msgid "Server Name" +msgid "Subject Other Name" +msgstr "Nazwa serwera" + +#, fuzzy +#| msgid "Issuer" +msgid "Issuer DN" +msgstr "Wydawca" + +msgid "Not Before" +msgstr "Nie wcześniej" + +msgid "Not After" +msgstr "Nie po" + +msgid "Fingerprint (SHA1)" +msgstr "Odcisk (SHA1)" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "Fingerprint (SHA256)" +msgstr "Odcisk (SHA1)" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial number (hex)" +msgstr "Numer seryjny" + +msgid "Request status" +msgstr "Stan żądania" + +msgid "Include certificate chain in output" +msgstr "" + +#, fuzzy +#| msgid "automatically add the principal if it doesn't exist" +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "automatycznie dodaj naczelnika, jeśli nie istnieje" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +#, fuzzy +#| msgid "automatically add the principal if it doesn't exist" +msgid "The principal for this request doesn't exist." +msgstr "automatycznie dodaj naczelnika, jeśli nie istnieje" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "Stan" + +msgid "Revoked" +msgstr "Unieważniono" + +msgid "Revocation reason" +msgstr "Przyczyna unieważnienia" + +#, fuzzy +#| msgid "Reason for revoking the certificate (0-10)" +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "Przyczyna unieważnienia certyfikatu (0-10)" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +#, fuzzy +#| msgid "Revocation reason" +msgid "7 is not a valid revocation reason" +msgstr "Przyczyna unieważnienia" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command" +msgid "sudo command" +msgstr "Polecenie sudo" + +#, fuzzy +#| msgid "Sudo Command" +msgid "sudo commands" +msgstr "Polecenie sudo" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Sudo Commands" +msgstr "Polecenie sudo" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Usunięto ACI „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Zmodyfikowano ACI „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d ACI matched" +#| msgid_plural "%(count)d ACIs matched" +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "Pasuje %(count)d ACI" +msgstr[1] "Pasują %(count)d ACI" +msgstr[2] "Pasuje %(count)d ACI" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" +"priorytet musi być unikalną wartością (%(prio)d jest już używane przez " +"%(gname)s)" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Usunięto użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +#, fuzzy +#| msgid "Users" +msgid "users" +msgstr "Użytkownicy" + +#, fuzzy +#| msgid "Commands" +msgid "command" +msgstr "Polecenia" + +#, fuzzy +#| msgid "Commands" +msgid "commands" +msgstr "Polecenia" + +msgid "runAs user" +msgstr "" + +#, fuzzy +#| msgid "Member users" +msgid "runAs users" +msgstr "Elementy użytkowników" + +#, fuzzy +#| msgid "Netgroups" +msgid "group runAs" +msgstr "Grupy sieciowe" + +#, fuzzy +#| msgid "Member groups" +msgid "runAs groups" +msgstr "Elementy grupy" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "Pasuje %(count)d użytkownik" +msgstr[1] "Pasuje %(count)d użytkowników" +msgstr[2] "Pasuje %(count)d użytkowników" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, fuzzy, python-format +#| msgid "not allowed to modify group entries" +msgid "not allowed to perform operation: %s" +msgstr "modyfikowanie wpisów grup nie jest dozwolone" + +msgid "No such virtual command" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "sudo command group" +msgstr "Grupy polecenia sudo" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "sudo command groups" +msgstr "Grupy polecenia sudo" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Dodano grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Zmodyfikowano grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "Pasuje %(count)d grupa" +msgstr[1] "Pasują %(count)d grupy" +msgstr[2] "Pasuje %(count)d grup" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +#, fuzzy +#| msgid "Group description" +msgid "Trust direction" +msgstr "Opis grupy" + +#, fuzzy +#| msgid "Rule type" +msgid "Trust type" +msgstr "Typ reguły" + +#, fuzzy +#| msgid "Request status" +msgid "Trust status" +msgstr "Stan żądania" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +#, fuzzy +#| msgid "External host" +msgid "External trust" +msgstr "Zewnętrzny komputer" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Wyłączono konto użytkownika „%(value)s”" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +#, fuzzy +#| msgid "Rule type" +msgid "trust type" +msgstr "Typ reguły" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " msgstr "" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." msgstr "" +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted trust \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +#, fuzzy +#| msgid "Configuration" +msgid "trust configuration" +msgstr "Konfiguracja" + +#, fuzzy +#| msgid "Configuration" +msgid "Global Trust Configuration" +msgstr "Konfiguracja" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +#, fuzzy +#| msgid "Supported encryption types:\n" +msgid "unsupported trust type" +msgstr "Obsługiwane typy szyfrowania:\n" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified \"%(value)s\" trust configuration" +msgstr "Zmodyfikowano ACI „%(value)s”" + +#, fuzzy +#| msgid "Host Name" +msgid "Name" +msgstr "Nazwa komputera" + +#, fuzzy +#| msgid "GID" +msgid "SID" +msgstr "GID" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "Domain enabled" +msgstr "Nazwa domeny NIS" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +#, fuzzy +#| msgid "not allowed to modify user entries" +msgid "not allowed to remotely add agent" +msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" + +#, fuzzy, python-format +#| msgid "Enabled user account \"%(value)s\"" +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Wyłączono konto użytkownika „%(value)s”" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "" +"\n" +"IPA server roles\n" +msgstr "Serwer IPA do użycia" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "server role" +msgstr "Nazwa serwera" + +#, fuzzy +#| msgid "Server Name" +msgid "server roles" +msgstr "Nazwa serwera" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA Server Roles" +msgstr "Serwer IPA do użycia" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA Server Role" +msgstr "Serwer IPA do użycia" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA server role name" +msgstr "Serwer IPA do użycia" + +#, fuzzy +#| msgid "Request status" +msgid "Role status" +msgstr "Stan żądania" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "Include IPA master entries" +msgstr "" + +#, fuzzy +#| msgid "Roles" +msgid "roles" +msgstr "Role" + +#, fuzzy +#| msgid "Rule name" +msgid "IPA role name" +msgstr "Nazwa reguły" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Group container" +msgid "vaultcontainer" +msgstr "Kontener grupy" + +#, fuzzy +#| msgid "Group container" +msgid "vaultcontainers" +msgstr "Kontener grupy" + +#, fuzzy +#| msgid "Group container" +msgid "Vault Containers" +msgstr "Kontener grupy" + +#, fuzzy +#| msgid "Group container" +msgid "Vault Container" +msgstr "Kontener grupy" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +#, fuzzy +#| msgid "Configuration" +msgid "Vault configuration" +msgstr "Konfiguracja" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA KRA servers" +msgstr "Serwer IPA do użycia" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Archived data into vault \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +msgid "Retrieve data from a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +#, fuzzy +#| msgid "Certificate Revoked" +msgid "Certificate Profile" +msgstr "Odrzucono certyfikat" + +#, fuzzy +#| msgid "Certificate Revoked" +msgid "Certificate Profiles" +msgstr "Odrzucono certyfikat" + +#, fuzzy +#| msgid "Configuration" +msgid "Profile configuration" +msgstr "Konfiguracja" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Imported profile \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted profile \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy +#| msgid "Certificate operation cannot be completed: %(error)s" +msgid "Certificate profiles cannot be renamed" +msgstr "Nie można ukończyć działania na certyfikacie: %(error)s" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "Host Groups" +msgid "host groups" +msgstr "Grupy komputerów" + +#, fuzzy +#| msgid "Host Groups" +msgid "Host Group" +msgstr "Grupy komputerów" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Dodano grupę komputerów „%(value)s”" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Usunięto grupę komputerów „%(value)s”" + +#, fuzzy +#| msgid "Host-group" +msgid "hostgroup" +msgstr "Grupa komputerów" + +#, fuzzy +#| msgid "Member host-groups" +msgid "privileged hostgroup" +msgstr "Element grupy komputerów" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Zmodyfikowano grupę komputerów „%(value)s”" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "Pasuje %(count)d grupa komputerów" +msgstr[1] "Pasują %(count)d grupy komputerów" +msgstr[2] "Pasuje %(count)d grup komputerów" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +#, fuzzy +#| msgid "Kerberos Ticket Policy" +msgid "kerberos ticket policy settings" +msgstr "Polityka zgłoszeń Kerberosa" + +msgid "Kerberos Ticket Policy" +msgstr "Polityka zgłoszeń Kerberosa" + +#, fuzzy +#| msgid "Max life" +msgid "OTP max life" +msgstr "Maksymalny czas życia" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "OTP token maximum ticket life (seconds)" +msgstr "Minimalny czas życia zgłoszenia (sekundy)" + +#, fuzzy +#| msgid "Max renew" +msgid "OTP max renew" +msgstr "Maksymalne odnowienie" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" + +#, fuzzy +#| msgid "Max life" +msgid "RADIUS max life" +msgstr "Maksymalny czas życia" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "RADIUS maximum ticket life (seconds)" +msgstr "Minimalny czas życia zgłoszenia (sekundy)" + +#, fuzzy +#| msgid "Max renew" +msgid "RADIUS max renew" +msgstr "Maksymalne odnowienie" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" + +#, fuzzy +#| msgid "Max life" +msgid "PKINIT max life" +msgstr "Maksymalny czas życia" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "PKINIT maximum ticket life (seconds)" +msgstr "Minimalny czas życia zgłoszenia (sekundy)" + +#, fuzzy +#| msgid "Max renew" +msgid "PKINIT max renew" +msgstr "Maksymalne odnowienie" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" + +msgid "Hardened max life" +msgstr "" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "Minimalny czas życia zgłoszenia (sekundy)" + +msgid "Hardened max renew" +msgstr "" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "" +"\n" +"IPA locations\n" +msgstr "Położenie" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "location" +msgstr "Położenie" + +#, fuzzy +#| msgid "Location" +msgid "locations" +msgstr "Położenie" + +#, fuzzy +#| msgid "Location" +msgid "IPA Locations" +msgstr "Położenie" + +#, fuzzy +#| msgid "Location" +msgid "IPA Location" +msgstr "Położenie" + +#, fuzzy +#| msgid "Location" +msgid "Location name" +msgstr "Położenie" + +#, fuzzy +#| msgid "NIS domain name" +msgid "IPA location name" +msgstr "Nazwa domeny NIS" + +#, fuzzy +#| msgid "Netgroup description" +msgid "IPA Location description" +msgstr "Opis grupy sieciowej" + +#, fuzzy +#| msgid "Services" +msgid "Servers" +msgstr "Usługi" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added IPA location \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +msgid "Delete an IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA Server" +msgstr "Serwer IPA do użycia" + +msgid "Modify information about an IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified IPA location \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +msgid "Search for IPA locations." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +#, fuzzy +#| msgid "Roles" +msgid "Role" +msgstr "Role" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added role \"%(value)s\"" +msgstr "Dodano grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted role \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified role \"%(value)s\"" +msgstr "Zmodyfikowano grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "Pasuje %(count)d grupa" +msgstr[1] "Pasują %(count)d grupy" +msgstr[2] "Pasuje %(count)d grup" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy +#| msgid "Default group for new users" +msgid "Default group for new users is not POSIX" +msgstr "Domyślna grupa dla nowych użytkowników" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Usunięto użytkownika „%(value)s”" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Enabled user account \"%(value)s\"" +msgid "Undeleted user account \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, fuzzy, python-format +#| msgid "Enabled user account \"%(value)s\"" +msgid "Staged user account \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "Wyłączono konto użytkownika „%(value)s”" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, fuzzy, python-format +#| msgid "Enabled user account \"%(value)s\"" +msgid "Unlocked account \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +#, fuzzy +#| msgid "User login" +msgid "Failed logins" +msgstr "Login użytkownika" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +#, fuzzy +#| msgid "Time to live" +msgid "Time now" +msgstr "Czas życia" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "fork() failed\n" +msgid "%(host)s failed" +msgstr "fork() się nie powiodło\n" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to user \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy +#| msgid "Remove all principals in this realm" +msgid "Remove principal alias from the user entry" +msgstr "Usuwa wszystkich naczelników w tym obszarze" + +#, fuzzy, python-format +#| msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +#, fuzzy +#| msgid "UID" +msgid "URI" +msgstr "UID" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added OTP token \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +msgid "cannot be empty" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified OTP token \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +msgid "A list of ACI values" +msgstr "Lista wartości ACI" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" +"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"co najmniej jedna z wartości: „type”, „filter”, „subtree”, „targetgroup”, " +"„attrs” lub „memberof” jest wymagana" + +#, fuzzy +#| msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgid "filter and memberof are mutually exclusive" +msgstr "" +"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" + +#, fuzzy +#| msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgid "group, permission and self are mutually exclusive" +msgstr "" +"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "Grupa „%s” nie istnieje" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Błąd składni: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "Nie odnaleziono ACI o nazwie „%s”" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "ACI" + +#, fuzzy +#| msgid "ACIs" +msgid "ACI" +msgstr "ACI" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "Utworzono ACI „%(value)s”" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "Usunięto ACI „%(value)s”" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "Zmodyfikowano ACI „%(value)s”" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "Pasuje %(count)d ACI" +msgstr[1] "Pasują %(count)d ACI" +msgstr[2] "Pasuje %(count)d ACI" + +#, fuzzy, python-format +#| msgid "Created ACI \"%(value)s\"" +msgid "Renamed ACI to \"%(value)s\"" +msgstr "Utworzono ACI „%(value)s”" + msgid "" "\n" "Domain Name System (DNS)\n" @@ -14314,9 +18781,6 @@ msgstr "" msgid "Managedby permission" msgstr "" -msgid "DNS is not configured" -msgstr "DNS nie jest skonfigurowany" - msgid "cannot be used when a zone is specified" msgstr "" @@ -14563,1484 +19027,575 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + #, fuzzy -#| msgid "Configuration" +#| msgid "LDAP schema" msgid "" "\n" -"DNS server configuration\n" -msgstr "Konfiguracja" +"API Schema\n" +msgstr "Schemat LDAP" msgid "" "\n" -"Manipulate DNS server configuration\n" +"Provides API introspection capabilities.\n" msgstr "" msgid "" "\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" +" Show user-find details:\n" +" ipa command-show user-find\n" msgstr "" msgid "" "\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" +" Find user-find parameters:\n" +" ipa param-find user-find\n" msgstr "" #, fuzzy -#| msgid "Services" -msgid "DNS Servers" -msgstr "Usługi" +#| msgid "Location" +msgid "Documentation" +msgstr "Położenie" -msgid "DNS Server" +msgid "Exclude from" msgstr "" -#, fuzzy -#| msgid "Server Name" -msgid "DNS Server name" -msgstr "Nazwa serwera" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified service \"%(value)s\"" -msgid "Modified DNS server \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -msgid "Search for DNS servers." -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA DNS Server is not installed" -msgstr "Serwer IPA do użycia" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added new DNS server \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -msgid "Delete a DNS server" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -msgid "REST API is not logged in." +msgid "Include in" msgstr "" #, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgid "Results should contain primary key attribute only (\"%s\")" msgstr "" -msgid "Unable to communicate with CMS" +msgid "Help topic" msgstr "" -msgid "Response from CA was not valid JSON" +#, fuzzy +#| msgid "Permissions" +msgid "Version" +msgstr "Uprawnienia" + +msgid "Parameters" msgstr "" -msgid "Host-based access control commands" +msgid "Method of" msgstr "" +#, fuzzy +#| msgid "Netgroup name" +msgid "Method name" +msgstr "Nazwa grupy sieciowej" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s: nie odnaleziono %(oname)s" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +#, fuzzy +#| msgid "Character classes" +msgid "Search for classes." +msgstr "Klasy znaków" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +#, fuzzy +#| msgid "Request id" +msgid "Required" +msgstr "Identyfikator żądania" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "CLI name" +msgstr "Nazwa ACI" + +#, fuzzy +#| msgid "User password" +msgid "Confirm (password)" +msgstr "Hasło użytkownika" + +#, fuzzy +#| msgid "Default shell" +msgid "Default" +msgstr "Domyślna powłoka" + +#, fuzzy +#| msgid "Default users group" +msgid "Default from" +msgstr "Domyślna grupa użytkowników" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(parent)s: nie odnaleziono %(oname)s" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(parent)s: nie odnaleziono %(oname)s" + +msgid "Display information about a command output." +msgstr "" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "Search for command outputs." +msgstr "Grupy polecenia sudo" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "Member service groups" +msgstr "Grupy usługi elementów" + +#, fuzzy +#| msgid "Member service groups" +msgid "Member HBAC service groups" +msgstr "Grupy usługi elementów" + +#, fuzzy +#| msgid "Member services" +msgid "Member ID user overrides" +msgstr "Usługi elementów" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +#, fuzzy +#| msgid "Member services" +msgid "Indirect Member HBAC service" +msgstr "Usługi elementów" + +#, fuzzy +#| msgid "Member service groups" +msgid "Indirect Member HBAC service group" +msgstr "Grupy usługi elementów" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "nie odnaleziono wpisu kontenera (%(container)s)" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s: nie odnaleziono %(oname)s" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +#, fuzzy +#| msgid "DNS is not configured" +msgid "attribute is not configurable" +msgstr "DNS nie jest skonfigurowany" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "wpis został usunięty podczas modyfikowania" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." msgstr "" -#, fuzzy -#| msgid "Services" -msgid "HBAC services" -msgstr "Usługi" - -#, fuzzy -#| msgid "Services" -msgid "HBAC Services" -msgstr "Usługi" - -#, fuzzy -#| msgid "Services" -msgid "HBAC Service" -msgstr "Usługi" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added HBAC service \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, fuzzy, python-format -#| msgid "Modified service \"%(value)s\"" -msgid "Modified HBAC service \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, fuzzy -#| msgid "HBAC service group description" -msgid "HBAC service group" -msgstr "Opis grupy usługi HBAC" - -#, fuzzy -#| msgid "HBAC service group description" -msgid "HBAC service groups" -msgstr "Opis grupy usługi HBAC" - -#, fuzzy -#| msgid "Service Groups" -msgid "HBAC Service Groups" -msgstr "Grupy usług" - -#, fuzzy -#| msgid "Service Groups" -msgid "HBAC Service Group" -msgstr "Grupy usług" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, fuzzy, python-format -#| msgid "Modified service \"%(value)s\"" -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - +#, python-format msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -#, fuzzy -#| msgid "Users" -msgid "Stage Users" -msgstr "Użytkownicy" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -#, fuzzy -#| msgid "Member users" -msgid "stage users" -msgstr "Elementy użytkowników" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added stage user \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, fuzzy, python-format -#| msgid "can be at most %(maxlength)d characters" -msgid "can be at most %(len)d characters" -msgstr "może wynosić co najwyżej %(maxlength)d znaków" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted stage user \"%(value)s\"" -msgstr "Usunięto użytkownika „%(value)s”" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified stage user \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "Pasuje %(count)d użytkownik" -msgstr[1] "Pasuje %(count)d użytkowników" -msgstr[2] "Pasuje %(count)d użytkowników" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Activate a stage user \"%(value)s\"" -msgstr "Usunięto użytkownika „%(value)s”" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -msgid "Remove principal alias from the stageuser entry" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." msgstr "" #, fuzzy, python-format #| msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgid "Removed aliases from stageuser \"%(value)s\"" +msgid "added attribute value to entry %(value)s" msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" -msgid "Add one or more certificate mappings to the stage user entry." +#, fuzzy, python-format +#| msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "removed attribute values from entry %(value)s" +msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" + +msgid "one or more values to remove" msgstr "" -msgid "Remove one or more certificate mappings from the stage user entry." +msgid "The deny type has been deprecated." msgstr "" -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" +msgid "HBAC rules" msgstr "" -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" +msgid "HBAC Rules" msgstr "" #, fuzzy, python-format -#| msgid "%(count)d host matched" -#| msgid_plural "%(count)d hosts matched" -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" +#| msgid "Added user \"%(value)s\"" +msgid "Added HBAC rule \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" #, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added segment \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted segment \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified segment \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -#, fuzzy, python-format -#| msgid "Found '%(value)s'" -msgid "%(value)s" -msgstr "Odnaleziono „%(value)s”" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d host matched" -#| msgid_plural "%(count)d hosts matched" -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added topology suffix \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -#| msgid "Host Groups" -msgid "host groups" -msgstr "Grupy komputerów" - -#, fuzzy -#| msgid "Host Groups" -msgid "Host Group" -msgstr "Grupy komputerów" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Dodano grupę komputerów „%(value)s”" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Usunięto grupę komputerów „%(value)s”" - -#, fuzzy -#| msgid "Host-group" -msgid "hostgroup" -msgstr "Grupa komputerów" - -#, fuzzy -#| msgid "Member host-groups" -msgid "privileged hostgroup" -msgstr "Element grupy komputerów" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Zmodyfikowano grupę komputerów „%(value)s”" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "Pasuje %(count)d grupa komputerów" -msgstr[1] "Pasują %(count)d grupy komputerów" -msgstr[2] "Pasuje %(count)d grup komputerów" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -#, fuzzy -#| msgid "Group container" -msgid "vaultcontainer" -msgstr "Kontener grupy" - -#, fuzzy -#| msgid "Group container" -msgid "vaultcontainers" -msgstr "Kontener grupy" - -#, fuzzy -#| msgid "Group container" -msgid "Vault Containers" -msgstr "Kontener grupy" - -#, fuzzy -#| msgid "Group container" -msgid "Vault Container" -msgstr "Kontener grupy" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added vault \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted vault \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -#, fuzzy, python-format -#| msgid "%(count)d host matched" -#| msgid_plural "%(count)d hosts matched" -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified vault \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -#, fuzzy -#| msgid "Configuration" -msgid "Vault configuration" -msgstr "Konfiguracja" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA KRA servers" -msgstr "Serwer IPA do użycia" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Archived data into vault \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -msgid "Retrieve data from a vault." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -#, fuzzy -#| msgid "Netgroups" -msgid "netgroups" -msgstr "Grupy sieciowe" - -msgid "Netgroups" -msgstr "Grupy sieciowe" - -#, fuzzy -#| msgid "Netgroups" -msgid "Netgroup" -msgstr "Grupy sieciowe" - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added netgroup \"%(value)s\"" -msgstr "Dodano grupę „%(value)s”" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified netgroup \"%(value)s\"" -msgstr "Zmodyfikowano grupę „%(value)s”" - -#, fuzzy, python-format -#| msgid "%(count)d group matched" -#| msgid_plural "%(count)d groups matched" -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "Pasuje %(count)d grupa" -msgstr[1] "Pasują %(count)d grupy" -msgstr[2] "Pasuje %(count)d grup" - -msgid "One time password commands" -msgstr "" - -#, fuzzy -#| msgid "Configuration" -msgid "OTP configuration options" -msgstr "Konfiguracja" - -#, fuzzy -#| msgid "Configuration" -msgid "OTP Configuration" -msgstr "Konfiguracja" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Zmieniono hasło dla „%(value)s”" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -#, fuzzy -#| msgid "Serial number" -msgid "invalid port number" -msgstr "Numer seryjny" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, fuzzy, python-format -#| msgid "Modified service \"%(value)s\"" -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "A list of ACI values" -msgstr "Lista wartości ACI" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" -"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" -"co najmniej jedna z wartości: „type”, „filter”, „subtree”, „targetgroup”, " -"„attrs” lub „memberof” jest wymagana" - -#, fuzzy -#| msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgid "filter and memberof are mutually exclusive" -msgstr "" -"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" - -#, fuzzy -#| msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgid "group, permission and self are mutually exclusive" -msgstr "" -"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "Grupa „%s” nie istnieje" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Błąd składni: %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "Nie odnaleziono ACI o nazwie „%s”" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "ACI" - -#, fuzzy -#| msgid "ACIs" -msgid "ACI" -msgstr "ACI" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "Utworzono ACI „%(value)s”" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted HBAC rule \"%(value)s\"" msgstr "Usunięto ACI „%(value)s”" -#, python-format -msgid "Modified ACI \"%(value)s\"" +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified HBAC rule \"%(value)s\"" msgstr "Zmodyfikowano ACI „%(value)s”" -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" +#, fuzzy, python-format +#| msgid "%(count)d ACI matched" +#| msgid_plural "%(count)d ACIs matched" +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" msgstr[0] "Pasuje %(count)d ACI" msgstr[1] "Pasują %(count)d ACI" msgstr[2] "Pasuje %(count)d ACI" #, fuzzy, python-format -#| msgid "Created ACI \"%(value)s\"" -msgid "Renamed ACI to \"%(value)s\"" -msgstr "Utworzono ACI „%(value)s”" +#| msgid "Enabled user account \"%(value)s\"" +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "Wyłączono konto użytkownika „%(value)s”" + +msgid "Access time" +msgstr "Czas dostępu" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" msgid "" "\n" -"Server configuration\n" +"Simulate use of Host-based access controls\n" "\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"NOTES:\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" "\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" "\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" +" --user, --host, and --service are mandatory, others are optional.\n" "\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" "\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, fuzzy, python-format +#| msgid "Access time" +msgid "Access granted: %s" +msgstr "Czas dostępu" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" msgstr "" #, fuzzy -#| msgid "must be at least %(minvalue)d" -msgid "must be at least 10" -msgstr "musi wynosić co najmniej %(minvalue)d" - -#, fuzzy -#| msgid "Configuration" -msgid "configuration options" -msgstr "Konfiguracja" - -msgid "Configuration" -msgstr "Konfiguracja" - -#, fuzzy -#| msgid "Min length" -msgid "Maximum hostname length" -msgstr "Minimalna długość" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA CA servers" -msgstr "Serwer IPA do użycia" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" +#| msgid "Host category the rule applies to" +msgid "Hosts the view applies to" +msgstr "Kategoria komputerów, do których zastosowywana jest reguła" msgid "Domain resolution order" msgstr "" @@ -16048,237 +19603,206 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -msgid "IPA servers configured as domain name server" -msgstr "" +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID View \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" -msgid "Hidden IPA DNS servers" -msgstr "" +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted ID View \"%(value)s\"" +msgstr "Usunięto ACI „%(value)s”" -msgid "Hidden IPA servers configured as domain name server" -msgstr "" +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified an ID View \"%(value)s\"" +msgstr "Zmodyfikowano ACI „%(value)s”" -msgid "DNSec key master" -msgstr "" +#, fuzzy, python-format +#| msgid "%(count)d ACI matched" +#| msgid_plural "%(count)d ACIs matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "Pasuje %(count)d ACI" +msgstr[1] "Pasują %(count)d ACI" +msgstr[2] "Pasuje %(count)d ACI" -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" +msgid "Default Trust View cannot be applied on hosts" msgstr "" #, fuzzy -#| msgid "Group '%s' does not exist" -msgid "The group doesn't exist" -msgstr "Grupa „%s” nie istnieje" +#| msgid "principal not found\n" +msgid "not found" +msgstr "nie odnaleziono naczelnika\n" -#, python-format -msgid "attribute \"%s\" not allowed" +msgid "ID View cannot be applied to IPA master" msgstr "" -msgid "May not be empty" +msgid "ID View already applied" +msgstr "" + +msgid "value" msgstr "" #, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" +msgid "ID View applied to %i host." msgstr "" #, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgid "ID View applied to %i hosts." msgstr "" -msgid "SELinux user map default user not in order list" +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." msgstr "" msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" -#, fuzzy -#| msgid "Groups" -msgid "groups" -msgstr "Grupy" +msgid "IPA object" +msgstr "" -#, fuzzy -#| msgid "User Groups" -msgid "User Group" -msgstr "Grupy użytkowników" +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" -#, python-format -msgid "Added group \"%(value)s\"" +#, fuzzy, python-format +#| msgid "Members that could not be removed" +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "Liczba elementów, które nie mogły zostać usunięte" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +msgid "Delete an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "Modify an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified an ID override \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" msgstr "Dodano grupę „%(value)s”" -msgid "gid cannot be set for external group" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" msgstr "Usunięto grupę „%(value)s”" -#, fuzzy -#| msgid "Target group" -msgid "privileged group" -msgstr "Grupa docelowa" - -#, python-format -msgid "Modified group \"%(value)s\"" +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified an Group ID override \"%(value)s\"" msgstr "Zmodyfikowano grupę „%(value)s”" -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" msgstr[0] "Pasuje %(count)d grupa" msgstr[1] "Pasują %(count)d grupy" msgstr[2] "Pasuje %(count)d grup" -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" - -msgid "not allowed to modify user entries" -msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" - -msgid "not allowed to modify group entries" -msgstr "modyfikowanie wpisów grup nie jest dozwolone" - -msgid "Not a managed group" -msgstr "Nie jest zarządzaną grupą" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - #, fuzzy #| msgid "Permissions" msgid "" @@ -16526,1396 +20050,44 @@ msgstr[0] "Pasuje %(count)d użytkownik" msgstr[1] "Pasuje %(count)d użytkowników" msgstr[2] "Pasuje %(count)d użytkowników" -msgid "" -"\n" -"OTP Tokens\n" +msgid "delegation" msgstr "" -msgid "" -"\n" -"Manage OTP tokens.\n" +msgid "delegations" msgstr "" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" +msgid "Delegations" msgstr "" #, fuzzy -#| msgid "UID" -msgid "URI" -msgstr "UID" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added OTP token \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -msgid "cannot be empty" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified OTP token \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -#, fuzzy, python-format -#| msgid "%(count)d host matched" -#| msgid_plural "%(count)d hosts matched" -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, fuzzy, python-format -#| msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" -"priorytet musi być unikalną wartością (%(prio)d jest już używane przez " -"%(gname)s)" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Usunięto użytkownika „%(value)s”" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -#, fuzzy -#| msgid "Users" -msgid "users" -msgstr "Użytkownicy" - -#, fuzzy -#| msgid "Commands" -msgid "command" -msgstr "Polecenia" - -#, fuzzy -#| msgid "Commands" -msgid "commands" -msgstr "Polecenia" - -msgid "runAs user" -msgstr "" - -#, fuzzy -#| msgid "Member users" -msgid "runAs users" -msgstr "Elementy użytkowników" - -#, fuzzy -#| msgid "Netgroups" -msgid "group runAs" -msgstr "Grupy sieciowe" - -#, fuzzy -#| msgid "Member groups" -msgid "runAs groups" -msgstr "Elementy grupy" - -#, fuzzy, python-format -#| msgid "%(count)d user matched" -#| msgid_plural "%(count)d users matched" -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "Pasuje %(count)d użytkownik" -msgstr[1] "Pasuje %(count)d użytkowników" -msgstr[2] "Pasuje %(count)d użytkowników" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, fuzzy -#| msgid "Sudo Command" -msgid "sudo command" -msgstr "Polecenie sudo" - -#, fuzzy -#| msgid "Sudo Command" -msgid "sudo commands" -msgstr "Polecenie sudo" - -#, fuzzy -#| msgid "Sudo Command" -msgid "Sudo Commands" -msgstr "Polecenie sudo" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -#| msgid "Deleted ACI \"%(value)s\"" -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Usunięto ACI „%(value)s”" - -#, fuzzy, python-format -#| msgid "Modified ACI \"%(value)s\"" -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Zmodyfikowano ACI „%(value)s”" - -#, fuzzy, python-format -#| msgid "%(count)d ACI matched" -#| msgid_plural "%(count)d ACIs matched" -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "Pasuje %(count)d ACI" -msgstr[1] "Pasują %(count)d ACI" -msgstr[2] "Pasuje %(count)d ACI" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -#, fuzzy -#| msgid "Sudo Command Groups" -msgid "sudo command group" -msgstr "Grupy polecenia sudo" - -#, fuzzy -#| msgid "Sudo Command Groups" -msgid "sudo command groups" -msgstr "Grupy polecenia sudo" +#| msgid "Delete" +msgid "Delegation" +msgstr "Usuń" #, fuzzy, python-format #| msgid "Added group \"%(value)s\"" -msgid "Added Sudo Command Group \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" msgstr "Dodano grupę „%(value)s”" #, fuzzy, python-format #| msgid "Deleted group \"%(value)s\"" -msgid "Deleted Sudo Command Group \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" msgstr "Usunięto grupę „%(value)s”" #, fuzzy, python-format #| msgid "Modified group \"%(value)s\"" -msgid "Modified Sudo Command Group \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" msgstr "Zmodyfikowano grupę „%(value)s”" #, fuzzy, python-format #| msgid "%(count)d group matched" #| msgid_plural "%(count)d groups matched" -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "Pasuje %(count)d grupa" msgstr[1] "Pasują %(count)d grupy" msgstr[2] "Pasuje %(count)d grup" -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -#, fuzzy -#| msgid "Realm name" -msgid "Realm domains" -msgstr "Nazwa obszaru" - -#, fuzzy -#| msgid "Realm name" -msgid "Realm Domains" -msgstr "Nazwa obszaru" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -#, fuzzy -#| msgid "Kerberos Ticket Policy" -msgid "kerberos ticket policy settings" -msgstr "Polityka zgłoszeń Kerberosa" - -msgid "Kerberos Ticket Policy" -msgstr "Polityka zgłoszeń Kerberosa" - -#, fuzzy -#| msgid "Max life" -msgid "OTP max life" -msgstr "Maksymalny czas życia" - -#, fuzzy -#| msgid "Maximum ticket life (seconds)" -msgid "OTP token maximum ticket life (seconds)" -msgstr "Minimalny czas życia zgłoszenia (sekundy)" - -#, fuzzy -#| msgid "Max renew" -msgid "OTP max renew" -msgstr "Maksymalne odnowienie" - -#, fuzzy -#| msgid "Maximum renewable age (seconds)" -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" - -#, fuzzy -#| msgid "Max life" -msgid "RADIUS max life" -msgstr "Maksymalny czas życia" - -#, fuzzy -#| msgid "Maximum ticket life (seconds)" -msgid "RADIUS maximum ticket life (seconds)" -msgstr "Minimalny czas życia zgłoszenia (sekundy)" - -#, fuzzy -#| msgid "Max renew" -msgid "RADIUS max renew" -msgstr "Maksymalne odnowienie" - -#, fuzzy -#| msgid "Maximum renewable age (seconds)" -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" - -#, fuzzy -#| msgid "Max life" -msgid "PKINIT max life" -msgstr "Maksymalny czas życia" - -#, fuzzy -#| msgid "Maximum ticket life (seconds)" -msgid "PKINIT maximum ticket life (seconds)" -msgstr "Minimalny czas życia zgłoszenia (sekundy)" - -#, fuzzy -#| msgid "Max renew" -msgid "PKINIT max renew" -msgstr "Maksymalne odnowienie" - -#, fuzzy -#| msgid "Maximum renewable age (seconds)" -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" - -msgid "Hardened max life" -msgstr "" - -#, fuzzy -#| msgid "Maximum ticket life (seconds)" -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "Minimalny czas życia zgłoszenia (sekundy)" - -msgid "Hardened max renew" -msgstr "" - -#, fuzzy -#| msgid "Maximum renewable age (seconds)" -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -#, fuzzy -#| msgid "Location" -msgid "" -"\n" -"IPA locations\n" -msgstr "Położenie" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -#, fuzzy -#| msgid "Location" -msgid "location" -msgstr "Położenie" - -#, fuzzy -#| msgid "Location" -msgid "locations" -msgstr "Położenie" - -#, fuzzy -#| msgid "Location" -msgid "IPA Locations" -msgstr "Położenie" - -#, fuzzy -#| msgid "Location" -msgid "IPA Location" -msgstr "Położenie" - -#, fuzzy -#| msgid "Location" -msgid "Location name" -msgstr "Położenie" - -#, fuzzy -#| msgid "NIS domain name" -msgid "IPA location name" -msgstr "Nazwa domeny NIS" - -#, fuzzy -#| msgid "Netgroup description" -msgid "IPA Location description" -msgstr "Opis grupy sieciowej" - -#, fuzzy -#| msgid "Services" -msgid "Servers" -msgstr "Usługi" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added IPA location \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -msgid "Delete an IPA location." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA Server" -msgstr "Serwer IPA do użycia" - -msgid "Modify information about an IPA location." -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Modified IPA location \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -msgid "Search for IPA locations." -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d host matched" -#| msgid_plural "%(count)d hosts matched" -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -#, fuzzy -#| msgid "LDAP schema" -msgid "" -"\n" -"API Schema\n" -msgstr "Schemat LDAP" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -#, fuzzy -#| msgid "Host Name" -msgid "Name" -msgstr "Nazwa komputera" - -#, fuzzy -#| msgid "Location" -msgid "Documentation" -msgstr "Położenie" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -#| msgid "Permissions" -msgid "Version" -msgstr "Uprawnienia" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -#| msgid "Netgroup name" -msgid "Method name" -msgstr "Nazwa grupy sieciowej" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s: nie odnaleziono %(oname)s" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -#, fuzzy -#| msgid "Character classes" -msgid "Search for classes." -msgstr "Klasy znaków" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -#, fuzzy -#| msgid "Request id" -msgid "Required" -msgstr "Identyfikator żądania" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -#| msgid "ACI name" -msgid "CLI name" -msgstr "Nazwa ACI" - -#, fuzzy -#| msgid "User password" -msgid "Confirm (password)" -msgstr "Hasło użytkownika" - -#, fuzzy -#| msgid "Default shell" -msgid "Default" -msgstr "Domyślna powłoka" - -#, fuzzy -#| msgid "Default users group" -msgid "Default from" -msgstr "Domyślna grupa użytkowników" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(parent)s: %(oname)s not found" -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(parent)s: nie odnaleziono %(oname)s" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, fuzzy, python-format -#| msgid "%(parent)s: %(oname)s not found" -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(parent)s: nie odnaleziono %(oname)s" - -msgid "Display information about a command output." -msgstr "" - -#, fuzzy -#| msgid "Sudo Command Groups" -msgid "Search for command outputs." -msgstr "Grupy polecenia sudo" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -#, fuzzy -#| msgid "NIS domain name" -msgid "local domain range" -msgstr "Nazwa domeny NIS" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added ID range \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted ACI \"%(value)s\"" -msgid "Deleted ID range \"%(value)s\"" -msgstr "Usunięto ACI „%(value)s”" - -#, fuzzy, python-format -#| msgid "%(count)d user matched" -#| msgid_plural "%(count)d users matched" -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "Pasuje %(count)d użytkownik" -msgstr[1] "Pasuje %(count)d użytkowników" -msgstr[2] "Pasuje %(count)d użytkowników" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified ACI \"%(value)s\"" -msgid "Modified ID range \"%(value)s\"" -msgstr "Zmodyfikowano ACI „%(value)s”" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, fuzzy -#| msgid "HBAC service group description" -msgid "self service permission" -msgstr "Opis grupy usługi HBAC" - -msgid "self service permissions" -msgstr "" - -#, fuzzy -#| msgid "Permissions" -msgid "Self Service Permissions" -msgstr "Uprawnienia" - -msgid "Self Service Permission" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added selfservice \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, fuzzy, python-format -#| msgid "Modified service \"%(value)s\"" -msgid "Modified selfservice \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "" -"\n" -"IPA server roles\n" -msgstr "Serwer IPA do użycia" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#, fuzzy -#| msgid "Server Name" -msgid "server role" -msgstr "Nazwa serwera" - -#, fuzzy -#| msgid "Server Name" -msgid "server roles" -msgstr "Nazwa serwera" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA Server Roles" -msgstr "Serwer IPA do użycia" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA Server Role" -msgstr "Serwer IPA do użycia" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA server role name" -msgstr "Serwer IPA do użycia" - -#, fuzzy -#| msgid "Request status" -msgid "Role status" -msgstr "Stan żądania" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "Include IPA master entries" -msgstr "" - -#, fuzzy -#| msgid "Roles" -msgid "roles" -msgstr "Role" - -#, fuzzy -#| msgid "Rule name" -msgid "IPA role name" -msgstr "Nazwa reguły" - msgid "HBAC rule and local members cannot both be set" msgstr "" @@ -17988,1060 +20160,212 @@ msgstr "Włączono konto użytkownika „%(value)s”" msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "Wyłączono konto użytkownika „%(value)s”" -#, fuzzy, python-brace-format -#| msgid "File %(file)s not found" -msgid "{role}: role not found" -msgstr "Nie odnaleziono pliku %(file)s" +#, fuzzy +#| msgid "IPA Server to use" +msgid "" +"\n" +"IPA servers\n" +msgstr "Serwer IPA do użycia" -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "pyhbac is not installed." +msgid "" +"\n" +"Get information about installed IPA servers.\n" msgstr "" msgid "" "\n" -"IPA certificate operations\n" +" Find all servers:\n" +" ipa server-find\n" msgstr "" msgid "" "\n" -"Implements a set of commands for managing server SSL certificates.\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "server" +msgstr "" + +msgid "servers" +msgstr "" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA Servers" +msgstr "Serwer IPA do użycia" + +#, fuzzy +#| msgid "Service category" +msgid "Server location" +msgstr "Kategoria usług" + +#, fuzzy +#| msgid "Service name" +msgid "Service weight" +msgstr "Nazwa usługi" + +msgid "Weight for server services" +msgstr "" + +#, fuzzy +#| msgid "Service category" +msgid "Service relative weight" +msgstr "Kategoria usług" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +#, fuzzy +#| msgid "Enabled user account \"%(value)s\"" +msgid "Enabled server roles" +msgstr "Włączono konto użytkownika „%(value)s”" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified IPA server \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" msgstr "" msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." msgstr "" msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." msgstr "" msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." msgstr "" -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" +msgid "Ignoring these warnings and proceeding with removal" msgstr "" #, python-format msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" -msgid "enabledService/configuredService not in ipaConfigString kdc entry" +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" msgstr "" -#, fuzzy, python-format -#| msgid "Host '%(host)s' not found" -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "Nie odnaleziono komputera „%(host)s”" - -msgid "Issuing CA" +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" msgstr "" -msgid "Name of issuing CA" +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" msgstr "" #, fuzzy -#| msgid "Base-64 encoded server certificate" -msgid "Base-64 encoded certificate." -msgstr "Certyfikat serwera zakodowany za pomocą Base-64" +#| msgid "not allowed to modify user entries" +msgid "not allowed to perform server connection check" +msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" -#, fuzzy -#| msgid "Certificate" -msgid "Certificate chain" -msgstr "Certyfikat" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "Subject" -msgstr "Temat" - -#, fuzzy -#| msgid "Email address" -msgid "Subject email address" -msgstr "Adres e-mail" - -#, fuzzy -#| msgid "Subject" -msgid "Subject DNS name" -msgstr "Temat" - -#, fuzzy -#| msgid "Street address" -msgid "Subject X.400 address" -msgstr "Adres zamieszkania" - -#, fuzzy -#| msgid "Home directory base" -msgid "Subject directory name" -msgstr "Podstawa katalogu domowego" - -msgid "Subject EDI Party name" +msgid "Set enabled/hidden state of a server." msgstr "" #, fuzzy -#| msgid "Subject" -msgid "Subject URI" -msgstr "Temat" - -#, fuzzy -#| msgid "Street address" -msgid "Subject IP Address" -msgstr "Adres zamieszkania" - -#, fuzzy -#| msgid "Subject" -msgid "Subject OID" -msgstr "Temat" - -#, fuzzy -#| msgid "Subject" -msgid "Subject UPN" -msgstr "Temat" - -#, fuzzy -#| msgid "Kerberos principal" -msgid "Subject Kerberos principal name" -msgstr "Naczelnik Kerberosa" +#| msgid "Status" +msgid "State" +msgstr "Stan" #, fuzzy #| msgid "Server Name" -msgid "Subject Other Name" +msgid "Server state" msgstr "Nazwa serwera" -msgid "Issuer" -msgstr "Wydawca" +#, fuzzy, python-format +#| msgid "Changed password for \"%(value)s\"" +msgid "Changed server state of \"%(value)s\"." +msgstr "Zmieniono hasło dla „%(value)s”" -#, fuzzy -#| msgid "Issuer" -msgid "Issuer DN" -msgstr "Wydawca" - -msgid "Not Before" -msgstr "Nie wcześniej" - -msgid "Not After" -msgstr "Nie po" - -msgid "Fingerprint (SHA1)" -msgstr "Odcisk (SHA1)" - -#, fuzzy -#| msgid "Fingerprint (SHA1)" -msgid "Fingerprint (SHA256)" -msgstr "Odcisk (SHA1)" - -#, fuzzy -#| msgid "Serial number" -msgid "Serial number (hex)" -msgstr "Numer seryjny" - -msgid "Request status" -msgstr "Stan żądania" - -msgid "Include certificate chain in output" +msgid "Cannot hide CA renewal master." msgstr "" -#, fuzzy -#| msgid "automatically add the principal if it doesn't exist" -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "automatycznie dodaj naczelnika, jeśli nie istnieje" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." +msgid "Cannot hide DNSSec key master." msgstr "" #, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -#, fuzzy -#| msgid "automatically add the principal if it doesn't exist" -msgid "The principal for this request doesn't exist." -msgstr "automatycznie dodaj naczelnika, jeśli nie istnieje" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Status" -msgstr "Stan" - -msgid "Revoked" -msgstr "Unieważniono" - -msgid "Revocation reason" -msgstr "Przyczyna unieważnienia" - -#, fuzzy -#| msgid "Reason for revoking the certificate (0-10)" -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "Przyczyna unieważnienia certyfikatu (0-10)" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -#, fuzzy -#| msgid "Revocation reason" -msgid "7 is not a valid revocation reason" -msgstr "Przyczyna unieważnienia" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -#, fuzzy -#| msgid "Host category the rule applies to" -msgid "Hosts the view applies to" -msgstr "Kategoria komputerów, do których zastosowywana jest reguła" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added ID View \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy, python-format -#| msgid "Deleted ACI \"%(value)s\"" -msgid "Deleted ID View \"%(value)s\"" -msgstr "Usunięto ACI „%(value)s”" - -#, fuzzy, python-format -#| msgid "Modified ACI \"%(value)s\"" -msgid "Modified an ID View \"%(value)s\"" -msgstr "Zmodyfikowano ACI „%(value)s”" - -#, fuzzy, python-format -#| msgid "%(count)d ACI matched" -#| msgid_plural "%(count)d ACIs matched" -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "Pasuje %(count)d ACI" -msgstr[1] "Pasują %(count)d ACI" -msgstr[2] "Pasuje %(count)d ACI" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -#, fuzzy -#| msgid "principal not found\n" -msgid "not found" -msgstr "nie odnaleziono naczelnika\n" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, fuzzy, python-format -#| msgid "Members that could not be removed" -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "Liczba elementów, które nie mogły zostać usunięte" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added ID override \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -msgid "Delete an ID override." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted ID override \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -msgid "Modify an ID override." -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified service \"%(value)s\"" -msgid "Modified an ID override \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -#, fuzzy -#| msgid "Base-64 encoded server certificate" -msgid "Base-64 encoded user certificate" -msgstr "Certyfikat serwera zakodowany za pomocą Base-64" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added User ID override \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, fuzzy, python-format -#| msgid "Modified service \"%(value)s\"" -msgid "Modified an User ID override \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added Group ID override \"%(value)s\"" -msgstr "Dodano grupę „%(value)s”" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Zmodyfikowano grupę „%(value)s”" - -#, fuzzy, python-format -#| msgid "%(count)d group matched" -#| msgid_plural "%(count)d groups matched" -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "Pasuje %(count)d grupa" -msgstr[1] "Pasują %(count)d grupy" -msgstr[2] "Pasuje %(count)d grup" - -msgid "" -"\n" -"Auto Membership Rule.\n" +msgid "Cannot hide last enabled %(name)s server." msgstr "" msgid "" "\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(pkey)s: %(oname)s not found" -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(pkey)s: nie odnaleziono %(oname)s" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added automember rule \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy -#| msgid "DNS is not configured" -msgid "Auto Membership is not configured" -msgstr "DNS nie jest skonfigurowany" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -#| msgid "ACI with name \"%s\" not found" -msgid "Auto member rule: %s not found!" -msgstr "Nie odnaleziono ACI o nazwie „%s”" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted hostgroup \"%(value)s\"" -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Usunięto grupę komputerów „%(value)s”" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Modified automember rule \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Usunięto użytkownika „%(value)s”" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d user matched" -#| msgid_plural "%(count)d users matched" -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "Pasuje %(count)d użytkownik" -msgstr[1] "Pasuje %(count)d użytkowników" -msgstr[2] "Pasuje %(count)d użytkowników" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -#, fuzzy -#| msgid "member %s" -msgid "Automember" -msgstr "członek %s" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" +"Session Support for IPA\n" msgstr "" msgid "" @@ -19232,6 +20556,899 @@ msgstr "Włączone" msgid "Enabled CA \"%(value)s\"" msgstr "Utworzono ACI „%(value)s”" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +#, fuzzy +#| msgid "Priority of the policy (higher number means lower priority" +msgid "Priority of the rule (higher number means lower priority" +msgstr "Priorytet polityki (wyższy numer równa się niższemu priorytetowi" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "User login" +msgid "User logins" +msgstr "Login użytkownika" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "Pasuje %(count)d użytkownik" +msgstr[1] "Pasuje %(count)d użytkowników" +msgstr[2] "Pasuje %(count)d użytkowników" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 10" +msgstr "musi wynosić co najmniej %(minvalue)d" + +#, fuzzy +#| msgid "Configuration" +msgid "configuration options" +msgstr "Konfiguracja" + +msgid "Configuration" +msgstr "Konfiguracja" + +#, fuzzy +#| msgid "Min length" +msgid "Maximum hostname length" +msgstr "Minimalna długość" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA CA servers" +msgstr "Serwer IPA do użycia" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +#, fuzzy +#| msgid "Group '%s' does not exist" +msgid "The group doesn't exist" +msgstr "Grupa „%s” nie istnieje" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "Hosts" +msgid "Host" +msgstr "Komputery" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Base-64 encoded host certificate" +msgstr "Certyfikat serwera zakodowany za pomocą Base-64" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial Number" +msgstr "Numer seryjny" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial Number (hex)" +msgstr "Numer seryjny" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +#, fuzzy +#| msgid "Password used in bulk enrollment" +msgid "Password cannot be set on enrolled host." +msgstr "Hasło używane w zapisywaniu większej części" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Disabled host \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added certificates to host \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy +#| msgid "Remove all principals in this realm" +msgid "Remove principal alias from a host entry" +msgstr "Usuwa wszystkich naczelników w tym obszarze" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "local domain range" +msgstr "Nazwa domeny NIS" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" +msgstr "Usunięto ACI „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "Pasuje %(count)d użytkownik" +msgstr[1] "Pasuje %(count)d użytkowników" +msgstr[2] "Pasuje %(count)d użytkowników" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified ID range \"%(value)s\"" +msgstr "Zmodyfikowano ACI „%(value)s”" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + msgid "Internationalization messages" msgstr "" @@ -20435,16 +22652,6 @@ msgstr "Odrzucono certyfikat" msgid "REVOKED" msgstr "" -#, fuzzy -#| msgid "Serial number" -msgid "Serial Number" -msgstr "Numer seryjny" - -#, fuzzy -#| msgid "Serial number" -msgid "Serial Number (hex)" -msgstr "Numer seryjny" - #, fuzzy #| msgid "Fingerprint (SHA1)" msgid "SHA1 Fingerprint" @@ -20513,11 +22720,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -#, fuzzy -#| msgid "Certificate" -msgid "Certificate mapping data" -msgstr "Certyfikat" - #, fuzzy #| msgid "Configuration" msgid "Configuration string" @@ -21322,11 +23524,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -#, fuzzy -#| msgid "Hosts" -msgid "Host" -msgstr "Komputery" - #, fuzzy #| msgid "Netgroup description" msgid "Netgroup Settings" @@ -21464,9 +23661,6 @@ msgstr "" msgid "Add password policy" msgstr "Polityka haseł" -msgid "Password Policy" -msgstr "Polityka haseł" - #, fuzzy #| msgid "Password Policy" msgid "Remove password policies" @@ -21990,21 +24184,6 @@ msgstr "" msgid "Remove domains" msgstr "" -#, fuzzy -#| msgid "Group description" -msgid "Trust direction" -msgstr "Opis grupy" - -#, fuzzy -#| msgid "Request status" -msgid "Trust status" -msgstr "Stan żądania" - -#, fuzzy -#| msgid "Rule type" -msgid "Trust type" -msgstr "Typ reguły" - msgid "Alternative UPN suffixes" msgstr "" @@ -22572,9 +24751,6 @@ msgstr "" msgid "Topology" msgstr "" -msgid "Trusts" -msgstr "" - msgid "True" msgstr "" @@ -22697,1535 +24873,6 @@ msgstr "Identyfikator żądania" msgid "Unsupported value" msgstr "" -#, fuzzy -#| msgid "Roles" -msgid "Role" -msgstr "Role" - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added role \"%(value)s\"" -msgstr "Dodano grupę „%(value)s”" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted role \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified role \"%(value)s\"" -msgstr "Zmodyfikowano grupę „%(value)s”" - -#, fuzzy, python-format -#| msgid "%(count)d group matched" -#| msgid_plural "%(count)d groups matched" -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "Pasuje %(count)d grupa" -msgstr[1] "Pasują %(count)d grupy" -msgstr[2] "Pasuje %(count)d grup" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "" -"\n" -"IPA servers\n" -msgstr "Serwer IPA do użycia" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -#, fuzzy -#| msgid "IPA Server to use" -msgid "IPA Servers" -msgstr "Serwer IPA do użycia" - -#, fuzzy -#| msgid "Service category" -msgid "Server location" -msgstr "Kategoria usług" - -#, fuzzy -#| msgid "Service name" -msgid "Service weight" -msgstr "Nazwa usługi" - -msgid "Weight for server services" -msgstr "" - -#, fuzzy -#| msgid "Service category" -msgid "Service relative weight" -msgstr "Kategoria usług" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -#, fuzzy -#| msgid "Enabled user account \"%(value)s\"" -msgid "Enabled server roles" -msgstr "Włączono konto użytkownika „%(value)s”" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified service \"%(value)s\"" -msgid "Modified IPA server \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -#, fuzzy -#| msgid "not allowed to modify user entries" -msgid "not allowed to perform server connection check" -msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -#, fuzzy -#| msgid "Status" -msgid "State" -msgstr "Stan" - -#, fuzzy -#| msgid "Server Name" -msgid "Server state" -msgstr "Nazwa serwera" - -#, fuzzy, python-format -#| msgid "Changed password for \"%(value)s\"" -msgid "Changed server state of \"%(value)s\"." -msgstr "Zmieniono hasło dla „%(value)s”" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -#, fuzzy -#| msgid "Kerberos principal" -msgid "Member principals" -msgstr "Naczelnik Kerberosa" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "członek %s" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -#, fuzzy -#| msgid "Service category" -msgid "Service delegation rules" -msgstr "Kategoria usług" - -#, fuzzy -#| msgid "Service category" -msgid "Service delegation rule" -msgstr "Kategoria usług" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -msgid "privileged service delegation rule" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -#, fuzzy -#| msgid "Service group name" -msgid "Service delegation target" -msgstr "Nazwa grupy usługi" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added service delegation target \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -msgid "privileged service delegation target" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" -"Naczelnik Kerberosa %s już istnieje. Należy użyć polecenia „ipa user-mod”, " -"aby ustawić go ręcznie." - -#, fuzzy, python-format -#| msgid "" -#| "Kerberos principal %s already exists. Use 'ipa user-mod' to set it " -#| "manually." -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" -"Naczelnik Kerberosa %s już istnieje. Należy użyć polecenia „ipa user-mod”, " -"aby ustawić go ręcznie." - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" -"Dodanie użytkownika do domyślnej grupy się nie powiodło. Należy użyć " -"polecenia „ipa group-add-member”, aby dodać go ręcznie." - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -#, fuzzy -#| msgid "LDAP URI" -msgid "Invalid LDAP URI." -msgstr "Adres URI LDAP" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -#, fuzzy -#| msgid "Default group for new users" -msgid "Default group for new users not found" -msgstr "Domyślna grupa dla nowych użytkowników" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#, fuzzy -#| msgid "Base-64 encoded server certificate" -msgid "Base-64 encoded host certificate" -msgstr "Certyfikat serwera zakodowany za pomocą Base-64" - -#, fuzzy -#| msgid "Principal name" -msgid "Principal alias" -msgstr "Nazwa naczelnika" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -#, fuzzy -#| msgid "Password used in bulk enrollment" -msgid "Password cannot be set on enrolled host." -msgstr "Hasło używane w zapisywaniu większej części" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Disabled host \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added certificates to host \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added host \"%(value)s\"" -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy -#| msgid "Remove all principals in this realm" -msgid "Remove principal alias from a host entry" -msgstr "Usuwa wszystkich naczelników w tym obszarze" - -#, fuzzy, python-format -#| msgid "Modified host \"%(value)s\"" -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" -"priorytet musi być unikalną wartością (%(prio)d jest już używane przez " -"%(gname)s)" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -#, fuzzy -#| msgid "Password Policy" -msgid "password policy" -msgstr "Polityka haseł" - -#, fuzzy -#| msgid "Password Policy" -msgid "password policies" -msgstr "Polityka haseł" - -#, fuzzy -#| msgid "Password Policy" -msgid "Password Policies" -msgstr "Polityka haseł" - -#, fuzzy -#| msgid "Max renew" -msgid "Max repeat" -msgstr "Maksymalne odnowienie" - -#, fuzzy -#| msgid "Maximum number of entries returned" -msgid "Maximum number of same consecutive characters" -msgstr "Maksymalna liczba zwróconych wpisów" - -#, fuzzy -#| msgid "Max renew" -msgid "Max sequence" -msgstr "Maksymalne odnowienie" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -#| msgid "User name" -msgid "User check" -msgstr "Nazwa użytkownika" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "Maksymalny czas życia hasła musi być wyższy niż minimalny." - -#, fuzzy -#| msgid "priority cannot be set on global policy" -msgid "cannot delete global password policy" -msgstr "nie można ustawiać priorytetu dla globalnej polityki" - -msgid "priority cannot be set on global policy" -msgstr "nie można ustawiać priorytetu dla globalnej polityki" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -#, fuzzy -#| msgid "External host" -msgid "External trust" -msgstr "Zewnętrzny komputer" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "Disabled user account \"%(value)s\"" -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Wyłączono konto użytkownika „%(value)s”" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -#, fuzzy -#| msgid "Rule type" -msgid "trust type" -msgstr "Typ reguły" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted host \"%(value)s\"" -msgid "Deleted trust \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d host matched" -#| msgid_plural "%(count)d hosts matched" -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -#, fuzzy -#| msgid "Configuration" -msgid "trust configuration" -msgstr "Konfiguracja" - -#, fuzzy -#| msgid "Configuration" -msgid "Global Trust Configuration" -msgstr "Konfiguracja" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -#, fuzzy -#| msgid "Supported encryption types:\n" -msgid "unsupported trust type" -msgstr "Obsługiwane typy szyfrowania:\n" - -#, fuzzy, python-format -#| msgid "Modified ACI \"%(value)s\"" -msgid "Modified \"%(value)s\" trust configuration" -msgstr "Zmodyfikowano ACI „%(value)s”" - -#, fuzzy -#| msgid "GID" -msgid "SID" -msgstr "GID" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -#, fuzzy -#| msgid "NIS domain name" -msgid "Domain enabled" -msgstr "Nazwa domeny NIS" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, fuzzy -#| msgid "not allowed to modify user entries" -msgid "not allowed to remotely add agent" -msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" - -#, fuzzy, python-format -#| msgid "Enabled user account \"%(value)s\"" -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -#| msgid "Disabled user account \"%(value)s\"" -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Wyłączono konto użytkownika „%(value)s”" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -#, fuzzy -#| msgid "Priority of the policy (higher number means lower priority" -msgid "Priority of the rule (higher number means lower priority" -msgstr "Priorytet polityki (wyższy numer równa się niższemu priorytetowi" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified service \"%(value)s\"" -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#, fuzzy -#| msgid "User login" -msgid "User logins" -msgstr "Login użytkownika" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d user matched" -#| msgid_plural "%(count)d users matched" -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "Pasuje %(count)d użytkownik" -msgstr[1] "Pasuje %(count)d użytkowników" -msgstr[2] "Pasuje %(count)d użytkowników" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added privilege \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted privilege \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, fuzzy, python-format -#| msgid "Modified service \"%(value)s\"" -msgid "Modified privilege \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -24413,688 +25060,45 @@ msgstr "Usuwa wszystkich naczelników w tym obszarze" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "Usunięto usługę „%(value)s”" -msgid "delegation" -msgstr "" +#, fuzzy +#| msgid "HBAC service group description" +msgid "self service permission" +msgstr "Opis grupy usługi HBAC" -msgid "delegations" -msgstr "" - -msgid "Delegations" +msgid "self service permissions" msgstr "" #, fuzzy -#| msgid "Delete" -msgid "Delegation" -msgstr "Usuń" +#| msgid "Permissions" +msgid "Self Service Permissions" +msgstr "Uprawnienia" -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added delegation \"%(value)s\"" -msgstr "Dodano grupę „%(value)s”" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted delegation \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified delegation \"%(value)s\"" -msgstr "Zmodyfikowano grupę „%(value)s”" - -#, fuzzy, python-format -#| msgid "%(count)d group matched" -#| msgid_plural "%(count)d groups matched" -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "Pasuje %(count)d grupa" -msgstr[1] "Pasują %(count)d grupy" -msgstr[2] "Pasuje %(count)d grup" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added HBAC rule \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy, python-format -#| msgid "Deleted ACI \"%(value)s\"" -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Usunięto ACI „%(value)s”" - -#, fuzzy, python-format -#| msgid "Modified ACI \"%(value)s\"" -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "Zmodyfikowano ACI „%(value)s”" - -#, fuzzy, python-format -#| msgid "%(count)d ACI matched" -#| msgid_plural "%(count)d ACIs matched" -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "Pasuje %(count)d ACI" -msgstr[1] "Pasują %(count)d ACI" -msgstr[2] "Pasuje %(count)d ACI" - -#, fuzzy, python-format -#| msgid "Enabled user account \"%(value)s\"" -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -#, fuzzy, python-format -#| msgid "Disabled user account \"%(value)s\"" -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "Wyłączono konto użytkownika „%(value)s”" - -msgid "Access time" -msgstr "Czas dostępu" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, fuzzy, python-format -#| msgid "Access time" -msgid "Access granted: %s" -msgstr "Czas dostępu" - -msgid "operation not defined" -msgstr "" - -#, fuzzy, python-format -#| msgid "not allowed to modify group entries" -msgid "not allowed to perform operation: %s" -msgstr "modyfikowanie wpisów grup nie jest dozwolone" - -msgid "No such virtual command" -msgstr "" - -msgid "Member service groups" -msgstr "Grupy usługi elementów" - -#, fuzzy -#| msgid "Member service groups" -msgid "Member HBAC service groups" -msgstr "Grupy usługi elementów" - -#, fuzzy -#| msgid "Member services" -msgid "Member ID user overrides" -msgstr "Usługi elementów" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -#, fuzzy -#| msgid "Member services" -msgid "Indirect Member HBAC service" -msgstr "Usługi elementów" - -#, fuzzy -#| msgid "Member service groups" -msgid "Indirect Member HBAC service group" -msgstr "Grupy usługi elementów" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "nie odnaleziono wpisu kontenera (%(container)s)" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s: nie odnaleziono %(oname)s" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -#, fuzzy -#| msgid "DNS is not configured" -msgid "attribute is not configurable" -msgstr "DNS nie jest skonfigurowany" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "wpis został usunięty podczas modyfikowania" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, fuzzy, python-format -#| msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgid "added attribute value to entry %(value)s" -msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" - -#, fuzzy, python-format -#| msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgid "removed attribute values from entry %(value)s" -msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -#, fuzzy -#| msgid "must be True or False" -msgid "must be TRUE or FALSE" -msgstr "musi być prawdą lub fałszem" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#, fuzzy -#| msgid "User password" -msgid "User password expiration" -msgstr "Hasło użytkownika" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -#, fuzzy -#| msgid "Home directory" -msgid "SMB Home Directory" -msgstr "Katalog domowy" - -#, fuzzy -#| msgid "Home directory base" -msgid "SMB Home Directory Drive" -msgstr "Podstawa katalogu domowego" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(parent)s: %(oname)s not found" -msgid "manager %(manager)s not found" -msgstr "%(parent)s: nie odnaleziono %(oname)s" - -#, fuzzy -#| msgid "Revoke a certificate." -msgid "Issuer of the certificate" -msgstr "Odrzuć certyfikat." - -#, fuzzy -#| msgid "Revoke a certificate." -msgid "Subject of the certificate" -msgstr "Odrzuć certyfikat." - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." +msgid "Self Service Permission" msgstr "" #, fuzzy, python-format #| msgid "Added service \"%(value)s\"" -msgid "Added certificate mappings to user \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" msgstr "Dodano usługę „%(value)s”" -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" #, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy -#| msgid "Default group for new users" -msgid "Default group for new users is not POSIX" -msgstr "Domyślna grupa dla nowych użytkowników" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Usunięto użytkownika „%(value)s”" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" +#| msgid "Modified service \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" #, fuzzy, python-format -#| msgid "Enabled user account \"%(value)s\"" -msgid "Undeleted user account \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, fuzzy, python-format -#| msgid "Enabled user account \"%(value)s\"" -msgid "Staged user account \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Wyłączono konto użytkownika „%(value)s”" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, fuzzy, python-format -#| msgid "Enabled user account \"%(value)s\"" -msgid "Unlocked account \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -#, fuzzy -#| msgid "User login" -msgid "Failed logins" -msgstr "Login użytkownika" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -#, fuzzy -#| msgid "Time to live" -msgid "Time now" -msgstr "Czas życia" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "fork() failed\n" -msgid "%(host)s failed" -msgstr "fork() się nie powiodło\n" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added certificates to user \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy, python-format -#| msgid "Modified user \"%(value)s\"" -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added user \"%(value)s\"" -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy -#| msgid "Remove all principals in this realm" -msgid "Remove principal alias from the user entry" -msgstr "Usuwa wszystkich naczelników w tym obszarze" - -#, fuzzy, python-format -#| msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" #, python-format msgid "all masters must have %(role)s role enabled" @@ -25283,25 +25287,6 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - #, fuzzy #| msgid "Request status" msgid "Request must be a dict" @@ -25327,6 +25312,25 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #, python-format msgid "must equal %r" msgstr "" diff --git a/po/pt.po b/po/pt.po index ce6da16a4..5a77d0413 100644 --- a/po/pt.po +++ b/po/pt.po @@ -3,7 +3,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Portuguese\n" @@ -14,6 +14,99 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + #, c-format msgid "Out of memory!\n" msgstr "" @@ -270,99 +363,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - #, c-format msgid "cannot open configuration file %s\n" msgstr "" @@ -9185,6 +9185,103 @@ msgid "" "Establish bi-directional trust. By default trust is inbound one-way only." msgstr "" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for Certificate Profiles." +msgstr "Pesquisar por interligações." + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "" "\n" "ID ranges\n" @@ -9397,103 +9494,6 @@ msgid "" " " msgstr "" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -#, fuzzy -#| msgid "Search for trusts." -msgid "Search for Certificate Profiles." -msgstr "Pesquisar por interligações." - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - msgid "Remove users that can manage this token." msgstr "" @@ -11724,162 +11724,20 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "Additional instructions:" +msgid "Results are truncated, try a more specific search" msgstr "" #, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" +msgid "Unknown option: %(option)s" msgstr "" -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." +msgid "Client version. Used to determine if server will accept request." msgstr "" -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" +msgid "any of the configured servers" msgstr "" -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "error on server '%(server)s': %(error)s" -msgid "DNS server %(server)s: %(error)s." -msgstr "erro no servidor '%(server)s': %(error)s" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "%(line)s" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." +msgid "Exceeded number of tries to forward a request." msgstr "" #, python-format @@ -11935,6 +11793,138 @@ msgstr "" msgid "No file to read" msgstr "" +msgid "incorrect type" +msgstr "tipo incorreto" + +msgid "Only one value is allowed" +msgstr "Só é permitido um valor" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +msgid "must be an integer" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +msgid "must be a certificate" +msgstr "" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +#, fuzzy +#| msgid "options are not allowed" +msgid "Leading and trailing spaces are not allowed" +msgstr "não são pertimidas opções" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, python-format +msgid "must be '%(value)s'" +msgstr "" + +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +msgid "must be datetime value" +msgstr "" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +msgid "must be DNS name" +msgstr "" + +msgid "must be absolute" +msgstr "" + +msgid "must be relative" +msgstr "" + +msgid "must be dictionary" +msgstr "" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + msgid "A dictionary representing an LDAP entry" msgstr "" @@ -11944,16 +11934,6 @@ msgstr "Uma lista de entradas LDAP" msgid "All commands should at least have a result" msgstr "" -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "Cliente %(cver)s incompatível com servidor %(sver)s no '%(server)s'" @@ -12319,150 +12299,162 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" -msgid "incorrect type" -msgstr "tipo incorreto" - -msgid "Only one value is allowed" -msgstr "Só é permitido um valor" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)s" +msgid "Additional instructions:" msgstr "" #, python-format msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." msgstr "" #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" msgstr "" #, python-format -msgid "must be at least %(minlength)d bytes" +msgid "'%(option)s' option is deprecated. %(additional_info)s" msgstr "" #, python-format -msgid "can be at most %(maxlength)d bytes" +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "DNS server %(server)s: %(error)s." +msgstr "erro no servidor '%(server)s': %(error)s" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -msgid "must be a certificate" -msgstr "" - -msgid "must be a certificate signing request" +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." msgstr "" #, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -#, fuzzy -#| msgid "options are not allowed" -msgid "Leading and trailing spaces are not allowed" -msgstr "não são pertimidas opções" - -#, python-format -msgid "must be at least %(minlength)d characters" +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "can be at most %(maxlength)d characters" +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." msgstr "" #, python-format -msgid "must be exactly %(length)d characters" +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" msgstr "" #, python-format -msgid "The character %(char)r is not allowed." +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." msgstr "" #, python-format -msgid "must be '%(value)s'" +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." msgstr "" #, python-format -msgid "must be one of %(values)s" -msgstr "" - -msgid "must be datetime value" -msgstr "" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -msgid "must be relative" -msgstr "" - -msgid "must be dictionary" -msgstr "" - -msgid "must be Kerberos principal" +msgid "'%(command)s' is deprecated. %(additional_info)s" msgstr "" #, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" +msgid "%(line)s" +msgstr "%(line)s" -msgid "Service principal is required" +#, python-format +msgid "Search result has been truncated: %(reason)s" msgstr "" #, python-format -msgid "%(filename)s: file not found" +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." msgstr "" -#, python-brace-format -msgid "Unable to parse option {item}" +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" msgstr "" -msgid "any of the configured servers" +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." msgstr "" -msgid "Exceeded number of tries to forward a request." +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." msgstr "" msgid "Filename is empty" @@ -12566,6 +12558,18 @@ msgstr "" msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + #, python-format msgid "Retrieving CA cert chain failed: %s" msgstr "" @@ -12582,10 +12586,6 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" -#, python-format -msgid "objectclass %s not found" -msgstr "" - #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" @@ -12714,113 +12714,10 @@ msgid_plural "%(count)d automount keys matched" msgstr[0] "" msgstr[1] "" +#, python-format msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "" @@ -13044,20 +12941,4237 @@ msgstr "" msgid "%i CAs removed." msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Display information about an automember rule.\n" +#| " " +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Display information about an automember rule.\n" +#| " " +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Display information about an automember rule.\n" +#| " " +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Display information about an automember rule.\n" +#| " " +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Display information about an automember rule.\n" +#| " " +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Display information about an automember rule.\n" +#| " " +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Display information about an automember rule.\n" +#| " " +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "" + +msgid "User Group" +msgstr "" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for DNS servers." +msgstr "Pesquisar por interligações." + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +#, fuzzy +#| msgid "Display information about a RADIUS proxy server." +msgid "Display configuration of a DNS server." +msgstr "Exibir informação acerca do servidor proxy RADIUS." + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject" +msgstr "" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "Whether PKINIT is enabled or disabled" +msgstr "Esta entrada não pode estar ativada ou desativada" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "política de palavra-passe" + +#, fuzzy +#| msgid "password policy" +msgid "password policies" +msgstr "política de palavra-passe" + +#, fuzzy +#| msgid "Password Policy" +msgid "Password Policies" +msgstr "Política de Palavra-passe" + +msgid "Password Policy" +msgstr "Política de Palavra-passe" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +#, fuzzy +#| msgid "Add password policy" +msgid "cannot delete global password policy" +msgstr "Adicionar política de palavra-passe" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "givenname is required" +msgstr "'%(name)s' é obrigatório" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "sn is required" +msgstr "'%(name)s' é obrigatório" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject email address" +msgstr "" + +msgid "Subject DNS name" +msgstr "" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +msgid "Subject IP Address" +msgstr "" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +msgid "Serial number (hex)" +msgstr "" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +#, fuzzy +#| msgid "Topic commands:" +msgid "sudo command" +msgstr "Comandos do tópico:" + +#, fuzzy +#| msgid "Topic commands:" +msgid "sudo commands" +msgstr "Comandos do tópico:" + +#, fuzzy +#| msgid "Topic commands:" +msgid "Sudo Commands" +msgstr "Comandos do tópico:" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "" + +#, fuzzy +#| msgid "Topic commands:" +msgid "command" +msgstr "Comandos do tópico:" + +#, fuzzy +#| msgid "Topic commands:" +msgid "commands" +msgstr "Comandos do tópico:" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +#, fuzzy +#| msgid "Trusts" +msgid "AD Trust setup" +msgstr "Interligações" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "trusts" +msgid "trust" +msgstr "interligações" + +msgid "trusts" +msgstr "interligações" + +msgid "Trusts" +msgstr "Interligações" + +#, fuzzy +#| msgid "Trusts" +msgid "Trust" +msgstr "Interligações" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "Trust direction" +msgstr "" + +#, fuzzy +#| msgid "Trusts" +msgid "Trust type" +msgstr "Interligações" + +#, fuzzy +#| msgid "Trusts" +msgid "Trust status" +msgstr "Interligações" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +#, fuzzy +#| msgid "trusts" +msgid "trust type" +msgstr "interligações" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " msgstr "" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +#, fuzzy +#| msgid "trusts" +msgid "trust domains" +msgstr "interligações" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +msgid "Vault configuration" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "" + +msgid "Host Group" +msgstr "" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +msgid "hostgroup" +msgstr "" + +msgid "privileged hostgroup" +msgstr "" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Location name" +msgstr "Nome do comando" + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +msgid "Servers" +msgstr "" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Delete an IPA location." +msgstr "Exibir informação acerca de uma localização IPA" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +msgid "IPA Server" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "Modificar informação acerca de uma localização IPA" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for IPA locations." +msgstr "Pesquisar por interligações." + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "Exibir informação acerca de uma localização IPA" + +msgid "Servers in location" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry is already enabled" +msgid "%s: user is already preserved" +msgstr "Esta entrada já está ativada" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry is already enabled" +msgid "user \"%s\" is already active" +msgstr "Esta entrada já está ativada" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry is already disabled" +msgid "Account disabled: %(disabled)s" +msgstr "Esta entrada já está desativada" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "A list of LDAP entries" +msgid "A list of ACI values" +msgstr "Uma lista de entradas LDAP" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" msgstr "" msgid "" @@ -13604,9 +17718,6 @@ msgstr "" msgid "Managedby permission" msgstr "" -msgid "DNS is not configured" -msgstr "" - msgid "cannot be used when a zone is specified" msgstr "" @@ -13832,1353 +17943,552 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, python-brace-format msgid "" -"\n" -"DNS server configuration\n" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." msgstr "" msgid "" "\n" -"Manipulate DNS server configuration\n" +"API Schema\n" msgstr "" msgid "" "\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" +"Provides API introspection capabilities.\n" msgstr "" msgid "" "\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" +" Show user-find details:\n" +" ipa command-show user-find\n" msgstr "" msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" msgstr "" -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." +msgid "Documentation" msgstr "" -msgid "Modify DNS server configuration" +msgid "Exclude from" +msgstr "" + +msgid "Include in" msgstr "" #, python-format -msgid "Modified DNS server \"%(value)s\"" +msgid "Results should contain primary key attribute only (\"%s\")" msgstr "" +msgid "Help topic" +msgstr "" + +msgid "Version" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Method name" +msgstr "Nome do comando" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about a command." +msgstr "Exibir informação acerca de um utilizador." + #, fuzzy #| msgid "Search for trusts." -msgid "Search for DNS servers." +msgid "Search for commands." msgstr "Pesquisar por interligações." -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" +msgid "Return command defaults" msgstr "" #, fuzzy -#| msgid "Display information about a RADIUS proxy server." -msgid "Display configuration of a DNS server." -msgstr "Exibir informação acerca do servidor proxy RADIUS." +#| msgid "Display information about a user." +msgid "Display information about a class." +msgstr "Exibir informação acerca de um utilizador." -msgid "Add a new DNS server." +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for classes." +msgstr "Pesquisar por interligações." + +#, fuzzy +#| msgid "Display information about a delegation." +msgid "Display information about a help topic." +msgstr "Exibir informação acerca de uma delegação." + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for help topics." +msgstr "Pesquisar por interligações." + +msgid "Required" msgstr "" -#, python-format -msgid "Added new DNS server \"%(value)s\"" +msgid "Multi-value" msgstr "" -msgid "Delete a DNS server" +msgid "Always ask" msgstr "" -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" +msgid "CLI metavar" msgstr "" #, fuzzy -#| msgid "'%(name)s' is required" -msgid "givenname is required" -msgstr "'%(name)s' é obrigatório" +#| msgid "Command name" +msgid "CLI name" +msgstr "Nome do comando" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" #, fuzzy -#| msgid "'%(name)s' is required" -msgid "sn is required" -msgstr "'%(name)s' é obrigatório" +#| msgid "Display information about a named group." +msgid "Display information about a command parameter." +msgstr "Exibir informação acerca de um grupo nomeado." -#, python-format -msgid "can be at most %(len)d characters" +msgid "Search command parameters." msgstr "" #, python-format -msgid "Deleted stage user \"%(value)s\"" +msgid "%(command_name)s: %(oname)s not found" msgstr "" -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "" - -msgid "Host Group" -msgstr "" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -msgid "hostgroup" -msgstr "" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" +#, fuzzy +#| msgid "Display information about a named group." +msgid "Display information about a command output." +msgstr "Exibir informação acerca de um grupo nomeado." -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for command outputs." +msgstr "Pesquisar por interligações." -msgid "Add users that can manage members of this hostgroup." +msgid "Store and provide schema for commands and topics" msgstr "" -msgid "Remove users that can manage members of this hostgroup." +msgid "Fingerprint of schema cached by client" msgstr "" -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -msgid "Vault configuration" -msgstr "" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "One time password commands" +msgid "Member service groups" msgstr "" -msgid "OTP configuration options" +msgid "Member HBAC service groups" msgstr "" -msgid "OTP Configuration" +msgid "Member ID user overrides" msgstr "" -#, python-format -msgid "Changed password for \"%(value)s\"" +msgid "Indirect Member ID user overrides" msgstr "" -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgid "Indirect Member permissions" msgstr "" -msgid "pkinit" +msgid "Indirect Member HBAC service" msgstr "" -msgid "PKINIT" +msgid "Indirect Member HBAC service group" msgstr "" -msgid "PKINIT status" +msgid "Invalid format. Should be name=value" msgstr "" #, fuzzy #| msgid "This entry cannot be enabled or disabled" -msgid "Whether PKINIT is enabled or disabled" +msgid "An IPA master host cannot be deleted or disabled" msgstr "Esta entrada não pode estar ativada ou desativada" -msgid "Report PKINIT status on the IPA masters" +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" msgstr "" #, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" +msgid "container entry (%(container)s) not found" +msgstr "" +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, fuzzy, python-format +#| msgid "options are not allowed" +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "não são pertimidas opções" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format msgid "" -"\n" -"RADIUS Proxy Servers\n" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." msgstr "" +#, python-format msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." msgstr "" #, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" +msgid "added attribute value to entry %(value)s" msgstr "" #, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" msgstr "" #, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" +msgid "Added HBAC rule \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -#| msgid "A list of LDAP entries" -msgid "A list of ACI values" -msgstr "Uma lista de entradas LDAP" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" +msgid "Deleted HBAC rule \"%(value)s\"" msgstr "" #, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" +msgid "Modified HBAC rule \"%(value)s\"" msgstr "" #, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" msgstr[0] "" msgstr[1] "" #, python-format -msgid "Renamed ACI to \"%(value)s\"" +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." msgstr "" msgid "" "\n" -"Server configuration\n" +"Simulate use of Host-based access controls\n" "\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"NOTES:\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" "\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" "\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" +" --user, --host, and --service are mandatory, others are optional.\n" "\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" "\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" -msgid "must be at least 10" +msgid "Unresolved rules in --rules" msgstr "" -msgid "configuration options" +#, python-format +msgid "Access granted: %s" msgstr "" -msgid "Configuration" +msgid "ID View" msgstr "" -msgid "Maximum hostname length" +msgid "system ID View" msgstr "" -msgid "IPA masters" +msgid "ID Views" msgstr "" -msgid "List of all IPA masters" +msgid "User object overrides" msgstr "" -msgid "Hidden IPA masters" +msgid "Group object overrides" msgstr "" -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" +msgid "Hosts the view applies to" msgstr "" msgid "Domain resolution order" @@ -15187,233 +18497,179 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -#, fuzzy -#| msgid "options are not allowed" -msgid "Empty domain is not allowed" -msgstr "não são pertimidas opções" - -#, fuzzy, python-format -#| msgid "invalid '%(name)s': %(error)s" -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "'%(name)s' inválido: %(error)s" - #, python-format -msgid "Server has no information about domain '%(domain)s'" +msgid "Added ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, fuzzy, python-format -#| msgid "options are not allowed" -msgid "attribute \"%s\" not allowed" -msgstr "não são pertimidas opções" - -msgid "May not be empty" +msgid "Deleted ID View \"%(value)s\"" msgstr "" #, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, fuzzy, python-format -#| msgid "error on server '%(server)s': %(error)s" -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "erro no servidor '%(server)s': %(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" +msgid "Modified an ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" msgstr[0] "" msgstr[1] "" -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgid "Default Trust View cannot be applied on hosts" msgstr "" -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" msgstr "" #, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "ID View applied to %i host." msgstr "" -msgid "not allowed to modify user entries" +#, python-format +msgid "ID View applied to %i hosts." msgstr "" -msgid "not allowed to modify group entries" +#, python-format +msgid "ID View cleared from %i host." msgstr "" -msgid "Not a managed group" +#, python-format +msgid "ID View cleared from %i hosts." msgstr "" -msgid "Add users that can manage members of this group." +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" -msgid "Remove users that can manage members of this group." +msgid "IPA object" msgstr "" +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about an ID override." +msgstr "Exibir informação acerca de um utilizador." + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + #, fuzzy #| msgid "Permission type" msgid "" @@ -15635,1258 +18891,36 @@ msgid_plural "%(count)d permissions matched" msgstr[0] "" msgstr[1] "" -msgid "" -"\n" -"OTP Tokens\n" +msgid "delegation" msgstr "" -msgid "" -"\n" -"Manage OTP tokens.\n" +msgid "delegations" msgstr "" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" +msgid "Delegations" msgstr "" -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" +msgid "Delegation" msgstr "" #, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" +msgid "Added delegation \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted OTP token \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" msgstr "" #, python-format -msgid "Modified OTP token \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "" msgstr[1] "" -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -#, fuzzy -#| msgid "Topic commands:" -msgid "command" -msgstr "Comandos do tópico:" - -#, fuzzy -#| msgid "Topic commands:" -msgid "commands" -msgstr "Comandos do tópico:" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, fuzzy -#| msgid "Topic commands:" -msgid "sudo command" -msgstr "Comandos do tópico:" - -#, fuzzy -#| msgid "Topic commands:" -msgid "sudo commands" -msgstr "Comandos do tópico:" - -#, fuzzy -#| msgid "Topic commands:" -msgid "Sudo Commands" -msgstr "Comandos do tópico:" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -#, fuzzy -#| msgid "Command name" -msgid "Location name" -msgstr "Nome do comando" - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -msgid "Servers" -msgstr "" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -#, fuzzy -#| msgid "Display information about an IPA location." -msgid "Delete an IPA location." -msgstr "Exibir informação acerca de uma localização IPA" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -msgid "IPA Server" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "Modificar informação acerca de uma localização IPA" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -#, fuzzy -#| msgid "Search for trusts." -msgid "Search for IPA locations." -msgstr "Pesquisar por interligações." - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "Exibir informação acerca de uma localização IPA" - -msgid "Servers in location" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Version" -msgstr "" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -#| msgid "Command name" -msgid "Method name" -msgstr "Nome do comando" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -#, fuzzy -#| msgid "Display information about a user." -msgid "Display information about a command." -msgstr "Exibir informação acerca de um utilizador." - -#, fuzzy -#| msgid "Search for trusts." -msgid "Search for commands." -msgstr "Pesquisar por interligações." - -msgid "Return command defaults" -msgstr "" - -#, fuzzy -#| msgid "Display information about a user." -msgid "Display information about a class." -msgstr "Exibir informação acerca de um utilizador." - -#, fuzzy -#| msgid "Search for trusts." -msgid "Search for classes." -msgstr "Pesquisar por interligações." - -#, fuzzy -#| msgid "Display information about a delegation." -msgid "Display information about a help topic." -msgstr "Exibir informação acerca de uma delegação." - -#, fuzzy -#| msgid "Search for trusts." -msgid "Search for help topics." -msgstr "Pesquisar por interligações." - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -#| msgid "Command name" -msgid "CLI name" -msgstr "Nome do comando" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -#, fuzzy -#| msgid "Display information about a named group." -msgid "Display information about a command parameter." -msgstr "Exibir informação acerca de um grupo nomeado." - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -#, fuzzy -#| msgid "Display information about a named group." -msgid "Display information about a command output." -msgstr "Exibir informação acerca de um grupo nomeado." - -#, fuzzy -#| msgid "Search for trusts." -msgid "Search for command outputs." -msgstr "Pesquisar por interligações." - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "IPA role name" -msgstr "" - msgid "HBAC rule and local members cannot both be set" msgstr "" @@ -16950,1031 +18984,193 @@ msgstr "" msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "" -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "pyhbac is not installed." +msgid "" +"\n" +"IPA servers\n" msgstr "" msgid "" "\n" -"IPA certificate operations\n" +"Get information about installed IPA servers.\n" +msgstr "" +"\n" +"Obter informação acerca dos servidores IPA.\n" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" msgstr "" msgid "" "\n" -"Implements a set of commands for managing server SSL certificates.\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" msgstr "" -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" +msgid "server" msgstr "" -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" +msgid "servers" msgstr "" -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" +msgid "IPA Servers" msgstr "" -msgid "" -"\n" -"In order to request a certificate:\n" +msgid "Server location" msgstr "" -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" +msgid "Service weight" msgstr "" -msgid "" -"\n" -"SEARCHING:\n" +msgid "Weight for server services" msgstr "" -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" +msgid "Service relative weight" msgstr "" -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" +msgid "Relative weight for server services (counts per location)" msgstr "" -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" +msgid "Enabled server roles" msgstr "" -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" +msgid "List of enabled roles" msgstr "" -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" +msgid "Modify information about an IPA server." +msgstr "Modificar informação acerca de um servidor IPA" -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" +#, python-format +msgid "Modified IPA server \"%(value)s\"" msgstr "" #, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "Subject" -msgstr "" - -msgid "Subject email address" -msgstr "" - -msgid "Subject DNS name" -msgstr "" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -msgid "Subject IP Address" -msgstr "" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -msgid "Issuer" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Serial number (hex)" -msgstr "" - -msgid "Request status" -msgstr "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" msgstr[0] "" msgstr[1] "" #, python-format -msgid "Search for certificates with these owner %s." +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" msgstr "" #, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" #, python-format -msgid "Added ID View \"%(value)s\"" +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "erro no servidor '%(server)s': %(error)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" msgstr "" #, python-format -msgid "Deleted ID View \"%(value)s\"" +msgid "Failed to cleanup server principals/keys: %(err)s" msgstr "" #, python-format -msgid "Modified an ID View \"%(value)s\"" +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" msgstr "" #, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -#| msgid "Display information about a user." -msgid "Display information about an ID override." -msgstr "Exibir informação acerca de um utilizador." - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" +msgid "Forcing removal of %(hostname)s" msgstr "" -#, python-format -msgid "%s is not a valid attribute." +msgid "Ignoring topology connectivity errors." msgstr "" #, fuzzy -#| msgid "" -#| "\n" -#| " Display information about an automember rule.\n" -#| " " -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " +#| msgid "This entry is already enabled" +msgid "Server has already been deleted" +msgstr "Esta entrada já está ativada" -#, python-format -msgid "Added automember rule \"%(value)s\"" +msgid "Agreements deleted" msgstr "" -msgid "Auto Membership is not configured" +msgid "Following segments were not deleted:" msgstr "" -#, fuzzy -#| msgid "" -#| "\n" -#| " Display information about an automember rule.\n" -#| " " -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " +msgid "not allowed to perform server connection check" msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " -#, python-format -msgid "Added condition(s) to \"%(value)s\"" +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +msgid "Server state" msgstr "" #, python-format -msgid "Auto member rule: %s not found!" +msgid "Changed server state of \"%(value)s\"." msgstr "" -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " +msgid "Cannot hide CA renewal master." msgstr "" -#, fuzzy -#| msgid "" -#| "\n" -#| " Display information about an automember rule.\n" -#| " " -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Display information about an automember rule.\n" -#| " " -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Display information about an automember rule.\n" -#| " " -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Display information about an automember rule.\n" -#| " " -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " +msgid "Cannot hide DNSSec key master." msgstr "" #, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" +msgid "Cannot hide last enabled %(name)s server." msgstr "" msgid "" "\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Display information about an automember rule.\n" -#| " " -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" +"Session Support for IPA\n" msgstr "" msgid "" @@ -18149,6 +19345,857 @@ msgstr "" msgid "Enabled CA \"%(value)s\"" msgstr "" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Display information about a named group." +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "Exibir informação acerca de um grupo nomeado." + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +#, fuzzy +#| msgid "options are not allowed" +msgid "Empty domain is not allowed" +msgstr "não são pertimidas opções" + +#, fuzzy, python-format +#| msgid "invalid '%(name)s': %(error)s" +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "'%(name)s' inválido: %(error)s" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, fuzzy, python-format +#| msgid "options are not allowed" +msgid "attribute \"%s\" not allowed" +msgstr "não são pertimidas opções" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "erro no servidor '%(server)s': %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + msgid "Internationalization messages" msgstr "" @@ -19240,12 +21287,6 @@ msgstr "" msgid "REVOKED" msgstr "" -msgid "Serial Number" -msgstr "" - -msgid "Serial Number (hex)" -msgstr "" - msgid "SHA1 Fingerprint" msgstr "" @@ -19298,9 +21339,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -msgid "Certificate mapping data" -msgstr "" - msgid "Configuration string" msgstr "" @@ -20043,9 +22081,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "" - #, fuzzy #| msgid "Identity Settings" msgid "Netgroup Settings" @@ -20173,9 +22208,6 @@ msgstr "" msgid "Add password policy" msgstr "Adicionar política de palavra-passe" -msgid "Password Policy" -msgstr "Política de Palavra-passe" - #, fuzzy #| msgid "password policy" msgid "Remove password policies" @@ -20657,19 +22689,6 @@ msgstr "Remover interligações" msgid "Remove domains" msgstr "" -msgid "Trust direction" -msgstr "" - -#, fuzzy -#| msgid "Trusts" -msgid "Trust status" -msgstr "Interligações" - -#, fuzzy -#| msgid "Trusts" -msgid "Trust type" -msgstr "Interligações" - msgid "Alternative UPN suffixes" msgstr "" @@ -21214,9 +23233,6 @@ msgstr "" msgid "Topology" msgstr "" -msgid "Trusts" -msgstr "Interligações" - msgid "True" msgstr "" @@ -21319,1420 +23335,6 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" -"\n" -"Obter informação acerca dos servidores IPA.\n" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -msgid "IPA Servers" -msgstr "" - -msgid "Server location" -msgstr "" - -msgid "Service weight" -msgstr "" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "Modificar informação acerca de um servidor IPA" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "error on server '%(server)s': %(error)s" -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "erro no servidor '%(server)s': %(error)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, fuzzy -#| msgid "This entry is already enabled" -msgid "Server has already been deleted" -msgstr "Esta entrada já está ativada" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -msgid "Server state" -msgstr "" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -msgid "password policy" -msgstr "política de palavra-passe" - -#, fuzzy -#| msgid "password policy" -msgid "password policies" -msgstr "política de palavra-passe" - -#, fuzzy -#| msgid "Password Policy" -msgid "Password Policies" -msgstr "Política de Palavra-passe" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -#, fuzzy -#| msgid "Add password policy" -msgid "cannot delete global password policy" -msgstr "Adicionar política de palavra-passe" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -#, fuzzy -#| msgid "Trusts" -msgid "AD Trust setup" -msgstr "Interligações" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -#, fuzzy -#| msgid "trusts" -msgid "trust" -msgstr "interligações" - -msgid "trusts" -msgstr "interligações" - -#, fuzzy -#| msgid "Trusts" -msgid "Trust" -msgstr "Interligações" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -#, fuzzy -#| msgid "trusts" -msgid "trust type" -msgstr "interligações" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -#, fuzzy -#| msgid "trusts" -msgid "trust domains" -msgstr "interligações" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -#| msgid "Display information about a named group." -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "Exibir informação acerca de um grupo nomeado." - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -22898,634 +23500,36 @@ msgstr "" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "" -msgid "delegation" +msgid "self service permission" msgstr "" -msgid "delegations" +msgid "self service permissions" msgstr "" -msgid "Delegations" +msgid "Self Service Permissions" msgstr "" -msgid "Delegation" +msgid "Self Service Permission" msgstr "" #, python-format -msgid "Added delegation \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted delegation \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "Modified delegation \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" msgstr[0] "" msgstr[1] "" -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -#, fuzzy -#| msgid "This entry cannot be enabled or disabled" -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Esta entrada não pode estar ativada ou desativada" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, fuzzy, python-format -#| msgid "options are not allowed" -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "não são pertimidas opções" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "This entry is already enabled" -msgid "%s: user is already preserved" -msgstr "Esta entrada já está ativada" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "This entry is already enabled" -msgid "user \"%s\" is already active" -msgstr "Esta entrada já está ativada" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, fuzzy, python-format -#| msgid "This entry is already disabled" -msgid "Account disabled: %(disabled)s" -msgstr "Esta entrada já está desativada" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - #, python-format msgid "all masters must have %(role)s role enabled" msgstr "" @@ -23709,25 +23713,6 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - msgid "Request must be a dict" msgstr "" @@ -23749,6 +23734,25 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #, python-format msgid "must equal %r" msgstr "" diff --git a/po/pt_BR.po b/po/pt_BR.po index b996eee89..de28624c2 100644 --- a/po/pt_BR.po +++ b/po/pt_BR.po @@ -5,7 +5,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2020-08-25 16:29+0000\n" "Last-Translator: Daniel Lara Souza \n" "Language-Team: Portuguese (Brazil) to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "" + +msgid "User Group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added group \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "gid cannot be set for external group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted group \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "privileged group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified group \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Not allowed on non-leaf entry" +msgid "not allowed to modify user entries" +msgstr "Não permitido em uma entrada não-folha" + +#, fuzzy +#| msgid "Not allowed on non-leaf entry" +msgid "not allowed to modify group entries" +msgstr "Não permitido em uma entrada não-folha" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for DNS servers." +msgstr "Pesquisa por classes." + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +#, fuzzy +#| msgid "Display information about a class." +msgid "Display configuration of a DNS server." +msgstr "Exibe informações sobre uma classe." + +msgid "Add a new DNS server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "Delete a DNS server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added HBAC service \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be TRUE or FALSE" +msgstr "deve ser True ou False" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Base-64 encoded user certificate" +msgstr "deve ser um certificado" + +msgid "Certificate mapping data" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, fuzzy, python-format +#| msgid "can be at most %(maxlength)d characters" +msgid "can be at most %(len)d characters" +msgstr "pode ser no máximo %(maxlength)d caracteres" + +msgid "Issuer" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Issuer of the certificate" +msgstr "deve ser um certificado" + +msgid "Subject" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Subject of the certificate" +msgstr "deve ser um certificado" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "%(filename)s: file not found" +msgid "{role}: role not found" +msgstr "%(filename)s: arquivo não encontrado" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added segment \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted segment \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified segment \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "must be '%(value)s'" +msgid "%(value)s" +msgstr "deve ser \"%(value)s\"" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added netgroup \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "Whether PKINIT is enabled or disabled" +msgstr "Esta entrada não pode ser habilitada ou desabilitada" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added privilege \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted privilege \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Malformed principal: '%(value)s'" +msgid "Modified privilege \"%(value)s\"" +msgstr "Principal malformado: \"%(value)s\"" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for Class of Service entry" +msgstr "Pesquisa por classes." + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Password Policy" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +#, fuzzy +#| msgid "A managed group cannot have a password policy." +msgid "cannot delete global password policy" +msgstr "Um grupo gerenciado não pode ter uma política de senhas." + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "Member principals" +msgstr "deve ser um principal de Kerberos" + +#, fuzzy, python-format +#| msgid "Malformed principal: '%(value)s'" +msgid "Malformed principal: %(error)s" +msgstr "Principal malformado: \"%(value)s\"" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added stage user \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "givenname is required" +msgstr "\"%(name)s\" é necessário" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "sn is required" +msgstr "\"%(name)s\" é necessário" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted stage user \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "can be at most %(maxvalue)s" +msgid "Activate a stage user \"%(value)s\"" +msgstr "pode ser no máximo %(maxvalue)s" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" +"\n" +"Operações de certificado IPA\n" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Base-64 encoded certificate." +msgstr "deve ser um certificado" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA certificate operations\n" +msgid "Certificate chain" +msgstr "" +"\n" +"Operações de certificado IPA\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA certificate operations\n" +msgid "X.509 certificate chain" +msgstr "" +"\n" +"Operações de certificado IPA\n" + +msgid "Subject email address" +msgstr "" + +#, fuzzy +#| msgid "must be DNS name" +msgid "Subject DNS name" +msgstr "deve ser um nome de DNS" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +msgid "Subject IP Address" +msgstr "" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "Subject Kerberos principal name" +msgstr "deve ser um principal de Kerberos" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +msgid "Serial number (hex)" +msgstr "" + +msgid "Request status" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate signing request" +msgid "Include certificate chain in output" +msgstr "deve ser uma solicitação de assinatura de certificado" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "'add' option" +msgstr "Opções obsoletas" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(name)s certificate is not valid" +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "%(name)s certificado não é válido" +msgstr[1] "%(name)s certificado não é válido" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "comando sudo" + +msgid "sudo commands" +msgstr "comandos sudo" + +msgid "Sudo Commands" +msgstr "Comandos sudo" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modify Sudo Command." +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "Modifica comando sudo." +msgstr[1] "Modifica comando sudo." + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +#, fuzzy +#| msgid "this option is deprecated" +msgid "this option has been deprecated." +msgstr "esta opção foi descontinuada" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "" + +msgid "command" +msgstr "comando" + +msgid "commands" +msgstr "comandos" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +#, fuzzy +#| msgid "sudo command" +msgid "sudo command group" +msgstr "comando sudo" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo command groups" +msgstr "comandos sudo" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +#, fuzzy +#| msgid "must be dictionary" +msgid "Trust direction" +msgstr "deve ser um dicionário" + +msgid "Trust type" +msgstr "" + +msgid "Trust status" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " msgstr "" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." msgstr "" +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted trust \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, fuzzy, python-format +#| msgid "must be '%(value)s'" +msgid "must be \"%s\"" +msgstr "deve ser \"%(value)s\"" + +#, fuzzy +#| msgid "Not allowed on non-leaf entry" +msgid "not allowed to remotely add agent" +msgstr "Não permitido em uma entrada não-folha" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Default" +msgid "vault" +msgstr "Padrão" + +#, fuzzy +#| msgid "Default" +msgid "vaults" +msgstr "Padrão" + +#, fuzzy +#| msgid "Default" +msgid "Vaults" +msgstr "Padrão" + +#, fuzzy +#| msgid "Default" +msgid "Vault" +msgstr "Padrão" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "Vault configuration" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Archived data into vault \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "Retrieve data from a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Malformed principal: '%(value)s'" +msgid "Imported profile \"%(value)s\"" +msgstr "Principal malformado: \"%(value)s\"" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted profile \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Certificate operation cannot be completed: %(error)s" +msgid "Certificate profiles cannot be renamed" +msgstr "A operação do certificado não pode ser concluída: %(error)s" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "" + +msgid "Host Group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added hostgroup \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "hostgroup" +msgstr "" + +msgid "privileged hostgroup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA certificate operations\n" +msgid "" +"\n" +"IPA locations\n" +msgstr "" +"\n" +"Operações de certificado IPA\n" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Location name" +msgstr "Nome do comando" + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +msgid "Servers" +msgstr "" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added IPA location \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "Delete an IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "IPA Server" +msgstr "" + +#, fuzzy +#| msgid "Display information about a command." +msgid "Modify information about an IPA location." +msgstr "Exibe informações sobre um comando." + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified IPA location \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy +#| msgid "Search for commands." +msgid "Search for IPA locations." +msgstr "Pesquisa por comandos." + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Display information about a command." +msgid "Display information about an IPA location." +msgstr "Exibe informações sobre um comando." + +msgid "Servers in location" +msgstr "" + +msgid "Role" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added role \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted role \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified role \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added user \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted user \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "This entry is already enabled" +msgid "%s: user is already preserved" +msgstr "Esta entrada já está habilitada" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified user \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Undeleted user account \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "This entry is already enabled" +msgid "user \"%s\" is already active" +msgstr "Esta entrada já está habilitada" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Staged user account \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Disabled user account \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Enabled user account \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Unlocked account \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry is already disabled" +msgid "Account disabled: %(disabled)s" +msgstr "Esta entrada já está desabilitada" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Service principal is required" +msgid "Remove principal alias from the user entry" +msgstr "O principal do serviço é necessário" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added OTP token \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "cannot be empty" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified OTP token \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "A list of ACI values" +msgstr "" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +#, fuzzy +#| msgid "Service principal is required" +msgid "ACI prefix is required" +msgstr "O principal do serviço é necessário" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, fuzzy, python-format +#| msgid "Certificate format error: %(error)s" +msgid "Syntax Error: %(error)s" +msgstr "Erro de formato de certificado: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Created ACI \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted ACI \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified ACI \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Renamed ACI to \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + msgid "" "\n" "Domain Name System (DNS)\n" @@ -13763,9 +17941,6 @@ msgstr "" msgid "Managedby permission" msgstr "" -msgid "DNS is not configured" -msgstr "" - msgid "cannot be used when a zone is specified" msgstr "" @@ -14000,1396 +18175,552 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, python-brace-format msgid "" -"\n" -"DNS server configuration\n" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." msgstr "" msgid "" "\n" -"Manipulate DNS server configuration\n" +"API Schema\n" msgstr "" msgid "" "\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" +"Provides API introspection capabilities.\n" msgstr "" msgid "" "\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" +" Show user-find details:\n" +" ipa command-show user-find\n" msgstr "" msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" msgstr "" -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." +msgid "Documentation" msgstr "" -msgid "Modify DNS server configuration" +msgid "Exclude from" +msgstr "" + +msgid "Include in" msgstr "" #, python-format -msgid "Modified DNS server \"%(value)s\"" +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Version" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" msgstr "" #, fuzzy -#| msgid "Search for classes." -msgid "Search for DNS servers." -msgstr "Pesquisa por classes." +#| msgid "Command name" +msgid "Method name" +msgstr "Nome do comando" -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" +#, fuzzy, python-format +#| msgid "%(filename)s: file not found" +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(filename)s: arquivo não encontrado" -msgid "IPA DNS Server is not installed" -msgstr "" +msgid "Display information about a command." +msgstr "Exibe informações sobre um comando." -#, fuzzy -#| msgid "Display information about a class." -msgid "Display configuration of a DNS server." +msgid "Search for commands." +msgstr "Pesquisa por comandos." + +msgid "Return command defaults" +msgstr "Retorna o padrão do comando" + +msgid "Display information about a class." msgstr "Exibe informações sobre uma classe." -msgid "Add a new DNS server." -msgstr "" +msgid "Search for classes." +msgstr "Pesquisa por classes." -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added new DNS server \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" +msgid "Display information about a help topic." +msgstr "Exibe informações sobre um tópico de ajuda." -msgid "Delete a DNS server" -msgstr "" +msgid "Search for help topics." +msgstr "Pesquisa por tópicos de ajuda." -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" +msgid "Required" +msgstr "Obrigatório" -msgid "REST API is not logged in." -msgstr "" +msgid "Multi-value" +msgstr "Multivalor" -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" +msgid "Always ask" +msgstr "Sempre perguntar" -msgid "Unable to communicate with CMS" -msgstr "" +msgid "CLI metavar" +msgstr "Metavar de CLI" -msgid "Response from CA was not valid JSON" -msgstr "" +msgid "CLI name" +msgstr "Nome de CLI" -msgid "Host-based access control commands" -msgstr "" +msgid "Confirm (password)" +msgstr "Confirmar (senha)" -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added HBAC service \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added stage user \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy -#| msgid "'%(name)s' is required" -msgid "givenname is required" -msgstr "\"%(name)s\" é necessário" - -#, fuzzy -#| msgid "'%(name)s' is required" -msgid "sn is required" -msgstr "\"%(name)s\" é necessário" - -#, fuzzy, python-format -#| msgid "can be at most %(maxlength)d characters" -msgid "can be at most %(len)d characters" -msgstr "pode ser no máximo %(maxlength)d caracteres" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted stage user \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "can be at most %(maxvalue)s" -msgid "Activate a stage user \"%(value)s\"" -msgstr "pode ser no máximo %(maxvalue)s" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added segment \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted segment \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Modified segment \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "must be '%(value)s'" -msgid "%(value)s" -msgstr "deve ser \"%(value)s\"" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added topology suffix \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "" - -msgid "Host Group" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added hostgroup \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "hostgroup" -msgstr "" - -msgid "privileged hostgroup" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -#, fuzzy -#| msgid "Default" -msgid "vault" +msgid "Default" msgstr "Padrão" #, fuzzy #| msgid "Default" -msgid "vaults" +msgid "Default from" msgstr "Padrão" +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + #, fuzzy -#| msgid "Default" -msgid "Vaults" -msgstr "Padrão" +#| msgid "Positional arguments" +msgid "Positional argument" +msgstr "Argumentos posicionais" + +#, fuzzy, python-format +#| msgid "%(filename)s: file not found" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(filename)s: arquivo não encontrado" #, fuzzy -#| msgid "Default" -msgid "Vault" -msgstr "Padrão" +#| msgid "Display information about a command." +msgid "Display information about a command parameter." +msgstr "Exibe informações sobre um comando." -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" +#, fuzzy +#| msgid "Search for commands." +msgid "Search command parameters." +msgstr "Pesquisa por comandos." #, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added vault \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" +#| msgid "%(filename)s: file not found" +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(filename)s: arquivo não encontrado" -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted vault \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" +#, fuzzy +#| msgid "Display information about a command." +msgid "Display information about a command output." +msgstr "Exibe informações sobre um comando." -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" +#, fuzzy +#| msgid "Search for commands." +msgid "Search for command outputs." +msgstr "Pesquisa por comandos." -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgid "Store and provide schema for commands and topics" msgstr "" -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Modified vault \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "Vault configuration" +msgid "Fingerprint of schema cached by client" msgstr "" -msgid "IPA KRA servers" +msgid "Member service groups" msgstr "" -msgid "IPA servers configured as key recovery agents" +msgid "Member HBAC service groups" msgstr "" -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Archived data into vault \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "Retrieve data from a vault." +msgid "Member ID user overrides" msgstr "" -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "No archived data." +msgid "Indirect Member ID user overrides" msgstr "" -msgid "Checks if any of the servers has the KRA service enabled" +msgid "Indirect Member permissions" msgstr "" -msgid "netgroups" +msgid "Indirect Member HBAC service" msgstr "" -msgid "Netgroups" +msgid "Indirect Member HBAC service group" msgstr "" -msgid "Netgroup" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added netgroup \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" +msgid "Invalid format. Should be name=value" msgstr "" #, fuzzy #| msgid "This entry cannot be enabled or disabled" -msgid "Whether PKINIT is enabled or disabled" +msgid "An IPA master host cannot be deleted or disabled" msgstr "Esta entrada não pode ser habilitada ou desabilitada" -msgid "Report PKINIT status on the IPA masters" +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" msgstr "" #, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" +msgid "container entry (%(container)s) not found" msgstr "" #, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" +#| msgid "%(filename)s: file not found" +msgid "%(parent)s: %(oname)s not found" +msgstr "%(filename)s: arquivo não encontrado" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" #, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" +#| msgid "The character %(char)r is not allowed." +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "O caractere %(char)r não é permitido." #, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" msgstr "" #, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "A list of ACI values" +msgid "Rename the %(ldap_obj_name)s object" msgstr "" -msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" msgstr "" #, fuzzy -#| msgid "Service principal is required" -msgid "ACI prefix is required" -msgstr "O principal do serviço é necessário" +#| msgid "Command '%(name)s' has been deprecated" +msgid "The deny type has been deprecated." +msgstr "O comando \"%(name)s\" foi descontinuado" -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" +msgid "HBAC rules" msgstr "" -msgid "filter and memberof are mutually exclusive" +msgid "HBAC Rules" msgstr "" -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, fuzzy, python-format -#| msgid "Certificate format error: %(error)s" -msgid "Syntax Error: %(error)s" -msgstr "Erro de formato de certificado: %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -msgid "ACI" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Created ACI \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted ACI \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - #, fuzzy, python-format #| msgid "Added Sudo Command \"%(value)s\"" -msgid "Modified ACI \"%(value)s\"" +msgid "Added HBAC rule \"%(value)s\"" msgstr "Adicionado o comando sudo \"%(value)s\"" -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - #, fuzzy, python-format #| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Renamed ACI to \"%(value)s\"" +msgid "Deleted HBAC rule \"%(value)s\"" msgstr "Excluído o comando sudo \"%(value)s\"" +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + msgid "" "\n" -"Server configuration\n" +"Simulate use of Host-based access controls\n" "\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"NOTES:\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" "\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" "\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" +" --user, --host, and --service are mandatory, others are optional.\n" "\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" "\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" -#, fuzzy -#| msgid "must be at least %(minvalue)d" -msgid "must be at least 10" -msgstr "deve ser pelo menos %(minvalue)d" - -msgid "configuration options" +msgid "Unresolved rules in --rules" msgstr "" -msgid "Configuration" +#, python-format +msgid "Access granted: %s" msgstr "" -msgid "Maximum hostname length" +msgid "ID View" msgstr "" -msgid "IPA masters" +msgid "system ID View" msgstr "" -msgid "List of all IPA masters" +msgid "ID Views" msgstr "" -msgid "Hidden IPA masters" +msgid "User object overrides" msgstr "" -msgid "List of all hidden IPA masters" +msgid "Group object overrides" msgstr "" -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" +msgid "Hosts the view applies to" msgstr "" msgid "Domain resolution order" @@ -15398,238 +18729,190 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -msgid "IPA servers configured as domain name server" +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added ID View \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted ID View \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" msgstr "" -msgid "Hidden IPA DNS servers" +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" msgstr "" -msgid "Hidden IPA servers configured as domain name server" +msgid "not found" msgstr "" -msgid "DNSec key master" +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" msgstr "" #, fuzzy -#| msgid "modifying primary key is not allowed" -msgid "Empty domain is not allowed" -msgstr "a modificação da chave primária não é permitida" - -#, fuzzy, python-format -#| msgid "invalid '%(name)s': %(error)s" -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "\"%(name)s\" inválido: %(error)s" +#| msgid "Multi-value" +msgid "value" +msgstr "Multivalor" #, python-format -msgid "Server has no information about domain '%(domain)s'" +msgid "ID View applied to %i host." msgstr "" #, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "The group doesn't exist" +msgid "ID View applied to %i hosts." msgstr "" #, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" +msgid "ID View cleared from %i host." msgstr "" #, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, fuzzy, python-format -#| msgid "error on server '%(server)s': %(error)s" -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "erro no servidor \"%(server)s\": %(error)s" - -msgid "SELinux user map default user not in order list" +msgid "ID View cleared from %i hosts." msgstr "" msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" -msgid "groups" +msgid "IPA object" msgstr "" -msgid "User Group" +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." msgstr "" #, fuzzy, python-format #| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added group \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" msgstr "Adicionado o comando sudo \"%(value)s\"" -msgid "gid cannot be set for external group" +msgid "Delete an ID override." msgstr "" #, fuzzy, python-format #| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted group \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" msgstr "Excluído o comando sudo \"%(value)s\"" -msgid "privileged group" +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +#, fuzzy +#| msgid "Search for commands." +msgid "Search for an ID override." +msgstr "Pesquisa por comandos." + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Display information about a command." +msgid "Display information about an ID override." +msgstr "Exibe informações sobre um comando." + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" msgstr "" #, fuzzy, python-format #| msgid "Added Sudo Command \"%(value)s\"" -msgid "Modified group \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" msgstr "Adicionado o comando sudo \"%(value)s\"" +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + #, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" msgstr[0] "" msgstr[1] "" -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" msgstr "" #, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -#, fuzzy -#| msgid "Not allowed on non-leaf entry" -msgid "not allowed to modify user entries" -msgstr "Não permitido em uma entrada não-folha" - -#, fuzzy -#| msgid "Not allowed on non-leaf entry" -msgid "not allowed to modify group entries" -msgstr "Não permitido em uma entrada não-folha" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" msgid "" "\n" @@ -15858,1276 +19141,41 @@ msgid_plural "%(count)d permissions matched" msgstr[0] "" msgstr[1] "" -msgid "" -"\n" -"OTP Tokens\n" +msgid "delegation" msgstr "" -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added OTP token \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "cannot be empty" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Modified OTP token \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgid "delegations" msgstr "" #, fuzzy -#| msgid "this option is deprecated" -msgid "this option has been deprecated." -msgstr "esta opção foi descontinuada" +#| msgid "Deprecated options" +msgid "Delegations" +msgstr "Opções obsoletas" -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgid "Delegation" msgstr "" #, fuzzy, python-format #| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added Sudo Rule \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" msgstr "Adicionado o comando sudo \"%(value)s\"" #, fuzzy, python-format #| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted Sudo Rule \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" msgstr "Excluído o comando sudo \"%(value)s\"" #, fuzzy, python-format #| msgid "Added Sudo Command \"%(value)s\"" -msgid "Modified Sudo Rule \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" msgstr "Adicionado o comando sudo \"%(value)s\"" #, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -msgid "command" -msgstr "comando" - -msgid "commands" -msgstr "comandos" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "" msgstr[1] "" -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -msgid "sudo command" -msgstr "comando sudo" - -msgid "sudo commands" -msgstr "comandos sudo" - -msgid "Sudo Commands" -msgstr "Comandos sudo" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Modify Sudo Command." -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "Modifica comando sudo." -msgstr[1] "Modifica comando sudo." - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -#, fuzzy -#| msgid "sudo command" -msgid "sudo command group" -msgstr "comando sudo" - -#, fuzzy -#| msgid "sudo commands" -msgid "sudo command groups" -msgstr "comandos sudo" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| "IPA certificate operations\n" -msgid "" -"\n" -"IPA locations\n" -msgstr "" -"\n" -"Operações de certificado IPA\n" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -#, fuzzy -#| msgid "Command name" -msgid "Location name" -msgstr "Nome do comando" - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -msgid "Servers" -msgstr "" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added IPA location \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "Delete an IPA location." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "IPA Server" -msgstr "" - -#, fuzzy -#| msgid "Display information about a command." -msgid "Modify information about an IPA location." -msgstr "Exibe informações sobre um comando." - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Modified IPA location \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy -#| msgid "Search for commands." -msgid "Search for IPA locations." -msgstr "Pesquisa por comandos." - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -#| msgid "Display information about a command." -msgid "Display information about an IPA location." -msgstr "Exibe informações sobre um comando." - -msgid "Servers in location" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Version" -msgstr "" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -#| msgid "Command name" -msgid "Method name" -msgstr "Nome do comando" - -#, fuzzy, python-format -#| msgid "%(filename)s: file not found" -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(filename)s: arquivo não encontrado" - -msgid "Display information about a command." -msgstr "Exibe informações sobre um comando." - -msgid "Search for commands." -msgstr "Pesquisa por comandos." - -msgid "Return command defaults" -msgstr "Retorna o padrão do comando" - -msgid "Display information about a class." -msgstr "Exibe informações sobre uma classe." - -msgid "Search for classes." -msgstr "Pesquisa por classes." - -msgid "Display information about a help topic." -msgstr "Exibe informações sobre um tópico de ajuda." - -msgid "Search for help topics." -msgstr "Pesquisa por tópicos de ajuda." - -msgid "Required" -msgstr "Obrigatório" - -msgid "Multi-value" -msgstr "Multivalor" - -msgid "Always ask" -msgstr "Sempre perguntar" - -msgid "CLI metavar" -msgstr "Metavar de CLI" - -msgid "CLI name" -msgstr "Nome de CLI" - -msgid "Confirm (password)" -msgstr "Confirmar (senha)" - -msgid "Default" -msgstr "Padrão" - -#, fuzzy -#| msgid "Default" -msgid "Default from" -msgstr "Padrão" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -#, fuzzy -#| msgid "Positional arguments" -msgid "Positional argument" -msgstr "Argumentos posicionais" - -#, fuzzy, python-format -#| msgid "%(filename)s: file not found" -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(filename)s: arquivo não encontrado" - -#, fuzzy -#| msgid "Display information about a command." -msgid "Display information about a command parameter." -msgstr "Exibe informações sobre um comando." - -#, fuzzy -#| msgid "Search for commands." -msgid "Search command parameters." -msgstr "Pesquisa por comandos." - -#, fuzzy, python-format -#| msgid "%(filename)s: file not found" -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(filename)s: arquivo não encontrado" - -#, fuzzy -#| msgid "Display information about a command." -msgid "Display information about a command output." -msgstr "Exibe informações sobre um comando." - -#, fuzzy -#| msgid "Search for commands." -msgid "Search for command outputs." -msgstr "Pesquisa por comandos." - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added ID range \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted ID range \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Modified ID range \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added selfservice \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "IPA role name" -msgstr "" - msgid "HBAC rule and local members cannot both be set" msgstr "" @@ -17194,1020 +19242,197 @@ msgstr "" msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "Excluído o comando sudo \"%(value)s\"" -#, fuzzy, python-brace-format -#| msgid "%(filename)s: file not found" -msgid "{role}: role not found" -msgstr "%(filename)s: arquivo não encontrado" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - msgid "" "\n" -"IPA certificate operations\n" -msgstr "" -"\n" -"Operações de certificado IPA\n" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" +"IPA servers\n" msgstr "" #, fuzzy -#| msgid "must be a certificate" -msgid "Base-64 encoded certificate." -msgstr "deve ser um certificado" - -#, fuzzy -#| msgid "" -#| "\n" -#| "IPA certificate operations\n" -msgid "Certificate chain" -msgstr "" +#| msgid "Display information about a class." +msgid "" "\n" -"Operações de certificado IPA\n" +"Get information about installed IPA servers.\n" +msgstr "Exibe informações sobre uma classe." -#, fuzzy -#| msgid "" -#| "\n" -#| "IPA certificate operations\n" -msgid "X.509 certificate chain" -msgstr "" +msgid "" "\n" -"Operações de certificado IPA\n" - -msgid "Subject" +" Find all servers:\n" +" ipa server-find\n" msgstr "" -msgid "Subject email address" +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "server" +msgstr "" + +msgid "servers" +msgstr "" + +msgid "IPA Servers" +msgstr "" + +msgid "Server location" +msgstr "" + +msgid "Service weight" +msgstr "" + +msgid "Weight for server services" +msgstr "" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" msgstr "" #, fuzzy -#| msgid "must be DNS name" -msgid "Subject DNS name" -msgstr "deve ser um nome de DNS" +#| msgid "Display information about a class." +msgid "Modify information about an IPA server." +msgstr "Exibe informações sobre uma classe." -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -msgid "Subject IP Address" -msgstr "" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -#, fuzzy -#| msgid "must be Kerberos principal" -msgid "Subject Kerberos principal name" -msgstr "deve ser um principal de Kerberos" - -msgid "Subject Other Name" -msgstr "" - -msgid "Issuer" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Serial number (hex)" -msgstr "" - -msgid "Request status" -msgstr "" - -#, fuzzy -#| msgid "must be a certificate signing request" -msgid "Include certificate chain in output" -msgstr "deve ser uma solicitação de assinatura de certificado" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" +#, python-format +msgid "Modified IPA server \"%(value)s\"" msgstr "" #, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -#, fuzzy -#| msgid "Deprecated options" -msgid "'add' option" -msgstr "Opções obsoletas" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(name)s certificate is not valid" -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "%(name)s certificado não é válido" -msgstr[1] "%(name)s certificado não é válido" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added ID View \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted ID View \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -#, fuzzy -#| msgid "Multi-value" -msgid "value" -msgstr "Multivalor" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added ID override \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "Delete an ID override." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted ID override \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -#, fuzzy -#| msgid "Search for commands." -msgid "Search for an ID override." -msgstr "Pesquisa por comandos." - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -#| msgid "Display information about a command." -msgid "Display information about an ID override." -msgstr "Exibe informações sobre um comando." - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -#, fuzzy -#| msgid "must be a certificate" -msgid "Base-64 encoded user certificate" -msgstr "deve ser um certificado" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added User ID override \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" msgstr[0] "" msgstr[1] "" -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added Group ID override \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - #, fuzzy, python-format #| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted Group ID override \"%(value)s\"" +msgid "Deleted IPA server \"%(value)s\"" msgstr "Excluído o comando sudo \"%(value)s\"" -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" msgstr "" #, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(filename)s: file not found" -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(filename)s: arquivo não encontrado" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added automember rule \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Modified automember rule \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "" -"\n" -" Search for automember rules.\n" -" " +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" #, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "erro no servidor \"%(server)s\": %(error)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" #, fuzzy -#| msgid "Display information about a command." -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "Exibe informações sobre um comando." +#| msgid "This entry is already enabled" +msgid "Server has already been deleted" +msgstr "Esta entrada já está habilitada" -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +msgid "Server state" +msgstr "" + +#, fuzzy, python-format +#| msgid "can be at most %(maxvalue)s" +msgid "Changed server state of \"%(value)s\"." +msgstr "pode ser no máximo %(maxvalue)s" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." msgstr "" #, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" +msgid "Cannot hide last enabled %(name)s server." msgstr "" msgid "" "\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" +"Session Support for IPA\n" msgstr "" #, fuzzy @@ -18399,6 +19624,869 @@ msgstr "" msgid "Enabled CA \"%(value)s\"" msgstr "Excluído o comando sudo \"%(value)s\"" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Display information about a help topic." +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "Exibe informações sobre um tópico de ajuda." + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 10" +msgstr "deve ser pelo menos %(minvalue)d" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +#, fuzzy +#| msgid "modifying primary key is not allowed" +msgid "Empty domain is not allowed" +msgstr "a modificação da chave primária não é permitida" + +#, fuzzy, python-format +#| msgid "invalid '%(name)s': %(error)s" +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "\"%(name)s\" inválido: %(error)s" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "erro no servidor \"%(server)s\": %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Base-64 encoded host certificate" +msgstr "deve ser um certificado" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added host \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted host \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified host \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "can be at most %(maxvalue)s" +msgid "Disabled host \"%(value)s\"" +msgstr "pode ser no máximo %(maxvalue)s" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added certificates to host \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified ID range \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + msgid "Internationalization messages" msgstr "" @@ -19514,12 +21602,6 @@ msgstr "" msgid "REVOKED" msgstr "" -msgid "Serial Number" -msgstr "" - -msgid "Serial Number (hex)" -msgstr "" - msgid "SHA1 Fingerprint" msgstr "" @@ -19586,9 +21668,6 @@ msgstr "" "\n" "Operações de certificado IPA\n" -msgid "Certificate mapping data" -msgstr "" - msgid "Configuration string" msgstr "" @@ -20325,9 +22404,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "" - msgid "Netgroup Settings" msgstr "" @@ -20443,9 +22519,6 @@ msgstr "" msgid "Add password policy" msgstr "" -msgid "Password Policy" -msgstr "" - msgid "Remove password policies" msgstr "" @@ -20913,17 +22986,6 @@ msgstr "" msgid "Remove domains" msgstr "" -#, fuzzy -#| msgid "must be dictionary" -msgid "Trust direction" -msgstr "deve ser um dicionário" - -msgid "Trust status" -msgstr "" - -msgid "Trust type" -msgstr "" - msgid "Alternative UPN suffixes" msgstr "" @@ -21460,9 +23522,6 @@ msgstr "" msgid "Topology" msgstr "" -msgid "Trusts" -msgstr "" - msgid "True" msgstr "" @@ -21573,1439 +23632,6 @@ msgstr "Obrigatório" msgid "Unsupported value" msgstr "" -msgid "Role" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added role \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted role \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Modified role \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -#, fuzzy -#| msgid "Display information about a class." -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "Exibe informações sobre uma classe." - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -msgid "IPA Servers" -msgstr "" - -msgid "Server location" -msgstr "" - -msgid "Service weight" -msgstr "" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -#, fuzzy -#| msgid "Display information about a class." -msgid "Modify information about an IPA server." -msgstr "Exibe informações sobre uma classe." - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "error on server '%(server)s': %(error)s" -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "erro no servidor \"%(server)s\": %(error)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, fuzzy -#| msgid "This entry is already enabled" -msgid "Server has already been deleted" -msgstr "Esta entrada já está habilitada" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, fuzzy, python-format -#| msgid "must be '%(value)s'" -msgid "must be \"%s\"" -msgstr "deve ser \"%(value)s\"" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -msgid "Server state" -msgstr "" - -#, fuzzy, python-format -#| msgid "can be at most %(maxvalue)s" -msgid "Changed server state of \"%(value)s\"." -msgstr "pode ser no máximo %(maxvalue)s" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -#, fuzzy -#| msgid "must be Kerberos principal" -msgid "Member principals" -msgstr "deve ser um principal de Kerberos" - -#, fuzzy, python-format -#| msgid "Malformed principal: '%(value)s'" -msgid "Malformed principal: %(error)s" -msgstr "Principal malformado: \"%(value)s\"" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added service delegation target \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#, fuzzy -#| msgid "must be a certificate" -msgid "Base-64 encoded host certificate" -msgstr "deve ser um certificado" - -msgid "Principal alias" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added host \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted host \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Modified host \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -#| msgid "can be at most %(maxvalue)s" -msgid "Disabled host \"%(value)s\"" -msgstr "pode ser no máximo %(maxvalue)s" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added certificates to host \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -#, fuzzy -#| msgid "Search for classes." -msgid "Search for Class of Service entry" -msgstr "Pesquisa por classes." - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -msgid "Password Policies" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -#, fuzzy -#| msgid "A managed group cannot have a password policy." -msgid "cannot delete global password policy" -msgstr "Um grupo gerenciado não pode ter uma política de senhas." - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted trust \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, fuzzy -#| msgid "Not allowed on non-leaf entry" -msgid "not allowed to remotely add agent" -msgstr "Não permitido em uma entrada não-folha" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -#| msgid "Display information about a help topic." -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "Exibe informações sobre um tópico de ajuda." - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added privilege \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted privilege \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Malformed principal: '%(value)s'" -msgid "Modified privilege \"%(value)s\"" -msgstr "Principal malformado: \"%(value)s\"" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -23181,660 +23807,38 @@ msgstr "O principal do serviço é necessário" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "" -msgid "delegation" +msgid "self service permission" msgstr "" -msgid "delegations" +msgid "self service permissions" msgstr "" -#, fuzzy -#| msgid "Deprecated options" -msgid "Delegations" -msgstr "Opções obsoletas" +msgid "Self Service Permissions" +msgstr "" -msgid "Delegation" +msgid "Self Service Permission" msgstr "" #, fuzzy, python-format #| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added delegation \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" msgstr "Adicionado o comando sudo \"%(value)s\"" #, fuzzy, python-format #| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted delegation \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" msgstr "Excluído o comando sudo \"%(value)s\"" -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Modified delegation \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" #, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" msgstr[0] "" msgstr[1] "" -#, fuzzy -#| msgid "Command '%(name)s' has been deprecated" -msgid "The deny type has been deprecated." -msgstr "O comando \"%(name)s\" foi descontinuado" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added HBAC rule \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -#, fuzzy -#| msgid "This entry cannot be enabled or disabled" -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Esta entrada não pode ser habilitada ou desabilitada" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(filename)s: file not found" -msgid "%(parent)s: %(oname)s not found" -msgstr "%(filename)s: arquivo não encontrado" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, fuzzy, python-format -#| msgid "The character %(char)r is not allowed." -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "O caractere %(char)r não é permitido." - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -#, fuzzy -#| msgid "must be True or False" -msgid "must be TRUE or FALSE" -msgstr "deve ser True ou False" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#, fuzzy -#| msgid "must be a certificate" -msgid "Issuer of the certificate" -msgstr "deve ser um certificado" - -#, fuzzy -#| msgid "must be a certificate" -msgid "Subject of the certificate" -msgstr "deve ser um certificado" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Added user \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Deleted user \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "This entry is already enabled" -msgid "%s: user is already preserved" -msgstr "Esta entrada já está habilitada" - -#, fuzzy, python-format -#| msgid "Added Sudo Command \"%(value)s\"" -msgid "Modified user \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Undeleted user account \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "This entry is already enabled" -msgid "user \"%s\" is already active" -msgstr "Esta entrada já está habilitada" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Staged user account \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Disabled user account \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Enabled user account \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted Sudo Command \"%(value)s\"" -msgid "Unlocked account \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, fuzzy, python-format -#| msgid "This entry is already disabled" -msgid "Account disabled: %(disabled)s" -msgstr "Esta entrada já está desabilitada" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -#, fuzzy -#| msgid "Service principal is required" -msgid "Remove principal alias from the user entry" -msgstr "O principal do serviço é necessário" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - #, python-format msgid "all masters must have %(role)s role enabled" msgstr "" @@ -24016,25 +24020,6 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - #, fuzzy #| msgid "must be a certificate" msgid "Request must be a dict" @@ -24060,6 +24045,25 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #, python-format msgid "must equal %r" msgstr "" diff --git a/po/ru.po b/po/ru.po index ac9985323..bc7d094d6 100644 --- a/po/ru.po +++ b/po/ru.po @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2019-11-12 12:31+0000\n" "Last-Translator: Olesya Gerasimenko \n" "Language-Team: Russian\n" @@ -18,6 +18,103 @@ msgstr "" "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2)\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "Не удалось обработать имя учётной записи\n" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "krb5_parse_name %1$d: %2$s\n" + +#, c-format +msgid "Removing principal %s\n" +msgstr "Удаление учётной записи %s\n" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "Не удалось открыть файл таблицы ключей\n" + +#, c-format +msgid "principal not found\n" +msgstr "учётная запись не найдена\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "krb5_kt_get_entry %1$d: %2$s\n" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "Не удалось удалить запись\n" + +#, c-format +msgid "kvno %d\n" +msgstr "kvno %d\n" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "krb5_kt_remove_entry %1$d: %2$s\n" + +#, fuzzy, c-format +#| msgid "Failed to get result: %s\n" +msgid "Failed to set cursor '%1$s'\n" +msgstr "Не удалось получить результат: %s\n" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "Не удалось обработать учётную запись\n" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "krb5_unparse_name %1$d: %2$s\n" + +#, c-format +msgid "realm not found\n" +msgstr "область (realm) не найдена\n" + +msgid "Print debugging information" +msgstr "Вывести отладочные данные" + +msgid "Debugging output" +msgstr "Отладочный вывод" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"Учётная запись, которую следует удалить из файла таблицы ключей (пример: ftp/" +"ftp.example.com@EXAMPLE.COM)" + +msgid "Kerberos Service Principal Name" +msgstr "Имя учётной записи службы Kerberos" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" +"Файл таблицы ключей, из которого следует удалить учётную запись (записи)" + +msgid "Keytab File Name" +msgstr "Имя файла таблицы ключей" + +msgid "Remove all principals in this realm" +msgstr "Удалить все учётные записи в этой области (realm)" + +msgid "Realm name" +msgstr "Имя области (realm)" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "Не удалось инициализировать Kerberos-контекст\n" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "Не удалось открыть файл таблицы ключей \"%1$s\": %2$s\n" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "Не удалось закрыть файл таблицы ключей\n" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "krb5_kt_close %1$d: %2$s\n" + #, c-format msgid "Out of memory!\n" msgstr "Недостаточно памяти!\n" @@ -282,103 +379,6 @@ msgstr "Имя узла должно быть полным: %s\n" msgid "The hostname must not be: %s\n" msgstr "Имя узла не должно быть следующим: %s\n" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "Не удалось обработать имя учётной записи\n" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "krb5_parse_name %1$d: %2$s\n" - -#, c-format -msgid "Removing principal %s\n" -msgstr "Удаление учётной записи %s\n" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "Не удалось открыть файл таблицы ключей\n" - -#, c-format -msgid "principal not found\n" -msgstr "учётная запись не найдена\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "krb5_kt_get_entry %1$d: %2$s\n" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "Не удалось удалить запись\n" - -#, c-format -msgid "kvno %d\n" -msgstr "kvno %d\n" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "krb5_kt_remove_entry %1$d: %2$s\n" - -#, fuzzy, c-format -#| msgid "Failed to get result: %s\n" -msgid "Failed to set cursor '%1$s'\n" -msgstr "Не удалось получить результат: %s\n" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "Не удалось обработать учётную запись\n" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "krb5_unparse_name %1$d: %2$s\n" - -#, c-format -msgid "realm not found\n" -msgstr "область (realm) не найдена\n" - -msgid "Print debugging information" -msgstr "Вывести отладочные данные" - -msgid "Debugging output" -msgstr "Отладочный вывод" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Учётная запись, которую следует удалить из файла таблицы ключей (пример: ftp/" -"ftp.example.com@EXAMPLE.COM)" - -msgid "Kerberos Service Principal Name" -msgstr "Имя учётной записи службы Kerberos" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" -"Файл таблицы ключей, из которого следует удалить учётную запись (записи)" - -msgid "Keytab File Name" -msgstr "Имя файла таблицы ключей" - -msgid "Remove all principals in this realm" -msgstr "Удалить все учётные записи в этой области (realm)" - -msgid "Realm name" -msgstr "Имя области (realm)" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Не удалось инициализировать Kerberos-контекст\n" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "Не удалось открыть файл таблицы ключей \"%1$s\": %2$s\n" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "Не удалось закрыть файл таблицы ключей\n" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "krb5_kt_close %1$d: %2$s\n" - #, c-format msgid "cannot open configuration file %s\n" msgstr "не удалось открыть файл конфигурации %s\n" @@ -12427,6 +12427,157 @@ msgstr "" "Установить двунаправленное отношение доверия. По умолчанию устанавливается " "только одностороннее отношение." +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" +"\n" +"Управление профилями сертификатов\n" +"\n" +"Профили сертификатов используются центром сертификации (Certificate " +"Authority, CA) во время подписи сертификатов, чтобы определить, является ли " +"приемлемым запрос подписи сертификата (Certificate Signing Request, CSR), и, " +"если это так, определить, какие возможности и расширения будут предоставлены " +"сертификатом.\n" +"\n" +"Формат профиля сертификатов — это формат в виде списка свойств, который " +"распознаётся Dogtag или системой сертификации центра сертификации Red Hat.\n" +"\n" +"СИНТАКСИС ИДЕНТИФИКАТОРА ПРОФИЛЯ:\n" +"\n" +"Идентификатор профиля — это строка без пробелов и знаков препинания, она " +"начинается с буквы, за которой следуют другие буквы, цифры или символы " +"подчёркивания (\"_\").\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Импортировать профиль, в котором не будут храниться выданные сертификаты:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Удалить профиль сертификатов:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Показать сведения о профиле:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Сохранить конфигурацию профиля в файл:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Поиск профилей, в которых не хранятся сертификаты:\n" +" ipa certprofile-find --store=false\n" +"\n" +"ФОРМАТ КОНФИГУРАЦИИ ПРОФИЛЯ:\n" +"\n" +"Формат конфигурации профиля — это формат в виде необработанного списка " +"свойств, который используется системой сертификации Dogtag Certificate " +"System. Поддержка формата XML не предусмотрена.\n" +"\n" +"К профилям под управлением IPA применяются следующие ограничения:\n" +"\n" +"- При импорте профиля значение поля \"profileId\", если это поле имеется, " +"должно совпадать с идентификатором, указанным в командной строке.\n" +"\n" +"- Значением поля \"classId\" должно быть \"caEnrollImpl\".\n" +"\n" +"- Значением поля \"auth.instance_id\" должно быть \"raCertAuth\".\n" +"\n" +"- Должны использоваться входной класс \"certReqInputImpl\" и выходной класс " +"\"certOutputImpl\".\n" + +msgid "Profile ID for referring to this profile" +msgstr "Идентификатор профиля для ссылки на этот профиль" + +msgid "Profile description" +msgstr "Описание профиля" + +msgid "Brief description of this profile" +msgstr "Краткое описание этого профиля" + +msgid "Store issued certificates" +msgstr "Сохранять выданные сертификаты" + +msgid "Whether to store certs issued using this profile" +msgstr "" +"Определяет, следует ли сохранять сертификаты, выданные с помощью этого " +"профиля" + +msgid "Delete a Certificate Profile." +msgstr "Удалить профиль сертификатов." + +msgid "Search for Certificate Profiles." +msgstr "Поиск профилей сертификатов." + +msgid "Import a Certificate Profile." +msgstr "Импортировать профиль сертификатов." + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" +"Имя файла необработанного профиля. Поддержка формата XML не предусмотрена." + +msgid "Modify Certificate Profile configuration." +msgstr "Изменить конфигурацию профиля сертификатов." + +msgid "File containing profile configuration" +msgstr "Файл, который содержит конфигурацию профиля" + +msgid "Display the properties of a Certificate Profile." +msgstr "Показать свойства профиля сертификатов." + +msgid "Write profile configuration to file" +msgstr "Записать конфигурацию профиля в файл" + msgid "" "\n" "ID ranges\n" @@ -12693,157 +12844,6 @@ msgstr "" "образом, чтобы он соответствовал новому диапазону.\n" "=======" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" -"\n" -"Управление профилями сертификатов\n" -"\n" -"Профили сертификатов используются центром сертификации (Certificate " -"Authority, CA) во время подписи сертификатов, чтобы определить, является ли " -"приемлемым запрос подписи сертификата (Certificate Signing Request, CSR), и, " -"если это так, определить, какие возможности и расширения будут предоставлены " -"сертификатом.\n" -"\n" -"Формат профиля сертификатов — это формат в виде списка свойств, который " -"распознаётся Dogtag или системой сертификации центра сертификации Red Hat.\n" -"\n" -"СИНТАКСИС ИДЕНТИФИКАТОРА ПРОФИЛЯ:\n" -"\n" -"Идентификатор профиля — это строка без пробелов и знаков препинания, она " -"начинается с буквы, за которой следуют другие буквы, цифры или символы " -"подчёркивания (\"_\").\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Импортировать профиль, в котором не будут храниться выданные сертификаты:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Удалить профиль сертификатов:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Показать сведения о профиле:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Сохранить конфигурацию профиля в файл:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Поиск профилей, в которых не хранятся сертификаты:\n" -" ipa certprofile-find --store=false\n" -"\n" -"ФОРМАТ КОНФИГУРАЦИИ ПРОФИЛЯ:\n" -"\n" -"Формат конфигурации профиля — это формат в виде необработанного списка " -"свойств, который используется системой сертификации Dogtag Certificate " -"System. Поддержка формата XML не предусмотрена.\n" -"\n" -"К профилям под управлением IPA применяются следующие ограничения:\n" -"\n" -"- При импорте профиля значение поля \"profileId\", если это поле имеется, " -"должно совпадать с идентификатором, указанным в командной строке.\n" -"\n" -"- Значением поля \"classId\" должно быть \"caEnrollImpl\".\n" -"\n" -"- Значением поля \"auth.instance_id\" должно быть \"raCertAuth\".\n" -"\n" -"- Должны использоваться входной класс \"certReqInputImpl\" и выходной класс " -"\"certOutputImpl\".\n" - -msgid "Profile ID for referring to this profile" -msgstr "Идентификатор профиля для ссылки на этот профиль" - -msgid "Profile description" -msgstr "Описание профиля" - -msgid "Brief description of this profile" -msgstr "Краткое описание этого профиля" - -msgid "Store issued certificates" -msgstr "Сохранять выданные сертификаты" - -msgid "Whether to store certs issued using this profile" -msgstr "" -"Определяет, следует ли сохранять сертификаты, выданные с помощью этого " -"профиля" - -msgid "Delete a Certificate Profile." -msgstr "Удалить профиль сертификатов." - -msgid "Search for Certificate Profiles." -msgstr "Поиск профилей сертификатов." - -msgid "Import a Certificate Profile." -msgstr "Импортировать профиль сертификатов." - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" -"Имя файла необработанного профиля. Поддержка формата XML не предусмотрена." - -msgid "Modify Certificate Profile configuration." -msgstr "Изменить конфигурацию профиля сертификатов." - -msgid "File containing profile configuration" -msgstr "Файл, который содержит конфигурацию профиля" - -msgid "Display the properties of a Certificate Profile." -msgstr "Показать свойства профиля сертификатов." - -msgid "Write profile configuration to file" -msgstr "Записать конфигурацию профиля в файл" - msgid "Remove users that can manage this token." msgstr "Удалить пользователей, которые могут управлять этим токеном." @@ -16624,208 +16624,22 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "Разделённый запятыми список групп команд Sudo, которые следует удалить" -msgid "Additional instructions:" -msgstr "Дополнительные инструкции:" +msgid "Results are truncated, try a more specific search" +msgstr "Результаты усечены. Попробуйте задать более точные условия поиска" #, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" +msgid "Unknown option: %(option)s" +msgstr "Неизвестный параметр: %(option)s" + +msgid "Client version. Used to determine if server will accept request." msgstr "" -"Не отправлен номер версии программного интерфейса (API), совместимость с " -"новейшими версиями не гарантируется. Предполагается следующая версия API " -"сервера: %(server_version)s" +"Версия клиента. Используется для определения того, примет ли сервер запрос." -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" -"С выходом IPA 4.0 изменилась семантика DNS-перенаправителя.\n" -"Рекомендуется перейти на использование зон перенаправления (dnsforwardzone-" -"*).\n" -"Подробные сведения содержатся в документации." +msgid "any of the configured servers" +msgstr "любой из настроенных серверов" -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" -"Экспериментальная поддержка DNSSEC.\n" -"%(additional_info)s" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "Параметр \"%(option)s\" не поддерживается. %(additional_info)s" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" -"Семантика %(label)s изменена. %(current_behavior)s\n" -"%(hint)s" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "DNS-сервер %(server)s: %(error)s." - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"DNS-сервер %(server)s не поддерживает DNSSEC: %(error)s.\n" -"Если на IPA-сервере (серверах) включена проверка DNSSEC, отключите её." - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" -"зона перенаправления \"%(fwzone)s\" не действует из-за отсутствия " -"надлежащего NS-делегирования в основной зоне \"%(authzone)s\". Добавьте NS-" -"запись \"%(ns_rec)s\" в родительскую зону \"%(authzone)s\"." - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"DNS-сервер %(server)s не поддерживает EDNS0 (RFC 6891): %(error)s.\n" -"Если на IPA-сервере (серверах) включена проверка DNSSEC, отключите её." - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" -"Сбой проверки DNSSEC: %(error)s.\n" -"Проверьте конфигурацию DNSSEC или отключите проверку DNSSEC на всех IPA-" -"серверах." - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" -"Не удалось создать запись TXT _kerberos из домена %(domain)s (%(error)s).\n" -"Возможная причина: зона не находится под управлением IPA. Создайте запись " -"вручную, включив в неё следующее значение: \"%(realm)s\"" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" -"Не удалось удалить запись TXT _kerberos из домена %(domain)s (%(error)s).\n" -"Возможная причина: зона не находится под управлением IPA. Удалите запись " -"вручную." - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" -"Не установлен мастер ключей DNSSEC. Подпись в зоне DNSSEC будет работать " -"только после установки мастера ключей DNSSEC." - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" -"Относительное имя записи \"%(record)s\" содержит имя зоны \"%(zone)s\" в " -"качестве суффикса, что превращает её в полное имя домена \"%(fqdn)s\". " -"Обычно эта ошибка вызвана отсутствием точки в конце определения имени." - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "\"%(command)s\" не поддерживается. %(additional_info)s" - -#, python-format -msgid "%(line)s" -msgstr "%(line)s" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "Результат поиска усечён: %(reason)s" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" -"Доверительные отношения с %(domain)s разорваны. Восстановите их, выполнив " -"команду \"ipa trust-add\"." - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "Не удалось удалить DNS-запись (записи) узла %(host)s. (%(reason)s)" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" -"Политика перенаправления конфликтует с некоторыми автоматически созданными " -"пустыми зонами. Запросы для зон, указанных в RFC 6303, будут игнорировать " -"перенаправление и рекурсию и всегда возвращать ответы \"NXDOMAIN\". Чтобы " -"переопределить это поведение, используйте политику перенаправления \"only\"." - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "Не удалось обновить системную запись \"%(record)s\". Ошибка: %(error)s" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" -"IPA не управляет зоной %(zone)s. Добавьте записи на DNS-сервер вручную." - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" -"Не удалось автоматически обновить системные записи DNS. Повторно запустите " -"обновление системных записей вручную, чтобы получить список отсутствующих " -"записей." - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" -"Для применения изменений конфигурации необходимо перезапустить службу " -"%(service)s на IPA-сервере %(server)s." - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" -"В расположении IPA %(location)s нет DNS-серверов. Без них расположение не " -"будет работать надлежащим образом." - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "%(subject)s: неверно сформированный сертификат. %(reason)s" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "Узел добавлен, но при обновлении DNS произошла ошибка: %(reason)s" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "Сертификат для %(ca)s недоступен на этом сервере." +msgid "Exceeded number of tries to forward a request." +msgstr "Превышено количество попыток перенаправления запроса." #, python-format msgid "%(count)d variables" @@ -16879,6 +16693,138 @@ msgstr "Неподдерживаемые опции" msgid "No file to read" msgstr "Отсутствует файл для чтения" +msgid "incorrect type" +msgstr "неверный тип" + +msgid "Only one value is allowed" +msgstr "Допускается только одно значение" + +msgid "this option is deprecated" +msgstr "это опция устарела" + +msgid "must be True or False" +msgstr "должно равняться либо True, либо False" + +msgid "must be an integer" +msgstr "должно быть целым числом" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "должно быть не меньше %(minvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "может быть не больше %(maxvalue)d" + +msgid "must be a decimal number" +msgstr "должно быть десятичным числом" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "должно быть не меньше %(minvalue)s" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "не может быть больше %(maxvalue)s" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" +"класс чисел \"%(cls)s\" не входит в список допустимых классов чисел: " +"%(allowed)s" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "должно соответствовать шаблону \"%(pattern)s\"" + +msgid "must be binary data" +msgstr "должно быть двоичными данными" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "размер должен быть не меньше %(minlength)d байт" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "размер должен быть не больше %(maxlength)d байт" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "размер должен быть точно %(length)d байт" + +msgid "must be a certificate" +msgstr "должно быть сертификатом" + +msgid "must be a certificate signing request" +msgstr "должно быть запросом подписи сертификата" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "Сбой при декодировании запроса подписи сертификата: %s" + +msgid "must be Unicode text" +msgstr "должно быть Юникод-текстом" + +msgid "Leading and trailing spaces are not allowed" +msgstr "Использование пробелов в начале и в конце запрещено" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "должно быть не короче %(minlength)d символов" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "может быть не длиннее %(maxlength)d символов" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "должно быть точно %(length)d символов длиной" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "Использовать символ %(char)r запрещено." + +#, python-format +msgid "must be '%(value)s'" +msgstr "должно быть \"%(value)s\"" + +#, python-format +msgid "must be one of %(values)s" +msgstr "должно быть одним из следующих значений: %(values)s" + +msgid "must be datetime value" +msgstr "должно быть значением даты и времени (datetime)" + +msgid "does not match any of accepted formats: " +msgstr "не соответствует ни одному допустимому формату:" + +msgid "incomplete time value" +msgstr "неполное значение времени" + +msgid "must be DNS name" +msgstr "должно быть DNS-именем" + +msgid "must be absolute" +msgstr "должно быть абсолютным" + +msgid "must be relative" +msgstr "должно быть относительным" + +msgid "must be dictionary" +msgstr "должно быть словарём" + +msgid "must be Kerberos principal" +msgstr "должно быть учётной записью Kerberos" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "Недопустимая учётная запись: \"%(value)s\"" + +msgid "Service principal is required" +msgstr "Следует указать учётную запись службы" + msgid "A dictionary representing an LDAP entry" msgstr "Словарь, соответствующий записи LDAP" @@ -16888,17 +16834,6 @@ msgstr "Список записей LDAP" msgid "All commands should at least have a result" msgstr "Все команды должны выводить результат" -msgid "Results are truncated, try a more specific search" -msgstr "Результаты усечены. Попробуйте задать более точные условия поиска" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "Неизвестный параметр: %(option)s" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" -"Версия клиента. Используется для определения того, примет ли сервер запрос." - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" @@ -17284,152 +17219,208 @@ msgstr "" "У леса \"%(forest)s\" существует отношение доверия с лесом (лесами) " "%(domains)s, это не позволяет установить отношение доверия с \"%(conflict)s\"" -msgid "incorrect type" -msgstr "неверный тип" - -msgid "Only one value is allowed" -msgstr "Допускается только одно значение" - -msgid "this option is deprecated" -msgstr "это опция устарела" - -msgid "must be True or False" -msgstr "должно равняться либо True, либо False" - -msgid "must be an integer" -msgstr "должно быть целым числом" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "должно быть не меньше %(minvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "может быть не больше %(maxvalue)d" - -msgid "must be a decimal number" -msgstr "должно быть десятичным числом" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "должно быть не меньше %(minvalue)s" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "не может быть больше %(maxvalue)s" +msgid "Additional instructions:" +msgstr "Дополнительные инструкции:" #, python-format msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" msgstr "" -"класс чисел \"%(cls)s\" не входит в список допустимых классов чисел: " -"%(allowed)s" +"Не отправлен номер версии программного интерфейса (API), совместимость с " +"новейшими версиями не гарантируется. Предполагается следующая версия API " +"сервера: %(server_version)s" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" +"С выходом IPA 4.0 изменилась семантика DNS-перенаправителя.\n" +"Рекомендуется перейти на использование зон перенаправления (dnsforwardzone-" +"*).\n" +"Подробные сведения содержатся в документации." #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "должно соответствовать шаблону \"%(pattern)s\"" - -msgid "must be binary data" -msgstr "должно быть двоичными данными" +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" +"Экспериментальная поддержка DNSSEC.\n" +"%(additional_info)s" #, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "размер должен быть не меньше %(minlength)d байт" +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "Параметр \"%(option)s\" не поддерживается. %(additional_info)s" #, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "размер должен быть не больше %(maxlength)d байт" +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" +"Семантика %(label)s изменена. %(current_behavior)s\n" +"%(hint)s" #, python-format -msgid "must be exactly %(length)d bytes" -msgstr "размер должен быть точно %(length)d байт" - -msgid "must be a certificate" -msgstr "должно быть сертификатом" - -msgid "must be a certificate signing request" -msgstr "должно быть запросом подписи сертификата" +msgid "DNS server %(server)s: %(error)s." +msgstr "DNS-сервер %(server)s: %(error)s." #, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "Сбой при декодировании запроса подписи сертификата: %s" - -msgid "must be Unicode text" -msgstr "должно быть Юникод-текстом" - -msgid "Leading and trailing spaces are not allowed" -msgstr "Использование пробелов в начале и в конце запрещено" +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"DNS-сервер %(server)s не поддерживает DNSSEC: %(error)s.\n" +"Если на IPA-сервере (серверах) включена проверка DNSSEC, отключите её." #, python-format -msgid "must be at least %(minlength)d characters" -msgstr "должно быть не короче %(minlength)d символов" +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" +"зона перенаправления \"%(fwzone)s\" не действует из-за отсутствия " +"надлежащего NS-делегирования в основной зоне \"%(authzone)s\". Добавьте NS-" +"запись \"%(ns_rec)s\" в родительскую зону \"%(authzone)s\"." #, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "может быть не длиннее %(maxlength)d символов" +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"DNS-сервер %(server)s не поддерживает EDNS0 (RFC 6891): %(error)s.\n" +"Если на IPA-сервере (серверах) включена проверка DNSSEC, отключите её." #, python-format -msgid "must be exactly %(length)d characters" -msgstr "должно быть точно %(length)d символов длиной" +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" +"Сбой проверки DNSSEC: %(error)s.\n" +"Проверьте конфигурацию DNSSEC или отключите проверку DNSSEC на всех IPA-" +"серверах." #, python-format -msgid "The character %(char)r is not allowed." -msgstr "Использовать символ %(char)r запрещено." +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" +"Не удалось создать запись TXT _kerberos из домена %(domain)s (%(error)s).\n" +"Возможная причина: зона не находится под управлением IPA. Создайте запись " +"вручную, включив в неё следующее значение: \"%(realm)s\"" #, python-format -msgid "must be '%(value)s'" -msgstr "должно быть \"%(value)s\"" +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" +"Не удалось удалить запись TXT _kerberos из домена %(domain)s (%(error)s).\n" +"Возможная причина: зона не находится под управлением IPA. Удалите запись " +"вручную." + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" +"Не установлен мастер ключей DNSSEC. Подпись в зоне DNSSEC будет работать " +"только после установки мастера ключей DNSSEC." #, python-format -msgid "must be one of %(values)s" -msgstr "должно быть одним из следующих значений: %(values)s" - -msgid "must be datetime value" -msgstr "должно быть значением даты и времени (datetime)" - -msgid "does not match any of accepted formats: " -msgstr "не соответствует ни одному допустимому формату:" - -msgid "incomplete time value" -msgstr "неполное значение времени" - -msgid "must be DNS name" -msgstr "должно быть DNS-именем" - -msgid "must be absolute" -msgstr "должно быть абсолютным" - -msgid "must be relative" -msgstr "должно быть относительным" - -msgid "must be dictionary" -msgstr "должно быть словарём" - -msgid "must be Kerberos principal" -msgstr "должно быть учётной записью Kerberos" +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" +"Относительное имя записи \"%(record)s\" содержит имя зоны \"%(zone)s\" в " +"качестве суффикса, что превращает её в полное имя домена \"%(fqdn)s\". " +"Обычно эта ошибка вызвана отсутствием точки в конце определения имени." #, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "Недопустимая учётная запись: \"%(value)s\"" - -msgid "Service principal is required" -msgstr "Следует указать учётную запись службы" +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "\"%(command)s\" не поддерживается. %(additional_info)s" #, python-format -msgid "%(filename)s: file not found" -msgstr "%(filename)s: файл не найден" +msgid "%(line)s" +msgstr "%(line)s" -#, fuzzy, python-brace-format -#| msgid "Unable to parse principal\n" -msgid "Unable to parse option {item}" -msgstr "Не удалось обработать учётную запись\n" +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "Результат поиска усечён: %(reason)s" -msgid "any of the configured servers" -msgstr "любой из настроенных серверов" +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" +"Доверительные отношения с %(domain)s разорваны. Восстановите их, выполнив " +"команду \"ipa trust-add\"." -msgid "Exceeded number of tries to forward a request." -msgstr "Превышено количество попыток перенаправления запроса." +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "Не удалось удалить DNS-запись (записи) узла %(host)s. (%(reason)s)" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" +"Политика перенаправления конфликтует с некоторыми автоматически созданными " +"пустыми зонами. Запросы для зон, указанных в RFC 6303, будут игнорировать " +"перенаправление и рекурсию и всегда возвращать ответы \"NXDOMAIN\". Чтобы " +"переопределить это поведение, используйте политику перенаправления \"only\"." + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "Не удалось обновить системную запись \"%(record)s\". Ошибка: %(error)s" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" +"IPA не управляет зоной %(zone)s. Добавьте записи на DNS-сервер вручную." + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" +"Не удалось автоматически обновить системные записи DNS. Повторно запустите " +"обновление системных записей вручную, чтобы получить список отсутствующих " +"записей." + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" +"Для применения изменений конфигурации необходимо перезапустить службу " +"%(service)s на IPA-сервере %(server)s." + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" +"В расположении IPA %(location)s нет DNS-серверов. Без них расположение не " +"будет работать надлежащим образом." + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "%(subject)s: неверно сформированный сертификат. %(reason)s" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "Узел добавлен, но при обновлении DNS произошла ошибка: %(reason)s" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "Сертификат для %(ca)s недоступен на этом сервере." msgid "Filename is empty" msgstr "Пустое имя файла" @@ -17542,6 +17533,19 @@ msgstr "" "область (realm) или UPN-суффикс пересекается с пространством имён " "доверенного домена" +#, python-format +msgid "%(filename)s: file not found" +msgstr "%(filename)s: файл не найден" + +#, fuzzy, python-brace-format +#| msgid "Unable to parse principal\n" +msgid "Unable to parse option {item}" +msgstr "Не удалось обработать учётную запись\n" + +#, python-format +msgid "objectclass %s not found" +msgstr "класс объектов %s не найден" + #, python-format msgid "Retrieving CA cert chain failed: %s" msgstr "Не удалось получить цепочку сертификатов CA: %s" @@ -17558,10 +17562,6 @@ msgstr "Не удалось получить данные о состоянии msgid "Retrieving CA status failed with status %d" msgstr "Не удалось получить данные о состоянии CA: %d" -#, python-format -msgid "objectclass %s not found" -msgstr "класс объектов %s не найден" - #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "Не удалось обменяться данными с CMS (состояние %d)" @@ -17702,172 +17702,13 @@ msgstr[0] "установлено соответствие %(count)d ключа msgstr[1] "установлено соответствие %(count)d ключей автомонтирования" msgstr[2] "установлено соответствие %(count)d ключей автомонтирования" +#, python-format msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" -"\n" -"Управление профилями сертификатов\n" -"\n" -"Профили сертификатов используются центром сертификации (Certificate " -"Authority, CA) во время подписи сертификатов, чтобы определить, является ли " -"приемлемым запрос подписи сертификата (Certificate Signing Request, CSR), и, " -"если это так, определить, какие возможности и расширения будут предоставлены " -"сертификатом.\n" -"\n" -"Формат профиля сертификатов — это формат в виде списка свойств, который " -"распознаётся Dogtag или системой сертификации центра сертификации Red Hat.\n" -"\n" -"СИНТАКСИС ИДЕНТИФИКАТОРА ПРОФИЛЯ:\n" -"\n" -"Идентификатор профиля — это строка без пробелов и знаков препинания, она " -"начинается с буквы, за которой следуют другие буквы, цифры или символы " -"подчёркивания (\"_\").\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Импортировать профиль, в котором не будут храниться выданные сертификаты:\n" -" ipa certprofile-import ShortLivedUserCert\n" -" --file UserCert.profile --desc \"User Certificates\"\n" -" --store=false\n" -"\n" -" Удалить профиль сертификатов:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Показать сведения о профиле:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Сохранить конфигурацию профиля в файл:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Поиск профилей, в которых не хранятся сертификаты:\n" -" ipa certprofile-find --store=false\n" -"\n" -"ФОРМАТ КОНФИГУРАЦИИ ПРОФИЛЯ:\n" -"\n" -"Формат конфигурации профиля — это формат в виде необработанного списка " -"свойств, который используется системой сертификации Dogtag Certificate " -"System. Поддержка формата XML не предусмотрена.\n" -"\n" -"К профилям под управлением IPA применяются следующие ограничения:\n" -"\n" -"- При импорте профиля значение поля \"profileId\", если это поле имеется, " -"должно совпадать с идентификатором, указанным в командной строке.\n" -"\n" -"- Значением поля \"classId\" должно быть \"caEnrollImpl\".\n" -"\n" -"- Значением поля \"auth.instance_id\" должно быть \"raCertAuth\".\n" -"\n" -"- Должны использоваться входной класс \"certReqInputImpl\" и выходной класс " -"\"certOutputImpl\".\n" - -msgid "CA is not configured" -msgstr "CA не настроен" - -msgid "invalid Profile ID" -msgstr "недопустимый идентификатор профиля" - -msgid "Certificate Profile" -msgstr "Профиль сертификатов" - -msgid "Certificate Profiles" -msgstr "Профили сертификатов" - -msgid "Profile configuration" -msgstr "Конфигурация профиля" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "установлено соответствие %(count)d профиля" -msgstr[1] "установлено соответствие %(count)d профилей" -msgstr[2] "установлено соответствие %(count)d профилей" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "Импортирован профиль \"%(value)s\"" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" -"В данных профиля несколько раз указан идентификатор \"profileId\": %(values)s" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" -"Идентификатор профиля \"%(cli_value)s\" не соответствует данным профиля " -"\"%(file_value)s\"" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Удалён профиль \"%(value)s\"" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "Предустановленный профиль \"%(profile_id)s\" невозможно удалить" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "Изменён профиль сертификатов \"%(value)s\"" - -msgid "Certificate profiles cannot be renamed" -msgstr "Профили сертификатов невозможно переименовать" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "Недостаточно привилегий для внесения изменений в профиль сертификатов." +"Недостаточно привилегий \"write\" для атрибута \"krbLastPwdChange\" записи " +"\"%s\"." msgid "" "\n" @@ -18158,25 +17999,5917 @@ msgstr "Удалена %i CA." msgid "%i CAs removed." msgstr "Удалено CA: %i." +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" +"\n" +"Правило автоучастия.\n" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" +"\n" +"Внося ясные правила о принадлежности узлов и пользователей к группам " +"посредством настройки включающих и исключающих шаблонов регулярных " +"выражений, вы можете автоматически связывать новые записи с группой или " +"группой узлов на основе данных атрибутов.\n" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" +"\n" +"Правило непосредственно связывается с группой по имени, следовательно, вы не " +"можете создать правило без определения группы или группы узлов.\n" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" +"\n" +"Условие является регулярным выражением, используется 389-ds для установления " +"соответствия новой входящей записи правилу автоучастия. Если имеется " +"соответствие правилу включения, запись добавляется в соответствующую группу " +"или группу узлов.\n" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" +"\n" +"Можно указать группу или группу узлов по умолчанию, которая будет " +"использоваться для записей, не соответствующих ни одному правилу. В случае " +"записей пользователей эта группа будет резервной группой, поскольку все " +"пользователи по умолчанию являются участниками группы, указанной в " +"настройках IPA.\n" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" +"\n" +"Команду automember-rebuild можно использовать, чтобы задним числом применить " +"правила автоучастия в отношении уже существующих записей; это перестроит их " +"участие.\n" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" +"\n" +" Добавить начальную группу или группу узлов:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" +"\n" +" Добавить начальное правило:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" +"\n" +" Добавить в правило условие:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" +"\n" +" Добавить в правило исключительное условие, чтобы предотвратить " +"автоназначение:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" +"\n" +"Добавить узел:\n" +" ipa host-add web1.example.com\n" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" +"\n" +" Добавить пользователя:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" +"\n" +"Проверить автоучастие:\n" +" ipa hostgroup-show webservers\n" +" Группа узлов: webservers\n" +" Описание: Web Servers\n" +" Узлы-участники: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Имя группы: devel\n" +" Описание: Developers\n" +" GID: 1004200000\n" +" Пользователи-участники: tuser\n" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" +"\n" +" Удалить условие из правила:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" +"\n" +" Изменить правило автоучастия:\n" +" ipa automember-mod\n" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" +"\n" +"Установить целевую группу по умолчанию (резервную):\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" +"\n" +" Удалить целевую группу по умолчанию (резервную):\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" +"\n" +" Показать целевую группу по умолчанию (резервную):\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" +"\n" +" Найти все правила автоучастия:\n" +" ipa automember-find\n" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" +"\n" +" Найти все неиспользуемые правила автоучастия:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Найти все неиспользуемые правила автоучастия и удалить их:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" +"\n" +" Показать правило автоучастия:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" +"\n" +" Удалить правило автоучастия:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" +"\n" +" Перестроить участие для всех пользователей:\n" +" ipa automember-rebuild --type=group\n" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" +"\n" +" Перестроить участие для всех узлов:\n" +" ipa automember-rebuild --type=hostgroup\n" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" +"\n" +" Перестроить участие для указанных пользователей:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" +"\n" +" Перестроить участие для указанных узлов:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" + +msgid "Auto Membership Rule" +msgstr "Правило автоучастия" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(otype)s \"%(oname)s\" не найден(а)" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "%s неправильный атрибут" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" +"\n" +" Добавить правило автоучастия.\n" +" " + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "Добавлено правило автоучастия \"%(value)s\"" + +msgid "Auto Membership is not configured" +msgstr "Автоучастие не настроено" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" +"\n" +" Добавить условия в правило автоучастия.\n" +" " + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Добавлено условие (условия) в \"%(value)s\"" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "Правило автоучастия: %s не найдено!" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" +"\n" +" Переопределить это, чтобы получить возможность добавить данные об " +"успехе или неудаче в возвращаемое сообщение.\n" +" " + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" +"\n" +" Удалить условия из правила автоучастия.\n" +" " + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Удалено условие (условия) из \"%(value)s\"" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" +"\n" +" Переопределить это, чтобы получить возможность указать состояния " +"успеха или неудачи.\n" +" " + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" +"\n" +" Изменить правило автоучастия.\n" +" " + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "Изменено правило автоучастия \"%(value)s\"" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" +"\n" +" Удалить правило автоучастия.\n" +" " + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Удалено правило автоучастия \"%(value)s\"" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" +"\n" +"Поиск правил автоучастия." + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "установлено соответствие %(count)d правила" +msgstr[1] "установлено соответствие %(count)d правил" +msgstr[2] "установлено соответствие %(count)d правил" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" +"\n" +"Показать сведения о правиле автоучастия." + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" +"\n" +" Установить группу по умолчанию (резервную) для всех несоответствующих " +"записей.\n" +" " + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" +"Установить группу по умолчанию (резервную) для автоучастия \"%(value)s\"" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" +"\n" +" Удалить группу по умолчанию (резервную) для всех несоответствующих " +"записей.\n" +" " + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "Удалена группа по умолчанию (резервная) для автоучастия \"%(value)s\"" + +msgid "No default (fallback) group set" +msgstr "Группа по умолчанию (резервная) не установлена" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" +"\n" +" Показать сведения о группах автоучастия по умолчанию (резервных).\n" +" " + +msgid "Task DN" +msgstr "DN задачи" + +msgid "DN of the started task" +msgstr "DN запущенной задачи" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "следует указать хотя бы один из параметров: тип, пользователи, узлы" + +msgid "users and hosts cannot both be set" +msgstr "невозможно одновременно указать пользователей и узлы" + +msgid "hosts cannot be set when type is 'group'" +msgstr "невозможно указать узлы, когда тип \"group\"" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "невозможно указать пользователей, когда тип \"hostgroup\"" + +msgid "Automember rebuild membership task started" +msgstr "Выполняется задача по перестройке записей автоучастия" + +msgid "Automember rebuild membership task completed" +msgstr "Завершена задача по перестройке записей автоучастия" + +#, python-format +msgid "Task DN = '%s'" +msgstr "DN задачи = \"%s\"" + +msgid "Automember" +msgstr "Автоучастник" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" +"\n" +" Поиск неиспользуемых правил автоучастия. Чтобы найти все неиспользуемые " +"правила, может потребоваться выполнить команду с правами привилегированного " +"пользователя.\n" +" " + +msgid "Remove orphan automember rules" +msgstr "Удалить неиспользуемые правила автоучастия" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Groups of users\n" +#| "\n" +#| "Manage groups of users. By default, new groups are POSIX groups. You\n" +#| "can add the --nonposix option to the group-add command to mark a new " +#| "group\n" +#| "as non-POSIX. You can use the --posix argument with the group-mod " +#| "command\n" +#| "to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +#| "converted to non-POSIX groups.\n" +#| "\n" +#| "Every group must have a description.\n" +#| "\n" +#| "POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +#| "supported but can have an impact on your file permissions. It is not " +#| "necessary\n" +#| "to supply a GID when creating a group. IPA will generate one " +#| "automatically\n" +#| "if it is not provided.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new group:\n" +#| " ipa group-add --desc='local administrators' localadmins\n" +#| "\n" +#| " Add a new non-POSIX group:\n" +#| " ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +#| "\n" +#| " Convert a non-POSIX group to posix:\n" +#| " ipa group-mod --posix remoteadmins\n" +#| "\n" +#| " Add a new POSIX group with a specific Group ID number:\n" +#| " ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +#| "\n" +#| " Add a new POSIX group and let IPA assign a Group ID number:\n" +#| " ipa group-add --desc='printer admins' printeradmins\n" +#| "\n" +#| " Remove a group:\n" +#| " ipa group-del unixadmins\n" +#| "\n" +#| " To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +#| " ipa group-add-member --groups=remoteadmins localadmins\n" +#| "\n" +#| " Add multiple users to the \"localadmins\" group:\n" +#| " ipa group-add-member --users=test1 --users=test2 localadmins\n" +#| "\n" +#| " Remove a user from the \"localadmins\" group:\n" +#| " ipa group-remove-member --users=test2 localadmins\n" +#| "\n" +#| " Display information about a named group.\n" +#| " ipa group-show localadmins\n" +#| "\n" +#| "External group membership is designed to allow users from trusted " +#| "domains\n" +#| "to be mapped to local POSIX groups in order to actually use IPA " +#| "resources.\n" +#| "External members should be added to groups that specifically created as\n" +#| "external and non-POSIX. Such group later should be included into one of " +#| "POSIX\n" +#| "groups.\n" +#| "\n" +#| "An external group member is currently a Security Identifier (SID) as " +#| "defined by\n" +#| "the trusted domain. When adding external group members, it is possible " +#| "to\n" +#| "specify them in either SID, or DOM\\name, or name@domain format. IPA will " +#| "attempt\n" +#| "to resolve passed name to SID with the use of Global Catalog of the " +#| "trusted domain.\n" +#| "\n" +#| "Example:\n" +#| "\n" +#| "1. Create group for the trusted domain admins' mapping and their local " +#| "POSIX group:\n" +#| "\n" +#| " ipa group-add --desc=' admins external map' " +#| "ad_admins_external --external\n" +#| " ipa group-add --desc=' admins' ad_admins\n" +#| "\n" +#| "2. Add security identifier of Domain Admins of the to the " +#| "ad_admins_external\n" +#| " group:\n" +#| "\n" +#| " ipa group-add-member ad_admins_external --external 'AD\\Domain " +#| "Admins'\n" +#| "\n" +#| "3. Allow members of ad_admins_external group to be associated with " +#| "ad_admins POSIX group:\n" +#| "\n" +#| " ipa group-add-member ad_admins --groups ad_admins_external\n" +#| "\n" +#| "4. List members of external members of ad_admins_external group to see " +#| "their SIDs:\n" +#| "\n" +#| " ipa group-show ad_admins_external\n" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" +"\n" +"Группы пользователей\n" +"\n" +"Управление группами пользователей. По умолчанию все новые группы являются " +"POSIX-группами. Можно добавить параметр --nonposix в команду group-add, " +"чтобы отметить новую группу в качестве не-POSIX-группы. В команде group-mod " +"можно использовать аргумент --posix, чтобы преобразовать не-POSIX-группу в " +"POSIX-группу. POSIX-группы нельзя преобразовать в не-POSIX-группы. \n" +"\n" +"У каждой группы должно быть описание.\n" +"\n" +"У POSIX-групп должен быть идентификатор группы (GID). Изменение GID " +"поддерживается, но может повлиять на разрешения для файлов. При создании " +"группы необязательно предоставлять GID. Если он не будет предоставлен, IPA " +"создаст его автоматически.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Добавить новую не-POSIX-группу:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Преобразовать не-POSIX-группу в posix-группу:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Добавить новую POSIX-группу с определённым ID группы:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Добавить новую POSIX-группу и позволить IPA назначить ID группы:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Удалить группу:\n" +" ipa group-del unixadmins\n" +"\n" +" Чтобы добавить группу \"remoteadmins\" в группу \"localadmins\":\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Добавить нескольких пользователей в группу \"localadmins\":\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Удалить пользователя из группы \"localadmins\":\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Показать сведения об именованной группе:\n" +" ipa group-show localadmins\n" +"\n" +"Участие внешних групп создано для того, чтобы сделать возможной привязку " +"пользователей из доверенных доменов к локальным POSIX-группам с целью " +"использования ресурсов IPA. Внешние участники должны быть добавлены в " +"группы, которые специально созданы, как внешние и не-POSIX. Такая группа " +"затем должна быть включена в одну из групп POSIX.\n" +"\n" +"В текущей версии участник внешней группы является идентификатором " +"безопасности (Security Identifier или SID), определённым доверенным доменом. " +"Добавление участников внешней группы можно выполнить в формате SID, DOM\\имя " +"или имя@домен. IPA попытается определить SID по переданному имени путём " +"использования общего каталога доверенного домена.\n" +"\n" +"Пример:\n" +"\n" +"1. Создать группу для привязки администраторов (admins) доверенного домена и " +"их локальную POSIX-группу:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Добавить идентификатор безопасности Domain Admins домена " +"группе ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Вывести список внешних участников группы ad_admins_external, чтобы " +"определить их SID:\n" +"\n" +" ipa group-show ad_admins_external\n" + +msgid "groups" +msgstr "группы" + +msgid "User Group" +msgstr "Группа пользователей" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Добавлена группа \"%(value)s\"" + +msgid "gid cannot be set for external group" +msgstr "невозможно указать gid для внешней группы" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Удалена группа \"%(value)s\"" + +msgid "privileged group" +msgstr "привилегированная группа" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Изменена группа \"%(value)s\"" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "установлено соответствие %(count)d группы" +msgstr[1] "установлено соответствие %(count)d групп" +msgstr[2] "установлено соответствие %(count)d групп" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Невозможно выполнить проверку внешнего участника без установленной поддержки " +"Samba 4. Убедитесь, что на сервере установлен субпакет IPA server-trust-ad" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Без настройки собственного домена нельзя выполнять операцию присоединения. " +"Убедитесь, что на IPA-сервере запущена команда ipa-adtrust-install" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Отсоединена группа \"%(value)s\" от пользователя \"%(value)s\"" + +msgid "not allowed to modify user entries" +msgstr "запрещено изменять записи пользователей" + +msgid "not allowed to modify group entries" +msgstr "запрещено изменять записи групп" + +msgid "Not a managed group" +msgstr "Не является управляемой группой" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this group." +msgstr "Добавить пользователей, которые могут управлять этим токеном." + +#, fuzzy +#| msgid "Remove users that can manage this token." +msgid "Remove users that can manage members of this group." +msgstr "Удалить пользователей, которые могут управлять этим токеном." + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" +"\n" +"Конфигурация DNS-сервера\n" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" +"\n" +"Управлять конфигурацией DNS-сервера\n" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" +"\n" +" Показать конфигурацию определённого DNS-сервера:\n" +" ipa dnsserver-show\n" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" +"\n" +" Обновить конфигурацию определённого DNS-сервера:\n" +" ipa dnsserver-mod\n" + +msgid "DNS server" +msgstr "DNS-сервер" + +msgid "DNS servers" +msgstr "DNS-серверы" + +msgid "DNS Servers" +msgstr "DNS-серверы" + +msgid "DNS Server" +msgstr "DNS-сервер" + +msgid "DNS Server name" +msgstr "Имя DNS-сервера" + +msgid "SOA mname override" +msgstr "Переопределение mname SOA" + +msgid "SOA mname (authoritative server) override" +msgstr "Переопределение mname SOA (полномочный сервер)" + +msgid "Forwarders" +msgstr "Перенаправители" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Перенаправители для отдельных серверов. Для каждого перенаправителя можно " +"указать отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" +"Условная политика перенаправления для отдельных серверов. Чтобы отключить " +"для этой зоны перенаправление на глобальный перенаправитель, установите " +"значение \"none\". В этом случае условные перенаправители зон не будут " +"приниматься во внимание." + +msgid "DNS is not configured" +msgstr "DNS не настроено" + +msgid "Modify DNS server configuration" +msgstr "Изменить конфигурацию DNS-сервера" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "Изменена запись DNS-сервера \"%(value)s\"" + +msgid "Search for DNS servers." +msgstr "Поиск DNS-серверов." + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "установлено соответствие %(count)d DNS-сервера" +msgstr[1] "установлено соответствие %(count)d DNS-серверов" +msgstr[2] "установлено соответствие %(count)d DNS-серверов" + +msgid "IPA DNS Server is not installed" +msgstr "DNS-сервер IPA не установлен" + +msgid "Display configuration of a DNS server." +msgstr "Показать конфигурацию DNS-сервера." + +msgid "Add a new DNS server." +msgstr "Добавить новый DNS-сервер." + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "Добавлен новый DNS-сервер \"%(value)s\"" + +msgid "Delete a DNS server" +msgstr "Удалить DNS-сервер" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Удалён DNS-сервер \"%(value)s\"" + +msgid "Host-based access control commands" +msgstr "Команды управления доступом на основе узла" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" +"\n" +"Службы HBAC\n" +"\n" +"Службы PAM, доступом к которым управляет HBAC. Используемое здесь имя должно " +"соответствовать имени службы, которую оценивает PAM.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую службу HBAC:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Изменить существующую службу HBAC:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Поиск служб HBAC. В этом примере будут возвращены два результата, служба " +"FTP\n" +" и добавленная выше служба tftp:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Удалить службу HBAC:\n" +" ipa hbacsvc-del tftp\n" + +msgid "HBAC services" +msgstr "cлужбы HBAC" + +msgid "HBAC Services" +msgstr "Cлужбы HBAC" + +msgid "HBAC Service" +msgstr "Cлужба HBAC" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "Добавлена служба HBAC \"%(value)s\"" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Удалена служба HBAC \"%(value)s\"" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "Изменена служба HBAC \"%(value)s\"" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "установлено соответствие %(count)d службы HBAC" +msgstr[1] "установлено соответствие %(count)d служб HBAC" +msgstr[2] "установлено соответствие %(count)d служб HBAC" + +msgid "HBAC service group" +msgstr "группа служб HBAC" + +msgid "HBAC service groups" +msgstr "группы служб HBAC" + +msgid "HBAC Service Groups" +msgstr "Группы служб HBAC" + +msgid "HBAC Service Group" +msgstr "Группа служб HBAC" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Добавлена группа служб HBAC \"%(value)s\"" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "Удалена группа служб HBAC \"%(value)s\"" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "Изменена группа служб HBAC \"%(value)s\"" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "установлено соответствие %(count)d группы служб HBAC" +msgstr[1] "установлено соответствие %(count)d групп служб HBAC" +msgstr[2] "установлено соответствие %(count)d групп служб HBAC" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" +"\n" +"Основной пользователь\n" +"\n" +"Содержит общие определения для пользователя или неподтверждённого " +"пользователя\n" + +msgid "must be TRUE or FALSE" +msgstr "должно быть TRUE или FALSE" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" +"Класс объектов ipaNTUserAttrs отсутствует, запись пользователя не может " +"иметь атрибуты SMB." + +msgid "Principal alias" +msgstr "Псевдоним учётной записи" + +msgid "User password expiration" +msgstr "Окончание действия пароля пользователя" + +msgid "SSH public key fingerprint" +msgstr "Отпечаток открытого ключа SSH" + +msgid "Base-64 encoded user certificate" +msgstr "Base-64 шифрованный сертификат пользователя" + +msgid "Certificate mapping data" +msgstr "Данные сопоставления сертификата" + +msgid "SMB logon script path" +msgstr "Путь к сценарию входа SMB" + +msgid "SMB profile path" +msgstr "Путь к профилю SMB" + +msgid "SMB Home Directory" +msgstr "Домашний каталог SMB" + +msgid "SMB Home Directory Drive" +msgstr "Диск домашнего каталога SMB" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "неправильный формат почты: %(email)s" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "руководитель %(manager)s не найден" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "может быть не длиннее %(len)d символов" + +msgid "Issuer" +msgstr "Издатель" + +msgid "Issuer of the certificate" +msgstr "Издатель сертификата" + +msgid "Subject" +msgstr "Субъект" + +msgid "Subject of the certificate" +msgstr "Субъект сертификата" + +msgid "cannot have an empty subject" +msgstr "поле субъекта не может быть пустым" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "невозможно одновременно указать subject/issuer и certificate" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "невозможно одновременно указать subject/issuer и ipacertmapdata" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" +"Добавить одно или несколько сопоставлений сертификатов в запись пользователя." + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" +"Добавлены сопоставления сертификатов в запись пользователя \"%(value)s\"" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" +"Удалить одно или несколько сопоставлений сертификатов из записи пользователя." + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" +"Удалены сопоставления сертификатов из записи пользователя \"%(value)s\"" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" +"\n" +"Подключаемый модуль для выполнения нескольких вызовов ipa с помощью одного " +"удалённого вызова процедур \n" +"\n" +"Чтобы запустить этот код на легком сервере (lite-server), выполните " +"следующие команды:\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"где содержимое файла batch_request.json соответствует следующему примеру\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"Формат ответа точно так же распределяется по уровням вложенности. На верхнем " +"уровне:\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"а далее находится вложенный ответ для каждого метода команды IPA, " +"отправленного в запросе\n" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" +"Совершать несколько вызовов ipa с помощью одного удалённого вызова процедур " + +msgid "must contain a tuple (list, dict)" +msgstr "должно содержать кортеж (список, словарь)" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "{role}: роль не найдена" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "{attr}: атрибут не найден" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" +"\n" +"Топология\n" +"\n" +"Управление топологией репликации на уровне домена 1.\n" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" +"\n" +"Данные IPA-сервера хранятся на LDAP-сервере в двух суффиксах:\n" +"* суффикс домена (domain), например, \"dc=example,dc=com\", содержит все " +"связанные с доменом данные\n" +"* суффикс центра сертификации (ca), \"o=ipaca\", имеется только на серверах " +"с установленным CA. Он содержит данные для компонента сервера сертификатов\n" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" +"\n" +"Данные, которые хранятся на IPA-серверах, реплицируются на другие IPA-" +"серверы. Способ репликации определяется соглашениями о репликации. " +"Соглашения о репликации необходимо устанавливать для каждого из суффиксов " +"отдельно. На уровне домена 0 управление ими выполняется с помощью средств " +"ipa-replica-manage и ipa-csreplica-manage. На уровне домена 1 управление " +"выполняется централизованно с помощью команд \"ipa topology*\".\n" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" +"\n" +"Соглашения представляются сегментами топологии. По умолчанию сегмент " +"топологии представляет 2 соглашения о репликации: по одному для каждого " +"направления, например, от A до B и от B до A. Создание однонаправленных " +"сегментов запрещено.\n" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" +"\n" +"Чтобы проверить, что ни один сервер не отключается в топологии указанного " +"суффикса, используйте эту команду:\n" +" ipa topologysuffix-verify $suffix\n" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +"\n" +"Примеры:\n" +" Найти все IPA-серверы:\n" +" ipa server-find\n" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" +"\n" +" Найти все суффиксы:\n" +" ipa topologysuffix-find\n" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" +"\n" +" Добавить сегмент топологии к суффиксу \"domain\":\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" +"\n" +" Добавить сегмент топологии в суффикс \"ca\":\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" +"\n" +" Вывести список всех сегментов топологии в суффиксе \"domain\":\n" +" ipa topologysegment-find domain\n" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" +"\n" +" Вывести список всех сегментов топологии в суффиксе \"ca\":\n" +" ipa topologysegment-find ca\n" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" +"\n" +" Удалить сегмент топологии в суффиксе \"domain\":\n" +" ipa topologysegment-del domain segment_name\n" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" +"\n" +" Удалить сегмент топологии в суффиксе \"ca\":\n" +" ipa topologysegment-del ca segment_name\n" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" +"\n" +" Проверить топологию суффикса \"domain\":\n" +" ipa topologysuffix-verify domain\n" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" +"\n" +" Проверить топологию суффикса \"ca\":\n" +" ipa topologysuffix-verify ca\n" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "Управление топологией требует уровня домена не ниже {0}" + +msgid "segment" +msgstr "сегмент" + +msgid "segments" +msgstr "сегменты" + +msgid "Topology Segments" +msgstr "Сегменты топологии" + +msgid "Topology Segment" +msgstr "Сегмент топологии" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "левый узел не является узлом топологии: %(leftnode)s" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "правый узел не является узлом топологии: %(rightnode)s" + +msgid "left node and right node must not be the same" +msgstr "левый узел и правый узел должны быть разными узлами" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "в левом узле ({host}) не предусмотрена поддержка суффикса '{suff}'" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "в правом узле ({host}) не предусмотрена поддержка суффикса '{suff}'" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "установлено соответствие %(count)d сегмента" +msgstr[1] "установлено соответствие %(count)d сегментов" +msgstr[2] "установлено соответствие %(count)d сегментов" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "Добавлен сегмент \"%(value)s\"" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "Удалён сегмент \"%(value)s\"" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "Изменён сегмент \"%(value)s\"" + +#, python-format +msgid "%(value)s" +msgstr "%(value)s" + +msgid "left or right node has to be specified" +msgstr "следует указать левый или правый узел" + +msgid "only one node can be specified" +msgstr "можно указать только один узел" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "Обновление репликации для сегмента: направлен запрос \"%(pkey)s\"." + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "Остановка репликации для сегмента: направлен запрос \"%(pkey)s\"." + +msgid "suffixes" +msgstr "суффиксы" + +msgid "Topology suffixes" +msgstr "Суффиксы топологии" + +msgid "Topology suffix" +msgstr "Суффикс топологии" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "установлено соответствие %(count)d суффикса топологии" +msgstr[1] "установлено соответствие %(count)d суффиксов топологии" +msgstr[2] "установлено соответствие %(count)d суффиксов топологии" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Удалён суффикс топологии \"%(value)s\"" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "Добавлен суффикс топологии \"%(value)s\"" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Изменён суффикс топологии \"%(value)s\"" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" +"\n" +"Проверка топологии репликации для суффикса.\n" +"\n" +"Проверки, которые выполняются:\n" +" 1. проверка того, не отключена ли топология (иначе говоря, имеются ли пути " +"репликации между всеми серверами).\n" +" 2. проверка того, не превышено ли рекомендованное количество соглашений о " +"репликации между серверами.\n" +" \n" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" +"\n" +"Переход на IPA\n" +"\n" +"Перенос пользователей и групп с LDAP-сервера на IPA.\n" +"\n" +"Посылает запрос LDAP к удалённому серверу с целью поиска пользователей и " +"групп в контейнере. Чтобы перенести пароли, следует выполнить привязку к " +"серверу от имени пользователя, который может читать атрибут userPassword на " +"удалённом сервере. Перечень таких пользователей обычно ограничен " +"администраторами высшего уровня, в частности cn=Directory Manager на 389-ds " +"(пользователь bind по умолчанию).\n" +"\n" +"Контейнер пользователей по умолчанию: ou=People.\n" +"\n" +"Контейнер групп по умолчанию: ou=Groups.\n" +"\n" +"Записи пользователей и групп, которые уже существуют на IPA-сервере, будут " +"пропущены.\n" +"\n" +"Две схемы LDAP определяют, как хранятся записи участников группы: RFC2307 и\n" +"RFC2307bis. RFC2307bis использует атрибуты member и uniquemember для " +"определения участников группы, а RFC2307 использует атрибут memberUid. По " +"умолчанию используется схема RFC2307bis.\n" +"\n" +"С помощью приложения compat IPA можно повторно форматировать данные для " +"систем, в которых не предусмотрена поддержка RFC2307bis. Рекомендуется " +"отключать это приложение во время переноса, чтобы уменьшить нагрузку на " +"систему. Его можно включить снова после переноса. Чтобы перенести данные с " +"включённым приложением, используйте параметр \"--with-compat\".\n" +"\n" +"У перенесённых пользователей нет учётных данных Kerberos, только пароль " +"LDAP. Для завершения процесса переноса пользователям следует открыть " +"страницу http://ipa.example.com/ipa/migration и пройти аутентификацию с " +"помощью пароля LDAP, чтобы создать свои записи учётных данных Kerberos.\n" +"\n" +"По умолчанию перенос отключён. Чтобы включить его, используйте команду ipa " +"config-mod:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"Если базовое DN не будет предоставлено с помощью --basedn, IPA будет " +"использовать значение defaultNamingContext, если оно установлено, или первое " +"значение в наборе namingContexts в корневой папке удалённого LDAP-сервера.\n" +"\n" +"Записи пользователей добавляются в группу пользователей по умолчанию. " +"Процесс такого добавления может быть довольно длительным, поэтому при " +"переносе он выполняется в пакетном режиме, пакетами по 100 пользователей. В " +"результате возникнет определённый период, когда записи пользователей уже " +"добавлены в IPA, но эти пользователи ещё не стали участниками группы " +"пользователей по умолчанию.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +"Простейший перенос, приняты все значения по умолчанию:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +"Определение контейнеров пользователей и групп. Можно использовать для " +"переноса данных пользователей и групп с сервера IPA версии 1:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts'\n" +" --group-container='cn=groups,cn=accounts'\n" +" ldap://ds.example.com:389\n" +"\n" +"Так как на сервере IPA версии 2 уже предусмотрены предопределённые группы, " +"которые могут совпадать с перенесёнными с сервера (IPA версии 1) группами " +"(например, admins, ipausers), пользователи из таких групп могут быть " +"перенесены в неизвестную группу (unknown) на новом сервере IPA версии 2.\n" +"Используйте параметр --group-overwrite-gid, чтобы перезаписать идентификатор " +"группы (GID) уже созданных групп и предотвратить эту проблему:\n" +" ipa migrate-ds --group-overwrite-gi\n" +" --user-container='cn=users,cn=accounts'\n" +" --group-container='cn=groups,cn=accounts'\n" +" ldap://ds.example.com:389\n" +"\n" +"Перенесённые данные пользователей и групп могут содержать классы объектов и " +"сопутствующие атрибуты, неизвестные серверу IPA версии 2. Эти классы " +"объектов и атрибуты можно исключить из процедуры переноса данных:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts'\n" +" --group-container='cn=groups,cn=accounts'\n" +" --user-ignore-objectclass=radiusprofile\n" +" --user-ignore-attribute=radiusgroupname\n" +" ldap://ds.example.com:389\n" +"\n" +"ВЕДЕНИЕ ЖУРНАЛА\n" +"\n" +"Во время переноса предупреждения и сообщения об ошибках будут добавляться в " +"журнал ошибок Apache. После завершения переноса следует ознакомиться с " +"соответствующим файлом, чтобы исправить или выяснить причины ошибок, которые " +"могли произойти. \n" +"\n" +"Для каждого пакета из 100 перенесённых записей пользователей будет показано " +"информационное сообщение, предназначенное для оценки прогресса обработки и " +"определения её продолжительности. \n" +"\n" +"Если определён уровень ведения журнала debug путём установления debug = True " +"в /etc/ipa/default.conf или в /etc/ipa/server.conf, для каждой перенесённой " +"записи будет добавляться собственная запись, а также отчёт по каждому " +"обновлению группы пользователей по умолчанию.\n" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" +"Учётная запись Kerberos %s уже существует. Используйте команду \"ipa user-mod" +"\", чтобы установить её параметры вручную." + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" +"Не удалось определить, существует ли уже учётная запись Kerberos %s. " +"Используйте команду \"ipa user-mod\", чтобы установить её параметры вручную." + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" +"Не удалось добавить пользователя в группу по умолчанию. Используйте команду " +"\"ipa group-add-member\", чтобы добавить его вручную." + +msgid "Migration of LDAP search reference is not supported." +msgstr "Поддержка миграции поисковой ссылки LDAP не предусмотрена." + +msgid "Malformed DN" +msgstr "Некорректное DN" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "%(user)s не является POSIX-пользователем" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" +". Проверьте идентификатор существующей группы. Используйте параметр --group-" +"overwrite-gid для перезаписи идентификатора группы" + +msgid "Invalid LDAP URI." +msgstr "Неверный URI LDAP." + +#, python-format +msgid "%s to exclude from migration" +msgstr "%s для исключения из миграции" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" +"список результатов поиска объектов миграции был усечён сервером; возможно, " +"процесс миграции не завершён\n" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" +"Поиск LDAP в %(container)s не вернул никаких результатов (основа поиска: " +"%(search_base)s, класс объектов: %(objectclass)s)" + +msgid "Default group for new users not found" +msgstr "Группа по умолчанию для новых пользователей не найдена" + +msgid "netgroups" +msgstr "сетевые группы" + +msgid "Netgroups" +msgstr "Сетевые группы" + +msgid "Netgroup" +msgstr "Сетевая группа" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "Добавлена сетевая группа \"%(value)s\"" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"группа узлов с именем \"%s\" уже существует. Группы узлов и сетевые группы " +"имеют общее пространство имён" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Удалена сетевая группа \"%(value)s\"" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "Изменена сетевая группа \"%(value)s\"" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "установлено соответствие %(count)d сетевой группы" +msgstr[1] "установлено соответствие %(count)d сетевых групп" +msgstr[2] "установлено соответствие %(count)d сетевых групп" + +msgid "One time password commands" +msgstr "Команды для одноразового пароля" + +msgid "OTP configuration options" +msgstr "Параметры конфигурации OTP" + +msgid "OTP Configuration" +msgstr "Конфигурация OTP" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Изменён пароль \"%(value)s\"" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" +"\n" +"Средства отчётности о состоянии функции пре-аутентификации (PKINIT) " +"Kerberos.\n" +"\n" +"Отчёт о том, включена или отключена пре-аутентификация (PKINIT) Kerberos на " +"главных IPA-серверах \n" +"\n" +"ПРИМЕРЫ:\n" +" Вывести список состояний PKINIT на всех главных серверах:\n" +" ipa pkinit-status\n" +"\n" +" Проверить состояние PKINIT на \"ipa.example.com\":\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" Вывести список всех главных IPA-серверов с отключённой PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"Дополнительные сведения о поддержке PKINIT:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" + +msgid "pkinit" +msgstr "pkinit" + +msgid "PKINIT" +msgstr "PKINIT" + +msgid "PKINIT status" +msgstr "Состояние PKINIT" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "Включена или отключена пре-аутентификация (PKINIT)" + +msgid "Report PKINIT status on the IPA masters" +msgstr "Сообщить состояние PKINIT на главных IPA-серверах" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "установлено соответствие %(count)s сервера" +msgstr[1] "установлено соответствие %(count)s серверов" +msgstr[2] "установлено соответствие %(count)s серверов" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" +"\n" +"Прокси-серверы RADIUS\n" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" +"\n" +"Управление прокси-серверами RADIUS.\n" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" +"\n" +"В IPA поддерживается использование внешнего прокси-сервера RADIUS для " +"выполнения аутентификации с помощью одноразового пароля krb5. Эта поддержка " +"обеспечивает значительную гибкость при интеграции со сторонними службами " +"аутентификации.\n" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" +"\n" +" Добавить новый сервер:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" +"\n" +" Найти все серверы, записи которых содержат строку \"example.com\":\n" +" ipa radiusproxy-find example.com\n" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" +"\n" +" Проверить конфигурацию:\n" +" ipa radiusproxy-show MyRADIUS\n" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" +"\n" +" Изменить секрет:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" +"\n" +" Удалить конфигурацию:\n" +" ipa radiusproxy-del MyRADIUS\n" + +msgid "invalid attribute name" +msgstr "недопустимое имя атрибута" + +msgid "invalid port number" +msgstr "недопустимый номер порта" + +msgid "RADIUS proxy server" +msgstr "прокси-сервер RADIUS" + +msgid "RADIUS proxy servers" +msgstr "прокси-серверы RADIUS" + +msgid "RADIUS Servers" +msgstr "Серверы RADIUS" + +msgid "RADIUS Server" +msgstr "Сервер RADIUS" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "Добавлен прокси-сервер RADIUS \"%(value)s\"" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "Удалён прокси-сервер RADIUS \"%(value)s\"" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "Изменён прокси-сервер RADIUS \"%(value)s\"" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "установлено соответствие %(count)d прокси-сервера RADIUS" +msgstr[1] "установлено соответствие %(count)d прокси-серверов RADIUS" +msgstr[2] "установлено соответствие %(count)d прокси-серверов RADIUS" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" +"невозможно добавить разрешение \"%(perm)s\" с типом привязки \"%(bindtype)s" +"\" в привилегию" + +msgid "Privilege" +msgstr "Привилегия" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "Добавлена привилегия \"%(value)s\"" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "Удалена привилегия \"%(value)s\"" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "Изменена привилегия \"%(value)s\"" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "установлено соответствие %(count)d привилегии" +msgstr[1] "установлено соответствие %(count)d привилегий" +msgstr[2] "установлено соответствие %(count)d привилегий" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" +"Объект класса обслуживания, который используется для связывания политик с " +"группами" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" +"приоритет должен иметь уникальное значение (%(prio)d уже использовано для " +"%(gname)s)" + +msgid "Add Class of Service entry" +msgstr "Добавить запись класса обслуживания" + +msgid "Delete Class of Service entry" +msgstr "Удалить запись класса обслуживания" + +msgid "Modify Class of Service entry" +msgstr "Изменить запись класса обслуживания" + +msgid "Display Class of Service entry" +msgstr "Показать запись класса обслуживания" + +msgid "Search for Class of Service entry" +msgstr "Поиск записи класса обслуживания" + +msgid "password policy" +msgstr "политика паролей" + +msgid "password policies" +msgstr "политики паролей" + +msgid "Password Policies" +msgstr "Политики паролей" + +msgid "Password Policy" +msgstr "Политика паролей" + +#, fuzzy +#| msgid "Max renew" +msgid "Max repeat" +msgstr "Максимальный срок для обновления" + +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of same consecutive characters" +msgstr "Максимальное количество возвращённых записей" + +#, fuzzy +#| msgid "Max renew" +msgid "Max sequence" +msgstr "Максимальный срок для обновления" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "Имя пользователя" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "Максимальный срок жизни пароля должен быть больше минимального." + +msgid "cannot delete global password policy" +msgstr "невозможно удалить глобальную политику паролей" + +msgid "priority cannot be set on global policy" +msgstr "невозможно установить приоритет для глобальной политики" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" +"\n" +"Домены области\n" +"\n" +"Управление списком доменов, связанных с областью (realm) IPA.\n" +"\n" +"Этот список используется контроллерами доменов из других областей (realms), " +"у которых установлено отношение доверия с этой областью (realm) IPA. Им " +"необходимы сведения о том, какой запрос следует перенаправить в центр " +"распространения ключей (KDC) этой области (realm) IPA.\n" +"\n" +"При автоматическом управлении: домен автоматически добавляется в список " +"доменов области (realm) при создании новой зоны DNS под управлением IPA. То " +"же самое относится и к удалению.\n" +"\n" +"При внешнем управлении DNS: домены, которые не управляются в DNS IPA-" +"сервера, необходимо вручную добавить в список с помощью команды ipa " +"realmdomains-mod.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Показать текущий список доменов области:\n" +" ipa realmdomains-show\n" +"\n" +" Заменить список доменов области:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Добавить домен в список доменов области:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Удалить домен из списка доменов области:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" + +msgid "Realm domains" +msgstr "Домены области (realm)" + +msgid "Realm Domains" +msgstr "Домены области (realm)" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" +"\n" +" Изменение доменов области (realm).\n" +"\n" +" Проверка DNS: при ручном добавлении домена в список по умолчанию " +"выполняется проверка DNS. Она устанавливает, связан ли домен с областью " +"(realm) IPA, проверяя, есть ли у домена запись TXT _kerberos, которая " +"содержит имя области (realm) IPA. Эту проверку можно пропустить, указав " +"параметр --force.\n" +"\n" +" Удаление: при удалении домена области (realm), у которого имеется " +"соответствующая находящаяся под управлением IPA зона DNS, также " +"автоматически удаляется и соответствующая запись TXT _kerberos в этой зоне. " +"Другие записи в этой зоне и сама зона остаются.\n" +" " + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" +"Запись зоны DNS для каждого realmdomain должна содержать записи SOA или NS. " +"Для %s такие записи не найдены." + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "Следующие домены не принадлежат к этой области (realm): %(domains)s" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" +"Не удалось определить область (realm) следующих доменов: %(domains)s. Если " +"эти домены принадлежат к этой области, создайте на каждом из них запись TXT " +"_kerberos, которая содержит \"%(realm)s\"." + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" +"Параметр --domain невозможно использовать одновременно с параметром --add-" +"domain или --del-domain. Используйте параметр --domain, чтобы явно указать " +"весь список доменов области (realm). Используйте параметр --add-domain/del-" +"domain, чтобы добавить или удалить отдельные домены." + +msgid "IPA server domain cannot be omitted" +msgstr "Домен IPA-сервера не может быть пропущен" + +msgid "IPA server domain cannot be deleted" +msgstr "Домен IPA-сервера не может быть удалён" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Service Constrained Delegation\n" +#| "\n" +#| "Manage rules to allow constrained delegation of credentials so\n" +#| "that a service can impersonate a user when communicating with another\n" +#| "service without requiring the user to actually forward their TGT.\n" +#| "This makes for a much better method of delegating credentials as it\n" +#| "prevents exposure of the short term secret of the user.\n" +#| "\n" +#| "The naming convention is to append the word \"target\" or \"targets\" to\n" +#| "a matching rule name. This is not mandatory but helps conceptually\n" +#| "to associate rules and targets.\n" +#| "\n" +#| "A rule consists of two things:\n" +#| " - A list of targets the rule applies to\n" +#| " - A list of memberPrincipals that are allowed to delegate for\n" +#| " those targets\n" +#| "\n" +#| "A target consists of a list of principals that can be delegated.\n" +#| "\n" +#| "In English, a rule says that this principal can delegate as this\n" +#| "list of principals, as defined by these targets.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new constrained delegation rule:\n" +#| " ipa servicedelegationrule-add ftp-delegation\n" +#| "\n" +#| " Add a new constrained delegation target:\n" +#| " ipa servicedelegationtarget-add ftp-delegation-target\n" +#| "\n" +#| " Add a principal to the rule:\n" +#| " ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +#| "com ftp-delegation\n" +#| "\n" +#| " Add our target to the rule:\n" +#| " ipa servicedelegationrule-add-target --" +#| "servicedelegationtargets=ftp-delegation-target ftp-delegation\n" +#| "\n" +#| " Add a principal to the target:\n" +#| " ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +#| "com ftp-delegation-target\n" +#| "\n" +#| " Display information about a named delegation rule and target:\n" +#| " ipa servicedelegationrule_show ftp-delegation\n" +#| " ipa servicedelegationtarget_show ftp-delegation-target\n" +#| "\n" +#| " Remove a constrained delegation:\n" +#| " ipa servicedelegationrule-del ftp-delegation-target\n" +#| " ipa servicedelegationtarget-del ftp-delegation\n" +#| "\n" +#| "In this example the ftp service can get a TGT for the ldap service on\n" +#| "the bound user's behalf.\n" +#| "\n" +#| "It is strongly discouraged to modify the delegations that ship with\n" +#| "IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +#| "ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +#| "to delegate, causing the framework to stop functioning.\n" +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" +"\n" +"Ограниченное делегирование служб\n" +"\n" +"Управление правилами, с помощью которых можно ограничить делегирование " +"учётных данных таким образом, что служба сможет выполнять олицетворение " +"пользователя при обмене данными с другой службой без необходимости для " +"пользователя самом деле перенаправлять билет для получения билета (TGT). " +"Такой метод делегирования учётных данных значительно лучше, так как " +"предотвращает раскрытие краткосрочного секрета пользователя.\n" +"\n" +"В соответствии с соглашением об именовании к имени соответствующего правила " +"добавляется слово \"target\" или \"targets\". Такая схема имён не является " +"обязательной, но она помогает концептуально связать правила и их " +"назначения.\n" +"\n" +"Правило состоит из двух компонентов:\n" +" - Список целей (назначений), к которым применяется правило\n" +" - Список memberPrincipals, которым разрешено делегирование для этих " +"целей \n" +"\n" +"Цель состоит из списка учётных записей, которые можно делегировать.\n" +"\n" +"Если проще, правило утверждает, что определённую учетную запись можно " +"делегировать как указанный список учётных записей, согласно заданному списку " +"целей.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новое правило ограниченного делегирования:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Добавить новую цель ограниченного делегирования:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Добавить учётную запись в правило:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Добавить цель в правило:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Добавить учётную запись в цель:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Показать сведения об именованном правиле делегирования и цели:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Удалить ограниченное делегирование:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"В этом примере служба ftp может получать билет для получения билета для " +"службы ldap от имени связанного пользователя.\n" +"\n" +"Настоятельно не рекомендуется изменять делегирования, которые поставляются с " +"IPA, ipa-http-delegation и его цели ipa-cifs-delegation-targets и Ipa-ldap-" +"delegation-targets. Неправильная настройка может привести к потере " +"возможности делегирования, что повлечет неработоспособность всей системы.\n" + +msgid "Allowed to Impersonate" +msgstr "Разрешено олицетворять" + +msgid "Member principals" +msgstr "Учётные записи — участники" + +#, fuzzy, python-format +#| msgid "Malformed principal: '%(value)s'" +msgid "Malformed principal: %(error)s" +msgstr "Недопустимая учётная запись: \"%(value)s\"" + +msgid "Add target to a named service delegation." +msgstr "Добавить цель в именованное делегирование служб." + +#, python-format +msgid "member %s" +msgstr "участник %s" + +msgid "Remove member from a named service delegation." +msgstr "Удалить участника из именованного делегирования служб." + +msgid "service delegation rule" +msgstr "правило делегирования служб" + +msgid "service delegation rules" +msgstr "правила делегирования служб" + +msgid "Service delegation rules" +msgstr "Правила делегирования служб" + +msgid "Service delegation rule" +msgstr "Правило делегирования служб" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Добавлено правило делегирования служб \"%(value)s\"" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Удалено делегирование служб \"%(value)s\"" + +msgid "privileged service delegation rule" +msgstr "правило делегирования привилегированных служб" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "установлено соответствие %(count)d правила делегирования служб" +msgstr[1] "установлено соответствие %(count)d правил делегирования служб" +msgstr[2] "установлено соответствие %(count)d правил делегирования служб" + +msgid "service delegation target" +msgstr "цель делегирования служб" + +msgid "service delegation targets" +msgstr "цели делегирования служб" + +msgid "Service delegation targets" +msgstr "Цели делегирования служб" + +msgid "Service delegation target" +msgstr "Цель делегирования служб" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "Добавлена цель делегирования служб \"%(value)s\"" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Удалена цель делегирования служб \"%(value)s\"" + +msgid "privileged service delegation target" +msgstr "цель делегирования привилегированных служб" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "установлено соответствие %(count)d цели делегирования служб" +msgstr[1] "установлено соответствие %(count)d целей делегирования служб" +msgstr[2] "установлено соответствие %(count)d целей делегирования служб" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" +"\n" +"Неподтверждённые пользователи\n" +"\n" +"Управление записями неподтверждённых пользователей.\n" +"\n" +"Записи неподтверждённых пользователей находятся непосредственно в " +"контейнере: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\". Пользователи не могут проходить " +"аутентификацию с помощью этих записей (даже если они содержат учётные " +"данные). Эти записи только являются кандидатами на преобразование в активные " +"записи. \n" +"\n" +"Активные записи пользователей являются пользователями Posix, находящимися " +"непосредственно в контейнере: \"cn=accounts, SUFFIX\". Пользователи могут " +"проходить аутентификацию с помощью активных записей, если они содержат " +"учётные данные.\n" +"\n" +"Удалённые записи пользователей являются пользователями Posix, находящимися " +"непосредственно в контейнере: \"cn=deleted users, cn=accounts, " +"cn=provisioning, SUFFIX\". Пользователи не могут проходить аутентификацию с " +"помощью этих записей, даже если они содержат учётные данные.\n" +"\n" +"Контейнер неподтверждённых пользователей содержит записи:\n" +" - созданные с помощью команд \"stageuser-add\", которые являются " +"пользователями Posix\n" +" - созданные с помощью внешней системы подготовки \n" +"\n" +"Корректная запись неподтверждённого пользователя ДОЛЖНА отвечать следующим " +"требованиям:\n" +" - RDN записи имеет значение \"uid\"\n" +" - ipaUniqueID имеет значение \"autogenerate\"\n" +"\n" +"IPA поддерживает широкий спектр форматов имён пользователей, но следует " +"учитывать те ограничения, которые могут существовать в конкретной среде. " +"Например, имена пользователей, которые начинаются с цифры или превышают " +"определённую длину, могут привести к проблемам в некоторых системах UNIX.\n" +"Используйте команду \"ipa config-mod\" для изменения формата имени " +"пользователя, разрешённого средствами IPA.\n" +"\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить нового неподтверждённого пользователя:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Добавить неподтверждённого пользователя из контейнера удалённых " +"пользователей:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" + +msgid "Stage Users" +msgstr "Неподтверждённые пользователи" + +msgid "Stage User" +msgstr "Неподтверждённый пользователь" + +msgid "stage user" +msgstr "неподтверждённый пользователь" + +msgid "stage users" +msgstr "неподтверждённые пользователи" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "Добавлен неподтверждённый пользователь \"%(value)s\"" + +msgid "givenname is required" +msgstr "следует указать имя" + +msgid "sn is required" +msgstr "следует указать sn" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "Удалён неподтверждённый пользователь \"%(value)s\"" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "Изменён неподтверждённый пользователь \"%(value)s\"" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "установлено соответствие %(count)d пользователя" +msgstr[1] "установлено соответствие %(count)d пользователей" +msgstr[2] "установлено соответствие %(count)d пользователей" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "Активировать неподтверждённого пользователя \"%(value)s\"" + +msgid "Entry RDN is not 'uid'" +msgstr "RDN записи не имеет значение \"uid\"" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "В записи нет \"%(attribute)s\"" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "активный пользователь с именем \"%(user)s\" уже существует" + +#, python-format +msgid "Stage user %s activated" +msgstr "Неподтверждённый пользователь %s активирован" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" +"Добавить один или несколько сертификатов в запись неподтверждённого " +"пользователя." + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" +"Добавлены сертификаты в запись неподтверждённого пользователя \"%(value)s\"" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" +"Удалить один или несколько сертификатов из записи неподтверждённого " +"пользователя." + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" +"Удалены сертификаты из записи неподтверждённого пользователя \"%(value)s\"" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" +"Добавить новый псевдоним учётной записи в запись неподтверждённого " +"пользователя." + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" +"Добавлены новые псевдонимы в запись неподтверждённого пользователя " +"\"%(value)s\"" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" +"Удалить псевдоним учётной записи из записи неподтверждённого пользователя." + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" +"Удалены псевдонимы из записи неподтверждённого пользователя \"%(value)s\"" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" +"Добавить одно или несколько сопоставлений сертификатов в запись " +"неподтверждённого пользователя." + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" +"Удалить одно или несколько сопоставлений сертификатов из записи " +"неподтверждённого пользователя." + +msgid "pyhbac is not installed." +msgstr "Пакет pyhbac не установлен." + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" +"\n" +"Операции с сертификатами IPA\n" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" +"\n" +"Применение набора команд для управления сертификатами SSL-серверов.\n" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" +"\n" +"Запросы сертификатов существуют в виде запроса подписи сертификата " +"(Certificate Signing Request, CSR) в формате PEM.\n" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" +"\n" +"Система выдачи сертификатов Dogtag Certificate System использует только " +"значение CN в CSR и принудительно устанавливает остальные параметры субъекта " +"в соответствии со значениями, настроенными на сервере.\n" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" +"\n" +"Сертификат хранится в учётной записи службы, а учётной записи службы " +"требуется узел.\n" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" +"\n" +"Чтобы запросить сертификат:\n" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" +"\n" +"* Должен существовать узел\n" +"* Должна существовать служба (либо следует использовать параметр --add для " +"её автоматического добавления)\n" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" +"\n" +"ПОИСК:\n" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" +"\n" +"Сертификаты можно искать по субъекту, серийному номеру, причине отзыва, " +"датам действия и дате выдачи.\n" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" +"\n" +"Если поиск выполняется по дате _с, используется сравнение >=, а если " +"выполняется поиск _до — сравнение <=. Сочетание обоих видов поиска приводит " +"к поиску с логической операцией И.\n" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" +"\n" +"Даты обрабатываются как даты по Гринвичскому времени, в соответствии с " +"датами, определёнными в в сертификатах.\n" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" +"\n" +"Формат даты: ГГГГ-мм-дд.\n" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" +"\n" +"Запросить новый сертификат и добавить учётную запись:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" +"\n" +"Получить существующий сертификат:\n" +" ipa cert-show 1032\n" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" +"\n" +"Отозвать сертификат (подробные сведения о причинах доступны в RFC 5280):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" +"\n" +"Удалить сертификат из списка отзыва:\n" +" ipa cert-remove-hold 1032\n" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" +"\n" +"Проверить состояние запроса подписи:\n" +" ipa cert-status 10\n" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" +"\n" +"Поиск сертификатов по имени узла:\n" +" ipa cert-find --subject=ipaserver.example.com\n" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" +"\n" +"Поиск отозванных сертификатов по причине отзыва:\n" +" ipa cert-find --revocation-reason=5\n" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" +"\n" +"Поиск сертификатов по дате выдачи:\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" +"\n" +" Поиск сертификатов, владельцем которых является определённый пользователь:\n" +" ipa cert-find --user=user\n" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" +"\n" +" Проверить сертификат:\n" +" ipa cert-find --file=cert.pem --all\n" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" +"\n" +" Проверить, что владельцем сертификата является определённый пользователь:\n" +" ipa cert-find --file=cert.pem --user=user\n" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" +"\n" +"В текущей версии IPA немедленно выполняет (или отклоняет) все запросы " +"сертификатов, следовательно, данные о состоянии запроса не являются " +"полезными. Эти данные могут понадобиться в следующих версиях или в случае, " +"если CA не сразу выдаёт сертификат.\n" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" +"\n" +"Поддерживаются следующие причины отзыва:\n" + +msgid " * 0 - unspecified\n" +msgstr " * 0 - не указана\n" + +msgid " * 1 - keyCompromise\n" +msgstr " * 1 - keyCompromise\n" + +msgid " * 2 - cACompromise\n" +msgstr " * 2 - cACompromise\n" + +msgid " * 3 - affiliationChanged\n" +msgstr " * 3 - affiliationChanged\n" + +msgid " * 4 - superseded\n" +msgstr " * 4 - superseded\n" + +msgid " * 5 - cessationOfOperation\n" +msgstr " * 5 - cessationOfOperation\n" + +msgid " * 6 - certificateHold\n" +msgstr " * 6 - certificateHold\n" + +msgid " * 8 - removeFromCRL\n" +msgstr " * 8 - removeFromCRL\n" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr " * 9 - privilegeWithdrawn\n" + +msgid " * 10 - aACompromise\n" +msgstr " * 10 - aACompromise\n" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" +"\n" +"Обратите внимание, что код причины 7 не используется. Подробные сведения в " +"RFC 5280:\n" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" + +msgid "CA is not configured" +msgstr "CA не настроен" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" +"Учётной записи \"%(principal)s\" не разрешено использовать службу " +"сертификации \"%(ca)s\" с профилем \"%(profile_id)s\" для выдачи " +"сертификатов." + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "enabledService/configuredService не в записи kdc ipaConfigString" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" +"Узел \"%(hostname)s\" не является активным центром распространения ключей " +"(KDC)" + +msgid "Issuing CA" +msgstr "Выдающий CA" + +msgid "Name of issuing CA" +msgstr "Имя выдающего CA" + +msgid "Base-64 encoded certificate." +msgstr "Base-64 шифрованный сертификат" + +msgid "Certificate chain" +msgstr "Цепочка сертификатов" + +msgid "X.509 certificate chain" +msgstr "Цепочка сертификатов X.509" + +msgid "Subject email address" +msgstr "Адрес электронной почты субъекта" + +msgid "Subject DNS name" +msgstr "DNS-имя субъекта" + +msgid "Subject X.400 address" +msgstr "Адрес X.400 субъекта" + +msgid "Subject directory name" +msgstr "Имя каталога субъекта" + +msgid "Subject EDI Party name" +msgstr "Имя стороны EDI субъекта" + +msgid "Subject URI" +msgstr "Универсальный код ресурса (URI) субъекта" + +msgid "Subject IP Address" +msgstr "IP-адрес субъекта" + +msgid "Subject OID" +msgstr "Идентификатор объекта (OID) субъекта" + +msgid "Subject UPN" +msgstr "Имя участника-пользователя (UPN) субъекта" + +msgid "Subject Kerberos principal name" +msgstr "Имя учётной записи Kerberos субъекта" + +msgid "Subject Other Name" +msgstr "Другое имя субъекта" + +msgid "Issuer DN" +msgstr "DN издателя" + +msgid "Not Before" +msgstr "Недействителен до" + +msgid "Not After" +msgstr "Недействителен после" + +msgid "Fingerprint (SHA1)" +msgstr "Отпечаток (SHA1)" + +msgid "Fingerprint (SHA256)" +msgstr "Отпечаток (SHA256)" + +msgid "Serial number (hex)" +msgstr "Серийный номер (hex)" + +msgid "Request status" +msgstr "Состояние запроса" + +msgid "Include certificate chain in output" +msgstr "Включить цепочку сертификатов в вывод" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" +"Автоматически добавить учётную запись, если она не существует (только для " +"учётных записей служб)" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "сертификаты krbtgt могут использовать только профиль %s" + +msgid "No Common Name was found in subject of request." +msgstr "В субъекте запроса не найдено общее имя (CN)." + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" +"имя узла в субъекте запроса \"%(cn)s\" не соответствует имени или " +"псевдонимам учётной записи \"%(principal)s\"" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" +"имя узла в субъекте запроса \"%(cn)s\" не соответствует имени узла учётной " +"записи \"%(hostname)s\"" + +msgid "DN commonName does not match user's login" +msgstr "В commonName DN не соответствует имени пользователя" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" +"В emailAddress DN не соответствует ни одному адресу электронной почты " +"пользователя" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" +"Недостаточно привилегий \"write\" для атрибута \"userCertificate\" записи " +"\"%s\"." + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" +"использование типа альтернативного имени субъекта %s запрещено для учётных " +"записей пользователей" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" +"Учётная запись службы для альтернативного имени субъекта %s в запросе " +"сертификата не существует" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" +"Недостаточно привилегий для создания сертификата с альтернативным именем " +"субъекта \"%s\"." + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" +"Учётная запись \"%s\" в альтернативном имени субъекта не соответствует " +"запрошенной учётной записи" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" +"RFC822Name не соответствует ни одному адресу электронной почты пользователя" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" +"использование типа альтернативного имени субъекта %s запрещено для учётных " +"записей, которые не относятся к пользователям" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "Использование типа альтернативного имени субъекта %s запрещено" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "CA \"%s\" отключён" + +msgid "'add' option" +msgstr "параметр \"add\"" + +msgid "The principal for this request doesn't exist." +msgstr "Учётная запись для этого запроса не существует." + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "IP-адрес в subjectAltName (%s) недоступен из DNS-имён" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "IP-адрес в subjectAltName (%s) не имеет записи PTR" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "Запись PTR для SAN IP (%s) не соответствует записям A/AAAA" + +msgid "Status" +msgstr "Состояние" + +msgid "Revoked" +msgstr "Отозван" + +msgid "Revocation reason" +msgstr "Причина отзыва" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" +"Причина отзыва сертификата (0-10). Введите \"ipa help cert\", чтобы получить " +"сведения о причине отзыва. " + +#, python-format +msgid "Owner %s" +msgstr "Владелец %s" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" +"Сертификат с серийным номером %(serial)s, выданный CA \"%(ca)s\", не найден" + +msgid "7 is not a valid revocation reason" +msgstr "7 — неверная причина отзыва сертификата" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"certificate\")" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "установлено соответствие %(count)d сертификата" +msgstr[1] "установлено соответствие %(count)d сертификатов" +msgstr[2] "установлено соответствие %(count)d сертификатов" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "Поиск сертификатов, включая те, владельцами которых являются %s" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "Поиск сертификатов, не включая те, владельцами которых являются %s" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" +"\n" +"Команды Sudo \n" +"\n" +"Команды, которые используются в качестве строительных блоков для Sudo\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Создать новую команду\n" +" ipa sudocmd-add --desc='Чтение файлов в журнале' /usr/bin/less\n" +"\n" +" Удалить команду\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "команда Sudo" + +msgid "sudo commands" +msgstr "команды Sudo" + +msgid "Sudo Commands" +msgstr "Команды Sudo" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Добавлена команда Sudo \"%(value)s\"" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Удалена команда Sudo \"%(value)s\"" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Изменена команда Sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "установлено соответствие %(count)d команды Sudo" +msgstr[1] "установлено соответствие %(count)d команд Sudo" +msgstr[2] "установлено соответствие %(count)d команд Sudo" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" +"\n" +"Правила Sudo\n" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" +"\n" +"Sudo (su \"do\") позволяет системному администратору делегировать " +"полномочия, чтобы дать определённым пользователям (или группам " +"пользователей) возможность выполнять некоторые (или все) команды от имени " +"пользователя \"root\" или другого пользователя, вместе с тем предоставляя " +"журнал аудита команд и их аргументов.\n" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" +"\n" +"IPA предоставляет возможности настройки различных аспектов Sudo:\n" +" Users: пользователь (пользователи) или группа (группы), которые могут " +"вызывать Sudo.\n" +" Hosts: узел (узлы) или группа (группы) узлов, пользователи которых могут " +"вызывать Sudo.\n" +" Allow Command: конкретная команда (команды), которые разрешены для " +"выполнения с помощью Sudo. \n" +" Deny Command: конкретная команда (команды), которые запрещены для " +"выполнения с помощью Sudo.\n" +" RunAsUser: пользователь (пользователи) или группа (группы) пользователей, " +"от имени которых Sudo будет выполнять команды.\n" +" RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " +"команды.\n" +" Options: различные параметры sudoers (участники Sudo), которые могут " +"изменить поведение Sudo.\n" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" +"\n" +"Правилу Sudo можно добавить порядок, который будет руководить порядком " +"обработки записей (если такой порядок предусмотрен на клиентской стороне). " +"Порядок определяется числовым индексом (целое число), который не должен " +"повторяться.\n" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" +"\n" +"IPA предусматривает специальную привязку DN (binddn) для использования с " +"Sudo:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" +"\n" +"Чтобы включить binddn, выполните следующую команду для установки пароля:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" +"\n" +" Создать новое правило:\n" +" ipa sudorule-add readfiles\n" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" +"\n" +" Добавить объект команды Sudo и добавить его в правило в качестве " +"разрешённой команды:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" +"\n" +" Добавить узел в правило:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" +"\n" +" Добавить пользователя в правило:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" +"\n" +" Добавить специальное правило Sudo для конфигурации сервера Sudo по " +"умолчанию:\n" +" ipa sudorule-add defaults\n" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" +"\n" +" Указать параметр Sudo по умолчанию:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" +"\n" +" Указать преобразования типа и роли SELinux в правиле:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" + +msgid "this option has been deprecated." +msgstr "этот параметр больше не поддерживается." + +msgid "sudo rules" +msgstr "правила Sudo" + +msgid "Sudo Rules" +msgstr "Правила Sudo" + +msgid "Sudo Rule" +msgstr "Правило Sudo" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" +"порядковый номер должен иметь уникальное значение (%(order)d уже " +"использовано для %(rule)s)" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Добавлено правило Sudo \"%(value)s\"" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Удалено правило Sudo \"%(value)s\"" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Изменено правило Sudo \"%(value)s\"" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" +"для категории %(type)s нельзя установить значение \"all\", когда имеются " +"разрешённые %(objects)s" + +msgid "users" +msgstr "пользователи" + +msgid "command" +msgstr "команда" + +msgid "commands" +msgstr "команды" + +msgid "runAs user" +msgstr "пользователь запуска от имени" + +msgid "runAs users" +msgstr "пользователи запуска от имени" + +msgid "group runAs" +msgstr "группа запуска от имени" + +msgid "runAs groups" +msgstr "группы запуска от имени" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "установлено соответствие %(count)d правила Sudo" +msgstr[1] "установлено соответствие %(count)d правил Sudo" +msgstr[2] "установлено соответствие %(count)d правил Sudo" + +msgid "commands cannot be added when command category='all'" +msgstr "невозможно добавить команды, когда категория команд=\"all\"" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" +"невозможно добавить пользователей, когда категория запуска от имени " +"пользователей или запуска от имени групп=\"all\"" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" +"Нельзя указывать \"%(name)s\" в качестве имени пользователя в записи " +"RunAsUser" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "Имя группы \"%(name)s\" не принимается RunAsUser" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "Имя группы \"%(name)s\" не принимается RunAsGroup" + +msgid "operation not defined" +msgstr "операция не определена" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "не разрешено выполнение операции: %s" + +msgid "No such virtual command" +msgstr "Такая виртуальная команда отсутствует" + +msgid "commands for controlling sudo configuration" +msgstr "команды управления конфигурацией Sudo" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" +"\n" +"Группы команд Sudo\n" +"\n" +"Управление группами команд Sudo.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу команд Sudo:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Удалить группу команд Sudo:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Управлять участием в группе команд Sudo, команды:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Управлять участием в группе команд Sudo, команды:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Показать группу команд Sudo:\n" +" ipa sudocmdgroup-show admincmds\n" + +msgid "sudo command group" +msgstr "группа команд Sudo" + +msgid "sudo command groups" +msgstr "группы команд Sudo" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Добавлена группа команд Sudo \"%(value)s\"" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Удалена группа команд Sudo \"%(value)s\"" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Изменена группа команд Sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "установлено соответствие %(count)d группы команд Sudo" +msgstr[1] "установлено соответствие %(count)d групп команд Sudo" +msgstr[2] "установлено соответствие %(count)d групп команд Sudo" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" +"\n" +"Отношения доверия между областями (realm)\n" +"\n" +"Управление отношениями доверия между доменами IPA и Active Directory.\n" +"\n" +"Чтобы разрешить пользователям из удалённого домена доступ к ресурсам в " +"домене IPA, необходимо установить отношение доверия. В текущей версии IPA " +"поддерживает только отношения доверия между доменами IPA и Active Directory " +"под управлением Windows Server 2008 или более поздней версии с " +"функциональными возможностями уровня 2008 или более поздней версии.\n" +"\n" +"Обратите внимание, что следует надлежащим образом настроить DNS на обоих " +"доменах, IPA и Active Directory, чтобы домены могли обнаруживать друг друга. " +"Работоспособность отношения доверия зависит от возможности обнаруживать " +"специальные ресурсы в другом домене с помощью записей DNS.\n" +"\n" +"Примеры:\n" +"\n" +"1. Установить отношение доверия между областями (realm) с Active Directory с " +"помощью учётных данных администратора AD:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. Вывести список всех существующих отношений доверия:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Показать подробные сведения об определённом отношении доверия:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Удалить существующее отношение доверия:\n" +"\n" +" ipa trust-del \n" +"\n" +"Как только отношение доверия будет установлено, удалённых пользователей " +"потребуется привязать к локальным POSIX-группам, чтобы воспользоваться " +"ресурсами IPA. Привязку следует выполнить с помощью внешнего участия не-" +"POSIX-группы, а затем эту группу необходимо включить в одну из локальных " +"POSIX-групп.\n" +"\n" +"Пример:\n" +"\n" +"1. Создать группу для привязки администраторов (admins) доверенного домена и " +"их локальную POSIX-группу:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Добавить идентификатор безопасности Domain Admins домена " +"группе ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Вывести список участников внешних участников группы ad_admins_external, " +"чтобы определить их SID:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"ГЛОБАЛЬНАЯ КОНФИГУРАЦИЯ ОТНОШЕНИЙ ДОВЕРИЯ\n" +"\n" +"После установки субпакета доверия AD IPA и запуска ipa-adtrust-install " +"создаётся конфигурация локального домена (SID, GUID, имя NetBIOS). Эти " +"идентификаторы затем используются для связи с доверенным доменом конкретного " +"типа.\n" +"\n" +"1. Показать глобальную конфигурацию отношений доверия для типа отношений " +"доверия Active Directory:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Изменить глобальную конфигурацию для всех отношений доверия типа Active " +"Directory и указать другую резервную основную группу (GID резервной основной " +"группы используется в качестве GID основного пользователя, если для " +"пользователя, который выполняет аутентификацию в домене IPA, не был " +"установлен другой основной GID):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Изменить резервную основную группу обратно на скрытую группу по умолчанию " +"(разрешена любая группа с классом объекта posixGroup):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" +" Кроме того, выполнить эту команду могут следующие серверы: %(masters)s" + +msgid "AD Trust setup" +msgstr "Настройка отношений доверия AD" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" +"Невозможно выполнить выбранную команду без установленной поддержки Samba 4. " +"Убедитесь, что субпакет IPA server-trust-ad установлен." + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" +"Невозможно выполнить выбранную команду без настройки экземпляра Samba 4 на " +"этом компьютере. Убедитесь, что на этом сервере запущена команда ipa-adtrust-" +"install." + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Без настройки собственного домена нельзя выполнять поиск в доверенных " +"доменах. Убедитесь, что на IPA-сервере запущена команда ipa-adtrust-install" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" +"Не удалось получить домены из доверенного леса. Подробные сведения доступны " +"в файле error_log" + +msgid "trust" +msgstr "отношение доверия" + +msgid "trusts" +msgstr "отношения доверия" + +msgid "Trusts" +msgstr "Отношения доверия" + +msgid "Trust" +msgstr "Отношение доверия" + +#, fuzzy +#| msgid "SID blacklist incoming" +msgid "SID blocklist incoming" +msgstr "Входящий \"чёрный список\" SID" + +#, fuzzy +#| msgid "SID blacklist outgoing" +msgid "SID blocklist outgoing" +msgstr "Исходящий \"чёрный список\" SID" + +msgid "Trust direction" +msgstr "Направление отношения доверия" + +msgid "Trust type" +msgstr "Тип отношения доверия" + +msgid "Trust status" +msgstr "Состояние отношения доверия" + +msgid "UPN suffixes" +msgstr "Суффиксы UPN" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "недопустимый SID: {SID}" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" +"\n" +"Добавление нового отношения доверия, которое следует использовать.\n" +"\n" +"Эта команда устанавливает отношение доверия с другим доменом, который " +"становится \"доверенным\". В результате пользователи доверенного домена " +"получают доступ к ресурсам этого домена.\n" +"\n" +"В текущей версии поддерживаются только отношения доверия с доменами Active " +"Directory.\n" +"\n" +"Команду можно безопасно запускать несколько раз для одного и того же домена, " +"такой запуск приводит к изменению учётных данных отношения доверия на обеих " +"сторонах.\n" +"\n" +"Если команда уже выполнялась с определённым типом диапазона или с " +"автоматическим определением типа диапазона, а теперь необходимо настроить " +"другой тип диапазона, возможно, потребуется сначала удалить диапазон " +"идентификаторов с помощью команды ipa idrange-del. Затем повторите команду с " +"необходимым типом диапазона.\n" +"\n" +" " + +msgid "Active Directory domain range" +msgstr "диапазон доменов Active Directory" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "Диапазон доверия Active Directory с атрибутами POSIX" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" +"Тип диапазона идентификаторов доверенного домена, одно из разрешённых " +"значений" + +msgid "External trust" +msgstr "Внешнее отношение доверия" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" +"Установить внешнее отношение доверия с доменом в другом лесу. Отношение " +"доверия не является транзитивным за пределами этого домена." + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" +"Добавлено отношение доверия Active Directory для области (realm) \"%(value)s" +"\"" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Повторно установлено отношение доверия с доменом \"%(value)s\"" + +msgid "missing base_id" +msgstr "отсутствует base_id" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "pysss_murmur недоступен на сервере, base-id не предоставлен." + +msgid "trust type" +msgstr "тип отношения доверия" + +msgid "only \"ad\" is supported" +msgstr "предусмотрена поддержка только \"ad\"" + +msgid "domain" +msgstr "домен" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" +"Невозможно установить отношение доверия с AD, развёрнутой в том же домене, " +"что и IPA. Поддержка такой настройки не предусмотрена." + +msgid "Realm-domain mismatch" +msgstr "Несоответствие области (realm) и домена" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" +"Для установления отношения доверия с Active Directory имя домена и имя " +"области (realm) IPA-сервера должны совпадать" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" +"Доверенный домен %(domain)s находится среди доменов области (realm) IPA. Его " +"необходимо удалить до установления отношения доверия. Смотрите команду \"ipa " +"realmdomains-mod --del-domain\"." + +msgid "Trusted domain and administrator account use different realms" +msgstr "" +"Доверенным доменом и учётной записью администратора используются разные " +"области (realms)" + +msgid "Realm administrator password should be specified" +msgstr "Следует указать пароль администратора области (realm)" + +msgid "id range type" +msgstr "тип диапазона идентификаторов" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" +"При добавлении отношения доверия AD значениями --range-type могут быть " +"только ipa-ad-trust или ipa-ad-trust-posix." + +msgid "id range" +msgstr "диапазон идентификаторов" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" +"Для этого отношения доверия уже существует диапазон идентификаторов. Следует " +"либо удалить старый диапазон, либо исключить из команды параметры --base-" +"id/--range-size." + +msgid "range exists" +msgstr "диапазон существует" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" +"Уже существует диапазон идентификаторов с тем же именем, но другим SID " +"домена. Диапазон идентификаторов для нового доверенного домена необходимо " +"создать вручную." + +msgid "range type change" +msgstr "изменение типа диапазона" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" +"Диапазон идентификаторов для доверенного домена уже существует, но имеет " +"другой тип. Удалите старый диапазон вручную или не устанавливайте тип " +"принудительно с помощью параметра --range-type." + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "Не удалось определить контроллер домена для домена {domain}. " + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" +"В DNS IPA определена соответствующая политика перенаправления. Возможно, " +"перенаправитель указывает на некорректный узел?" + #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " msgstr "" -"Уровень домена не может быть поднят до {0}, следует устранить существующие " -"конфликты репликации." - -msgid "Server does not support domain level functionality" -msgstr "Сервер не поддерживает функционал уровня домена" - -msgid "Domain Level cannot be lowered." -msgstr "Уровень домена не может быть понижен." +"IPA управляет DNS. Проверьте вашу конфигурацию DNS и убедитесь, что " +"настройки позволяют определять адреса служебных записей домена \"{domain}\". " +"Примеры настройки DNS с помощью команд CLI или веб-интерфейса доступны в " +"документации. " #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." msgstr "" -"Уровень домена не может быть поднят до {0}, так на сервере {1} не " -"предусмотрена поддержка такого уровня." +"Поскольку IPA не управляет записями DNS, следует настроить DNS так, чтобы " +"система определяла адрес домена \"{domain}\" по данным узлов IPA и наоборот." + +msgid "Unable to verify write permissions to the AD" +msgstr "Не удалось проверить разрешения на запись в AD" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" +"Указано недостаточно аргументов для выполнения настройки отношения доверия" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "Удалено отношение доверия \"%(value)s\"" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" +"\n" +" Изменить отношение доверия (для будущего использования).\n" +"\n" +" В текущей версии для изменения атрибутов LDAP доступен только параметр " +"по умолчанию. В последующих версиях будут добавлены более специфичные " +"параметры.\n" +" " + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" +"Изменено отношение доверия \"%(value)s\" (изменения будут применены через 60 " +"секунд)" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "установлено соответствие %(count)d отношения доверия" +msgstr[1] "установлено соответствие %(count)d отношений доверия" +msgstr[2] "установлено соответствие %(count)d отношений доверия" + +msgid "trust configuration" +msgstr "конфигурация отношений доверия" + +msgid "Global Trust Configuration" +msgstr "Глобальная конфигурация отношений доверия" + +msgid "IPA AD trust agents" +msgstr "Агенты отношений доверия AD IPA" + +msgid "IPA servers configured as AD trust agents" +msgstr "IPA-серверы, настроенные в качестве агентов отношений доверия AD" + +msgid "IPA AD trust controllers" +msgstr "Контролёры отношений доверия AD IPA" + +msgid "IPA servers configured as AD trust controllers" +msgstr "IPA-серверы, настроенные в качестве контролёров отношений доверия AD" + +msgid "unsupported trust type" +msgstr "неподдерживаемый тип отношения доверия" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "Изменена конфигурация отношений доверия \"%(value)s\"" + +msgid "Name" +msgstr "Имя" + +msgid "SID" +msgstr "Идентификатор безопасности (SID)" + +msgid "sidgen_was_run" +msgstr "sidgen_was_run" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" +"Для выполнения этой команды должна существовать группа \"editors\", но такая " +"группа не найдена." + +msgid "trust domain" +msgstr "надёжный домен" + +msgid "trust domains" +msgstr "надёжные домены" + +msgid "Trusted domains" +msgstr "Доверенные домены" + +msgid "Trusted domain" +msgstr "Доверенный домен" + +msgid "Domain enabled" +msgstr "Домен включён" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "Удалены сведения о доверенном домене \"%(value)s\"" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"невозможно удалить корневой домен отношения доверия, используйте trust-del " +"для удаления самого отношения доверия" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" +"Список надёжных доменов успешно обновлён. Используйте команду trustdomain-" +"find для вывода этого списка." + +#, fuzzy +#| msgid "IPA servers configured as AD trust agents" +msgid "Configure this server as a trust agent." +msgstr "IPA-серверы, настроенные в качестве агентов отношений доверия AD" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "должно быть \"%s\"" + +#, fuzzy +#| msgid "not allowed to modify user entries" +msgid "not allowed to remotely add agent" +msgstr "запрещено изменять записи пользователей" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Включён надёжный домен \"%(value)s\"" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" +"Корневой домен отношения доверия всегда включён для существующего доверия" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Отключён надёжный домен \"%(value)s\"" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"невозможно отключить корневой домен отношения доверия, используйте trust-del " +"для удаления самого отношения доверия" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" +"\n" +"Возврат сведений о текущем прошедшем аутентификацию профиле \n" +"\n" +"Команда определения профиля возвращает сведения о том, как получить больше " +"данных о профиле, прошедшем аутентификацию для этого запроса. Данные " +"включают:\n" +"\n" +" * тип объекта\n" +" * команду для получения сведений об объекте\n" +" * аргументы и параметры, которые следует передать команде\n" +"\n" +"Сведения возвращаются в виде словаря. Ниже в качестве примера приведён вывод " +"в формате \"ключ: значение\".\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Поиск от имени пользователя IPA:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Поиск от имени пользователя из доверенного домена:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Поиск от имени узла:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Поиск от имени службы Kerberos:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" + +msgid "Describe currently authenticated identity." +msgstr "Показать описание текущего прошедшего аутентификацию профиля." + +msgid "Object class name" +msgstr "Имя класса объектов." + +msgid "Function to get details" +msgstr "Функция для получения сведений" + +msgid "Arguments to details function" +msgstr "Аргументы функции для получения сведений" + +msgid "Cannot query Directory Manager with API" +msgstr "" +"Не удалось отправить запрос средству управления каталогом (Directory " +"Manager) с помощью программного интерфейса" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" +"\n" +"Роли IPA-сервера\n" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" +"\n" +"Получить состояние ролей (DNS-сервер, CA и так далее), предоставленное " +"главными IPA-серверами.\n" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" +"\n" +"Роль может находиться в одном из следующих состояний: включена, настроена " +"или отсутствует.\n" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" +"\n" +" Показать состояние роли \"DNS server\" на сервере:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" +"\n" +" Показать состояние всех ролей, которые содержат \"AD\", на сервере:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" +"\n" +" Показать состояние всех настроенных ролей на сервере:\n" +" ipa server-role-find ipa.example.com\n" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" +"\n" +" Показать неявную роль главного IPA-сервера:\n" +" ipa server-role-find --include-master\n" + +msgid "server role" +msgstr "роль сервера" + +msgid "server roles" +msgstr "роли сервера" + +msgid "IPA Server Roles" +msgstr "Роли IPA-сервера" + +msgid "IPA Server Role" +msgstr "Роль IPA-сервера" + +msgid "IPA server role name" +msgstr "Имя роли IPA-сервера" + +msgid "Role status" +msgstr "Состояние роли" + +msgid "Status of the role" +msgstr "Состояние роли" + +msgid "Show role status on a server" +msgstr "Показать состояние роли на сервере." + +msgid "Find a server role on a server(s)" +msgstr "Поиск роли сервера на сервере (серверах)." + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "установлено соответствие %(count)s роли сервера" +msgstr[1] "установлено соответствие %(count)s ролей сервера" +msgstr[2] "установлено соответствие %(count)s ролей сервера" + +msgid "Include IPA master entries" +msgstr "Включить записи главных IPA-cерверов" + +msgid "roles" +msgstr "роли" + +msgid "IPA role name" +msgstr "Имя роли IPA" + +msgid "" +"\n" +"Vaults\n" +msgstr "" +"\n" +"Хранилища\n" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" +"\n" +"Управление хранилищами.\n" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" +"\n" +"Хранилище — это безопасное место для хранения секрета. В одном хранилище " +"может храниться только один секрет. При архивировании секрета в хранилище " +"существующий секрет (если имеется) будет перезаписан.\n" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" +"\n" +"В зависимости от владения хранилища подразделяются на три категории:\n" +"* хранилища пользователей или личные хранилища\n" +"* хранилища служб\n" +"* хранилища совместного использования\n" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" +"\n" +"Хранилища пользователей — это хранилища, владельцем которых является " +"конкретный пользователь. Личными являются хранилища, владельцем которых " +"является текущий пользователь. Владельцем хранилища службы является " +"определённая служба. Хранилища совместного использования принадлежат " +"администратору, но могут использоваться другими пользователями или " +"службами.\n" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" +"\n" +"В зависимости от механизма обеспечения безопасности выделяют три типа " +"хранилищ:\n" +"* стандартные хранилища\n" +"* симметричные хранилища\n" +"* асимметричные хранилища\n" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" +"\n" +"В стандартном хранилище для передачи и хранения секрета используются " +"безопасные механизмы. Секрет могут получить только те пользователи, у " +"которых есть доступ к хранилищу.\n" +"\n" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" +"\n" +"Симметричное хранилище похоже на стандартное хранилище, но в нём секрет " +"перед передачей предварительно шифруется с помощью пароля. Секрет можно " +"получить только с помощью этого пароля.\n" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" +"\n" +"Асимметричное хранилище похоже на стандартное хранилище, но в нём секрет " +"перед передачей предварительно шифруется с помощью открытого ключа. Секрет " +"можно получить только с помощью закрытого ключа.\n" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Вывести список хранилищ:\n" +" ipa vault-find\n" +" [--user <пользователь>|--service <служба>|--shared]\n" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" +"\n" +" Добавить стандартное хранилище:\n" +" ipa vault-add <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --type standard\n" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" +"\n" +" Добавить симметричное хранилище:\n" +" ipa vault-add <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --type symmetric --password-file password.txt\n" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" +"\n" +" Добавить асимметричное хранилище:\n" +" ipa vault-add <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --type asymmetric --public-key-file public.pem\n" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Показать хранилище:\n" +" ipa vault-show <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" +"\n" +" Изменить описание хранилища:\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --desc <описание>\n" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" +"\n" +" Изменить тип хранилища:\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --type <тип>\n" +" [старый пароль / закрытый ключ]\n" +" [новый пароль / открытый ключ]\n" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" +"\n" +" Изменить пароль симметричного хранилища:\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --change-password\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --old-password <старый пароль>\n" +" --new-password <новый пароль>\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --old-password-file <файл старого пароля>\n" +" --new-password-file <файл нового пароля>\n" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" +"\n" +" Изменить ключи асимметричного хранилища:\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --private-key-file <файл старого закрытого ключа>\n" +" --public-key-file <файл нового открытого ключа>\n" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Удалить хранилище:\n" +" ipa vault-del <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" +"\n" +" Показать конфигурацию хранилища:\n" +" ipa vaultconfig-show\n" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Архивировать данные в стандартное хранилище:\n" +" ipa vault-archive <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --in <файл входных данных>\n" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Архивировать данные в симметричное хранилище:\n" +" ipa vault-archive <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --in <файл входных данных>\n" +" --password-file password.txt\n" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Архивировать данные в асимметричное хранилище:\n" +" ipa vault-archive <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --in <файл входных данных>\n" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" +"\n" +" Получить данные из стандартного хранилища:\n" +" ipa vault-retrieve <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --out <файл выходных данных>\n" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Получить данные из симметричного хранилища:\n" +" ipa vault-retrieve <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --out <файл выходных данных>\n" +" --password-file password.txt\n" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" +"\n" +" Получить данные из асимметричного хранилища:\n" +" ipa vault-retrieve <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --out <файл выходных данных> --private-key-file private.pem\n" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Добавить владельцев хранилища:\n" +" ipa vault-add-owner <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Удалить владельцев хранилища:\n" +" ipa vault-remove-owner <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Добавить участников хранилища:\n" +" ipa vault-add-member <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Удалить участников хранилища:\n" +" ipa vault-remove-member <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" +"\n" +" Объект контейнера хранилищ.\n" +" " + +msgid "vaultcontainer" +msgstr "контейнер хранилищ" + +msgid "vaultcontainers" +msgstr "контейнеры хранилищ" + +msgid "Vault Containers" +msgstr "Контейнеры хранилищ" + +msgid "Vault Container" +msgstr "Контейнер хранилищ" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" +"Невозможно одновременно указать параметры службы, совместного использования " +"и пользователя" + +msgid "Host is not supported" +msgstr "Поддержка узла не предусмотрена" + +msgid "KRA service is not enabled" +msgstr "Служба KRA не включена" + +msgid "Deleted vault container" +msgstr "Удалён контейнер хранилищ" + +#, python-format +msgid "owner %s" +msgstr "владелец %s" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" +"\n" +" Объект хранилища.\n" +" " + +msgid "vault" +msgstr "хранилище" + +msgid "vaults" +msgstr "хранилища" + +msgid "Vaults" +msgstr "Хранилища" + +msgid "Vault" +msgstr "Хранилище" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" +"Невозможно одновременно указать параметры службы, общего доступа и " +"пользователя" + +msgid "Add a vault." +msgstr "Добавить хранилище." + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "Добавлено хранилище \"%(value)s\"" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "Удалено хранилище \"%(value)s\"" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "установлено соответствие %(count)d хранилища" +msgstr[1] "установлено соответствие %(count)d хранилищ" +msgstr[2] "установлено соответствие %(count)d хранилищ" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" +"Невозможно одновременно указать параметры службы (служб), общего доступа и " +"пользователя (пользователей)" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "Изменено хранилище \"%(value)s\"" + +msgid "Vault configuration" +msgstr "Конфигурация хранилища" + +msgid "IPA KRA servers" +msgstr "KRA-серверы IPA" + +msgid "IPA servers configured as key recovery agents" +msgstr "IPA-серверы, настроенные в качестве агентов восстановления ключей" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "Данные архивированы в хранилище \"%(value)s\"" + +msgid "Retrieve data from a vault." +msgstr "Извлечь данные из хранилища." + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Данные получены из хранища \"%(value)s\"" + +msgid "No archived data." +msgstr "Архивированных данных нет." + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "Проверяет, включена ли служба KRA на каких-либо серверах." + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" +"\n" +"Управление профилями сертификатов\n" +"\n" +"Профили сертификатов используются центром сертификации (Certificate " +"Authority, CA) во время подписи сертификатов, чтобы определить, является ли " +"приемлемым запрос подписи сертификата (Certificate Signing Request, CSR), и, " +"если это так, определить, какие возможности и расширения будут предоставлены " +"сертификатом.\n" +"\n" +"Формат профиля сертификатов — это формат в виде списка свойств, который " +"распознаётся Dogtag или системой сертификации центра сертификации Red Hat.\n" +"\n" +"СИНТАКСИС ИДЕНТИФИКАТОРА ПРОФИЛЯ:\n" +"\n" +"Идентификатор профиля — это строка без пробелов и знаков препинания, она " +"начинается с буквы, за которой следуют другие буквы, цифры или символы " +"подчёркивания (\"_\").\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Импортировать профиль, в котором не будут храниться выданные сертификаты:\n" +" ipa certprofile-import ShortLivedUserCert\n" +" --file UserCert.profile --desc \"User Certificates\"\n" +" --store=false\n" +"\n" +" Удалить профиль сертификатов:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Показать сведения о профиле:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Сохранить конфигурацию профиля в файл:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Поиск профилей, в которых не хранятся сертификаты:\n" +" ipa certprofile-find --store=false\n" +"\n" +"ФОРМАТ КОНФИГУРАЦИИ ПРОФИЛЯ:\n" +"\n" +"Формат конфигурации профиля — это формат в виде необработанного списка " +"свойств, который используется системой сертификации Dogtag Certificate " +"System. Поддержка формата XML не предусмотрена.\n" +"\n" +"К профилям под управлением IPA применяются следующие ограничения:\n" +"\n" +"- При импорте профиля значение поля \"profileId\", если это поле имеется, " +"должно совпадать с идентификатором, указанным в командной строке.\n" +"\n" +"- Значением поля \"classId\" должно быть \"caEnrollImpl\".\n" +"\n" +"- Значением поля \"auth.instance_id\" должно быть \"raCertAuth\".\n" +"\n" +"- Должны использоваться входной класс \"certReqInputImpl\" и выходной класс " +"\"certOutputImpl\".\n" + +msgid "invalid Profile ID" +msgstr "недопустимый идентификатор профиля" + +msgid "Certificate Profile" +msgstr "Профиль сертификатов" + +msgid "Certificate Profiles" +msgstr "Профили сертификатов" + +msgid "Profile configuration" +msgstr "Конфигурация профиля" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "установлено соответствие %(count)d профиля" +msgstr[1] "установлено соответствие %(count)d профилей" +msgstr[2] "установлено соответствие %(count)d профилей" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "Импортирован профиль \"%(value)s\"" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" +"В данных профиля несколько раз указан идентификатор \"profileId\": %(values)s" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" +"Идентификатор профиля \"%(cli_value)s\" не соответствует данным профиля " +"\"%(file_value)s\"" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "Удалён профиль \"%(value)s\"" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "Предустановленный профиль \"%(profile_id)s\" невозможно удалить" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Изменён профиль сертификатов \"%(value)s\"" + +msgid "Certificate profiles cannot be renamed" +msgstr "Профили сертификатов невозможно переименовать" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "Недостаточно привилегий для внесения изменений в профиль сертификатов." + +#, fuzzy +#| msgid "" +#| "\n" +#| "Groups of hosts.\n" +#| "\n" +#| "Manage groups of hosts. This is useful for applying access control to a\n" +#| "number of hosts by using Host-based Access Control.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new host group:\n" +#| " ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +#| "\n" +#| " Add another new host group:\n" +#| " ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +#| "\n" +#| " Add members to the hostgroup (using Bash brace expansion):\n" +#| " ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +#| "\n" +#| " Add a hostgroup as a member of another hostgroup:\n" +#| " ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +#| "\n" +#| " Remove a host from the hostgroup:\n" +#| " ipa hostgroup-remove-member --hosts=box2 baltimore\n" +#| "\n" +#| " Display a host group:\n" +#| " ipa hostgroup-show baltimore\n" +#| "\n" +#| " Delete a hostgroup:\n" +#| " ipa hostgroup-del baltimore\n" +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" +"\n" +"Группы узлов.\n" +"\n" +"Управление группами узлов. Оно полезно при применении управления доступом к " +"ряду узлов с помощью управления доступом на основе узла (HBAC).\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу узлов:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Добавить другую новую группу узлов:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Добавить участников в группу узлов (с использованием выражения Bash в " +"фигурных скобках):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Добавить группу узлов как участника другой группы узлов:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Удалить узел из группы узлов:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Показать группу узлов:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Удалить группу узлов:\n" +" ipa hostgroup-del baltimore\n" + +msgid "host groups" +msgstr "группы узлов" + +msgid "Host Group" +msgstr "Группа узлов" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Добавлена группа узлов \"%(value)s\"" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"сетевая группа с именем \"%s\" уже существует. Группы узлов и сетевые группы " +"имеют общее пространство имён" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Удалена группа узлов \"%(value)s\"" + +msgid "hostgroup" +msgstr "группа узлов" + +msgid "privileged hostgroup" +msgstr "привилегированная группа узлов" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Изменена группа узлов \"%(value)s\"" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "установлено соответствие %(count)d группы узлов" +msgstr[1] "установлено соответствие %(count)d групп узлов" +msgstr[2] "установлено соответствие %(count)d групп узлов" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this hostgroup." +msgstr "Добавить пользователей, которые могут управлять этим токеном." + +#, fuzzy +#| msgid "Remove users that can manage this token." +msgid "Remove users that can manage members of this hostgroup." +msgstr "Удалить пользователей, которые могут управлять этим токеном." + +msgid "kerberos ticket policy settings" +msgstr "параметры политики билетов Kerberos" + +msgid "Kerberos Ticket Policy" +msgstr "Политика билетов Kerberos" + +#, fuzzy +#| msgid "Max life" +msgid "OTP max life" +msgstr "Максимальный срок жизни" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "OTP token maximum ticket life (seconds)" +msgstr "Максимальный срок жизни билета (в секундах)" + +#, fuzzy +#| msgid "Max renew" +msgid "OTP max renew" +msgstr "Максимальный срок для обновления" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "Максимальный срок для обновления (в секундах)" + +#, fuzzy +#| msgid "Max life" +msgid "RADIUS max life" +msgstr "Максимальный срок жизни" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "RADIUS maximum ticket life (seconds)" +msgstr "Максимальный срок жизни билета (в секундах)" + +#, fuzzy +#| msgid "RADIUS proxy server name" +msgid "RADIUS max renew" +msgstr "Имя прокси-сервера RADIUS" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "Максимальный срок для обновления (в секундах)" + +#, fuzzy +#| msgid "Max life" +msgid "PKINIT max life" +msgstr "Максимальный срок жизни" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "PKINIT maximum ticket life (seconds)" +msgstr "Максимальный срок жизни билета (в секундах)" + +#, fuzzy +#| msgid "Max renew" +msgid "PKINIT max renew" +msgstr "Максимальный срок для обновления" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "Максимальный срок для обновления (в секундах)" + +msgid "Hardened max life" +msgstr "" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "Максимальный срок жизни билета (в секундах)" + +msgid "Hardened max renew" +msgstr "" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "Максимальный срок для обновления (в секундах)" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "Не удалось прочитать политику билетов для %s" + +msgid "Default ticket policy could not be read" +msgstr "Не удалось прочитать политику билетов по умолчанию" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" +"Не удалось прочитать фильтр происхождения (originfilter) определения личной " +"группы пользователя (UPG Definition). Проверьте ваши разрешения." + +msgid "" +"\n" +"IPA locations\n" +msgstr "" +"\n" +"расположения IPA\n" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" +"\n" +"Управлять расположениями DNS\n" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" +"\n" +" Найти все расположения:\n" +" ipa location-find\n" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" +"\n" +" Показать определённое расположение:\n" +" ipa location-show location\n" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" +"\n" +" Добавить расположение:\n" +" ipa location-add location --description 'My location'\n" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" +"\n" +" Удалить расположение:\n" +" ipa location-del location\n" + +msgid "location" +msgstr "расположение" + +msgid "locations" +msgstr "расположения" + +msgid "IPA Locations" +msgstr "Расположения IPA" + +msgid "IPA Location" +msgstr "Расположение IPA" + +msgid "Location name" +msgstr "Имя расположения" + +msgid "IPA location name" +msgstr "Имя расположения IPA" + +msgid "IPA Location description" +msgstr "Описание расположения IPA" + +msgid "Servers" +msgstr "Серверы" + +msgid "Servers that belongs to the IPA location" +msgstr "Серверы, которые принадлежат к записи расположения IPA" + +msgid "Advertised by servers" +msgstr "Сообщено серверами" + +msgid "List of servers which advertise the given location" +msgstr "Список серверов, которые сообщают указанное расположение" + +msgid "Add a new IPA location." +msgstr "Добавить новую запись расположения IPA." + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "Добавлена запись расположения IPA \"%(value)s\"" + +msgid "Delete an IPA location." +msgstr "Удалить запись расположения IPA." + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Удалена запись расположения IPA \"%(value)s\"" + +msgid "IPA Server" +msgstr "IPA-сервер" + +msgid "Modify information about an IPA location." +msgstr "Изменить сведения о расположении IPA." + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "Изменена запись расположения IPA \"%(value)s\"" + +msgid "Search for IPA locations." +msgstr "Поиск расположений IPA." + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "установлено соответствие %(count)d расположения IPA" +msgstr[1] "установлено соответствие %(count)d расположений IPA" +msgstr[2] "установлено соответствие %(count)d расположений IPA" + +msgid "Display information about an IPA location." +msgstr "Показать сведения о расположении IPA." + +msgid "Servers in location" +msgstr "Серверы в расположении" + +msgid "Role" +msgstr "Роль" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "Добавлена роль \"%(value)s\"" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "Удалена роль \"%(value)s\"" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "Изменена роль \"%(value)s\"" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "установлено соответствие %(count)d роли" +msgstr[1] "установлено соответствие %(count)d ролей" +msgstr[2] "установлено соответствие %(count)d ролей" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Добавлен пользователь \"%(value)s\"" + +msgid "Default group for new users is not POSIX" +msgstr "Группа по умолчанию для новых пользователей не является POSIX-группой" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Удален пользователь \"%(value)s\"" + +#, python-format +msgid "%s: user is already preserved" +msgstr "%s: пользователь уже хранится" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Изменён пользователь \"%(value)s\"" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "Учётная запись пользователя \"%(value)s\" возвращена после удаления" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "пользователь \"%s\" уже активен" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "Учётная запись неподтверждённого пользователя \"%(value)s\"" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "Учётная запись пользователя \"%(value)s\" отключена" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "Учётная запись пользователя \"%(value)s\" включена" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" +"\n" +"Разблокировка учётной записи пользователя.\n" +" \n" +"Учётная запись может быть заблокирована, если в течение определённого " +"периода времени слишком большое количество раз был введён неверный пароль " +"(соответствующие ограничения регулируются политикой паролей). Запись " +"блокируется временно, она может быть разблокирована администратором." + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "Учётная запись \"%(value)s\" разблокирована" + +msgid "Failed logins" +msgstr "Неудачные попытки входа" + +msgid "Last successful authentication" +msgstr "Последняя успешная аутентификация" + +msgid "Last failed authentication" +msgstr "Последняя ошибка при аутентификации" + +msgid "Time now" +msgstr "Время сейчас" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" +"\n" +"Состояние блокировки учётной записи пользователя.\n" +"\n" +" Учётная запись может быть заблокирована, если в течение определённого " +"периода времени слишком большое количество раз был введён неверный пароль " +"(соответствующие ограничения регулируются политикой паролей). Запись " +"блокируется временно, она может быть разблокирована администратором.\n" +"\n" +" Эта программа соединяется с каждым главным IPA-сервером и показывает " +"состояние блокировки на каждом из них.\n" +"\n" +" Чтобы определить, заблокирована ли учётная запись на указанном сервере, " +"потребуется сравнить количество неудачных попыток входа и время последней " +"неудачной попытки с эталонными значениями. Для блокировки учётной записи " +"количество неудачных попыток входа должно превысить значение maxfail в " +"течение временного интервала failinterval в соответствии с политикой " +"паролей, связанной с пользователем.\n" +"\n" +" Счётчик неудачных попыток изменяется только тогда, когда пользователь " +"выполняет попытку войти, поэтому учётная запись может казаться " +"заблокированной, но время, прошедшее с последней неудачной попытки входа, " +"превышает время блокировки (lockouttime), установленное политикой паролей. " +"Это означает, что пользователь может войти в систему снова.\n" +" " + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "Ошибка %(host)s: %(error)s" + +#, python-format +msgid "%(host)s failed" +msgstr "Ошибка %(host)s" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "Учётная запись отключена: %(disabled)s" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "Добавлены сертификаты в запись пользователя \"%(value)s\"" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Удалены сертификаты из записи пользователя \"%(value)s\"" + +msgid "Add new principal alias to the user entry" +msgstr "Добавить новый псевдоним учётной записи в запись пользователя." + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Добавлены новые псевдонимы в запись пользователя \"%(value)s\"" + +msgid "Remove principal alias from the user entry" +msgstr "Удалить псевдоним учётной записи из записи пользователя." + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Удалены псевдонимы из записи пользователя \"%(value)s\"" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" +"\n" +"Токены OTP\n" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"Управление токенами OTP.\n" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" +"\n" +"В IPA реализована поддержка использования токенов OTP для многофакторной " +"аутентификации. Этот код позволяет управлять токенами OTP.\n" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" +"\n" +" Добавить новый токен:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Проверить токен:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" +"\n" +" Изменить поставщика:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Удалить токен:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "OTP token" +msgstr "токен OTP" + +msgid "OTP tokens" +msgstr "токены OTP" + +msgid "OTP Tokens" +msgstr "Токены OTP" + +msgid "OTP Token" +msgstr "Токен OTP" + +msgid "URI" +msgstr "Универсальный код ресурса (URI)" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "Добавлен токен OTP \"%(value)s\"" + +msgid "cannot be empty" +msgstr "не может быть пустым" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Удалён токен OTP \"%(value)s\"" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Изменён токен OTP \"%(value)s\"" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "установлено соответствие %(count)d токена OTP" +msgstr[1] "установлено соответствие %(count)d токенов OTP" +msgstr[2] "установлено соответствие %(count)d токенов OTP" + +msgid "A list of ACI values" +msgstr "Список значений ACI" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "type, filter, subtree и targetgroup нельзя использовать вместе" + +msgid "ACI prefix is required" +msgstr "Следует указать префикс ACI" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"следует указать хотя бы одно из: type, filter, subtree, targetgroup, attrs " +"или memberof" + +msgid "filter and memberof are mutually exclusive" +msgstr "filter и memberof нельзя использовать вместе" + +msgid "group, permission and self are mutually exclusive" +msgstr "group, permission и self нельзя использовать вместе" + +msgid "One of group, permission or self is required" +msgstr "Следует указать одно из значений: group, permission или self" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "Группа \"%s\" не существует" + +msgid "empty filter" +msgstr "пустой фильтр" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Ошибка синтаксиса: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "Некорректное DN (%s)" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "ACI с именем \"%s\" не найдена" + +msgid "ACI object." +msgstr "Объект ACI." + +msgid "ACIs" +msgstr "ACI" + +msgid "ACI" +msgstr "ACI" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "Создана ACI \"%(value)s\"" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "Удалена ACI \"%(value)s\"" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "Изменена ACI \"%(value)s\"" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "установлено соответствие %(count)d ACI" +msgstr[1] "установлено соответствие %(count)d ACI" +msgstr[2] "установлено соответствие %(count)d ACI" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "ACI переименована в \"%(value)s\"" msgid "" "\n" @@ -18999,9 +24732,6 @@ msgstr "На сервере имён \"%(host)s\" нет соответству msgid "Managedby permission" msgstr "Разрешение managedby" -msgid "DNS is not configured" -msgstr "DNS не настроено" - #, fuzzy #| msgid "hosts cannot be set when type is 'group'" msgid "cannot be used when a zone is specified" @@ -19239,1865 +24969,740 @@ msgstr "Пробное выполнение" msgid "Do not update records only return expected records" msgstr "Не обновлять записи, только вернуть ожидаемые записи" +#, python-brace-format msgid "" -"\n" -"DNS server configuration\n" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." msgstr "" -"\n" -"Конфигурация DNS-сервера\n" +"Уровень домена не может быть поднят до {0}, следует устранить существующие " +"конфликты репликации." -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" -"\n" -"Управлять конфигурацией DNS-сервера\n" +msgid "Server does not support domain level functionality" +msgstr "Сервер не поддерживает функционал уровня домена" -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" -"\n" -" Показать конфигурацию определённого DNS-сервера:\n" -" ipa dnsserver-show\n" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" -"\n" -" Обновить конфигурацию определённого DNS-сервера:\n" -" ipa dnsserver-mod\n" - -msgid "DNS server" -msgstr "DNS-сервер" - -msgid "DNS servers" -msgstr "DNS-серверы" - -msgid "DNS Servers" -msgstr "DNS-серверы" - -msgid "DNS Server" -msgstr "DNS-сервер" - -msgid "DNS Server name" -msgstr "Имя DNS-сервера" - -msgid "SOA mname override" -msgstr "Переопределение mname SOA" - -msgid "SOA mname (authoritative server) override" -msgstr "Переопределение mname SOA (полномочный сервер)" - -msgid "Forwarders" -msgstr "Перенаправители" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Перенаправители для отдельных серверов. Для каждого перенаправителя можно " -"указать отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" -"Условная политика перенаправления для отдельных серверов. Чтобы отключить " -"для этой зоны перенаправление на глобальный перенаправитель, установите " -"значение \"none\". В этом случае условные перенаправители зон не будут " -"приниматься во внимание." - -msgid "Modify DNS server configuration" -msgstr "Изменить конфигурацию DNS-сервера" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "Изменена запись DNS-сервера \"%(value)s\"" - -msgid "Search for DNS servers." -msgstr "Поиск DNS-серверов." - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "установлено соответствие %(count)d DNS-сервера" -msgstr[1] "установлено соответствие %(count)d DNS-серверов" -msgstr[2] "установлено соответствие %(count)d DNS-серверов" - -msgid "IPA DNS Server is not installed" -msgstr "DNS-сервер IPA не установлен" - -msgid "Display configuration of a DNS server." -msgstr "Показать конфигурацию DNS-сервера." - -msgid "Add a new DNS server." -msgstr "Добавить новый DNS-сервер." - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "Добавлен новый DNS-сервер \"%(value)s\"" - -msgid "Delete a DNS server" -msgstr "Удалить DNS-сервер" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Удалён DNS-сервер \"%(value)s\"" - -msgid "REST API is not logged in." -msgstr "Не выполнен вход в программный интерфейс REST." - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" -"Ответ от программного интерфейса REST CA не соответствует 2xx: %(status)d. " -"%(explanation)s" - -msgid "Unable to communicate with CMS" -msgstr "Не удалось обменяться данными с CMS" - -msgid "Response from CA was not valid JSON" -msgstr "Ответ от CA не являлся корректным кодом JSON" - -msgid "Host-based access control commands" -msgstr "Команды управления доступом на основе узла" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" -"\n" -"Службы HBAC\n" -"\n" -"Службы PAM, доступом к которым управляет HBAC. Используемое здесь имя должно " -"соответствовать имени службы, которую оценивает PAM.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую службу HBAC:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Изменить существующую службу HBAC:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Поиск служб HBAC. В этом примере будут возвращены два результата, служба " -"FTP\n" -" и добавленная выше служба tftp:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Удалить службу HBAC:\n" -" ipa hbacsvc-del tftp\n" - -msgid "HBAC services" -msgstr "cлужбы HBAC" - -msgid "HBAC Services" -msgstr "Cлужбы HBAC" - -msgid "HBAC Service" -msgstr "Cлужба HBAC" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "Добавлена служба HBAC \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Удалена служба HBAC \"%(value)s\"" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "Изменена служба HBAC \"%(value)s\"" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "установлено соответствие %(count)d службы HBAC" -msgstr[1] "установлено соответствие %(count)d служб HBAC" -msgstr[2] "установлено соответствие %(count)d служб HBAC" - -msgid "HBAC service group" -msgstr "группа служб HBAC" - -msgid "HBAC service groups" -msgstr "группы служб HBAC" - -msgid "HBAC Service Groups" -msgstr "Группы служб HBAC" - -msgid "HBAC Service Group" -msgstr "Группа служб HBAC" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Добавлена группа служб HBAC \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "Удалена группа служб HBAC \"%(value)s\"" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "Изменена группа служб HBAC \"%(value)s\"" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "установлено соответствие %(count)d группы служб HBAC" -msgstr[1] "установлено соответствие %(count)d групп служб HBAC" -msgstr[2] "установлено соответствие %(count)d групп служб HBAC" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" -"\n" -"Неподтверждённые пользователи\n" -"\n" -"Управление записями неподтверждённых пользователей.\n" -"\n" -"Записи неподтверждённых пользователей находятся непосредственно в " -"контейнере: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\". Пользователи не могут проходить " -"аутентификацию с помощью этих записей (даже если они содержат учётные " -"данные). Эти записи только являются кандидатами на преобразование в активные " -"записи. \n" -"\n" -"Активные записи пользователей являются пользователями Posix, находящимися " -"непосредственно в контейнере: \"cn=accounts, SUFFIX\". Пользователи могут " -"проходить аутентификацию с помощью активных записей, если они содержат " -"учётные данные.\n" -"\n" -"Удалённые записи пользователей являются пользователями Posix, находящимися " -"непосредственно в контейнере: \"cn=deleted users, cn=accounts, " -"cn=provisioning, SUFFIX\". Пользователи не могут проходить аутентификацию с " -"помощью этих записей, даже если они содержат учётные данные.\n" -"\n" -"Контейнер неподтверждённых пользователей содержит записи:\n" -" - созданные с помощью команд \"stageuser-add\", которые являются " -"пользователями Posix\n" -" - созданные с помощью внешней системы подготовки \n" -"\n" -"Корректная запись неподтверждённого пользователя ДОЛЖНА отвечать следующим " -"требованиям:\n" -" - RDN записи имеет значение \"uid\"\n" -" - ipaUniqueID имеет значение \"autogenerate\"\n" -"\n" -"IPA поддерживает широкий спектр форматов имён пользователей, но следует " -"учитывать те ограничения, которые могут существовать в конкретной среде. " -"Например, имена пользователей, которые начинаются с цифры или превышают " -"определённую длину, могут привести к проблемам в некоторых системах UNIX.\n" -"Используйте команду \"ipa config-mod\" для изменения формата имени " -"пользователя, разрешённого средствами IPA.\n" -"\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить нового неподтверждённого пользователя:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Добавить неподтверждённого пользователя из контейнера удалённых " -"пользователей:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" - -msgid "Stage Users" -msgstr "Неподтверждённые пользователи" - -msgid "Stage User" -msgstr "Неподтверждённый пользователь" - -msgid "stage user" -msgstr "неподтверждённый пользователь" - -msgid "stage users" -msgstr "неподтверждённые пользователи" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Добавлен неподтверждённый пользователь \"%(value)s\"" - -msgid "givenname is required" -msgstr "следует указать имя" - -msgid "sn is required" -msgstr "следует указать sn" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "может быть не длиннее %(len)d символов" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Удалён неподтверждённый пользователь \"%(value)s\"" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Изменён неподтверждённый пользователь \"%(value)s\"" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "установлено соответствие %(count)d пользователя" -msgstr[1] "установлено соответствие %(count)d пользователей" -msgstr[2] "установлено соответствие %(count)d пользователей" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Активировать неподтверждённого пользователя \"%(value)s\"" - -msgid "Entry RDN is not 'uid'" -msgstr "RDN записи не имеет значение \"uid\"" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "В записи нет \"%(attribute)s\"" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "активный пользователь с именем \"%(user)s\" уже существует" - -#, python-format -msgid "Stage user %s activated" -msgstr "Неподтверждённый пользователь %s активирован" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" -"Добавить один или несколько сертификатов в запись неподтверждённого " -"пользователя." - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" -"Добавлены сертификаты в запись неподтверждённого пользователя \"%(value)s\"" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" -"Удалить один или несколько сертификатов из записи неподтверждённого " -"пользователя." - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" -"Удалены сертификаты из записи неподтверждённого пользователя \"%(value)s\"" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" -"Добавить новый псевдоним учётной записи в запись неподтверждённого " -"пользователя." - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" -"Добавлены новые псевдонимы в запись неподтверждённого пользователя " -"\"%(value)s\"" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" -"Удалить псевдоним учётной записи из записи неподтверждённого пользователя." - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" -"Удалены псевдонимы из записи неподтверждённого пользователя \"%(value)s\"" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" -"Добавить одно или несколько сопоставлений сертификатов в запись " -"неподтверждённого пользователя." - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" -"Удалить одно или несколько сопоставлений сертификатов из записи " -"неподтверждённого пользователя." - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" -"\n" -"Топология\n" -"\n" -"Управление топологией репликации на уровне домена 1.\n" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" -"\n" -"Данные IPA-сервера хранятся на LDAP-сервере в двух суффиксах:\n" -"* суффикс домена (domain), например, \"dc=example,dc=com\", содержит все " -"связанные с доменом данные\n" -"* суффикс центра сертификации (ca), \"o=ipaca\", имеется только на серверах " -"с установленным CA. Он содержит данные для компонента сервера сертификатов\n" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" -"\n" -"Данные, которые хранятся на IPA-серверах, реплицируются на другие IPA-" -"серверы. Способ репликации определяется соглашениями о репликации. " -"Соглашения о репликации необходимо устанавливать для каждого из суффиксов " -"отдельно. На уровне домена 0 управление ими выполняется с помощью средств " -"ipa-replica-manage и ipa-csreplica-manage. На уровне домена 1 управление " -"выполняется централизованно с помощью команд \"ipa topology*\".\n" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" -"\n" -"Соглашения представляются сегментами топологии. По умолчанию сегмент " -"топологии представляет 2 соглашения о репликации: по одному для каждого " -"направления, например, от A до B и от B до A. Создание однонаправленных " -"сегментов запрещено.\n" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" -"\n" -"Чтобы проверить, что ни один сервер не отключается в топологии указанного " -"суффикса, используйте эту команду:\n" -" ipa topologysuffix-verify $suffix\n" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -"\n" -"Примеры:\n" -" Найти все IPA-серверы:\n" -" ipa server-find\n" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" -"\n" -" Найти все суффиксы:\n" -" ipa topologysuffix-find\n" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" -"\n" -" Добавить сегмент топологии к суффиксу \"domain\":\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" -"\n" -" Добавить сегмент топологии в суффикс \"ca\":\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" -"\n" -" Вывести список всех сегментов топологии в суффиксе \"domain\":\n" -" ipa topologysegment-find domain\n" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" -"\n" -" Вывести список всех сегментов топологии в суффиксе \"ca\":\n" -" ipa topologysegment-find ca\n" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" -"\n" -" Удалить сегмент топологии в суффиксе \"domain\":\n" -" ipa topologysegment-del domain segment_name\n" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" -"\n" -" Удалить сегмент топологии в суффиксе \"ca\":\n" -" ipa topologysegment-del ca segment_name\n" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" -"\n" -" Проверить топологию суффикса \"domain\":\n" -" ipa topologysuffix-verify domain\n" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" -"\n" -" Проверить топологию суффикса \"ca\":\n" -" ipa topologysuffix-verify ca\n" +msgid "Domain Level cannot be lowered." +msgstr "Уровень домена не может быть понижен." #, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "Управление топологией требует уровня домена не ниже {0}" - -msgid "segment" -msgstr "сегмент" - -msgid "segments" -msgstr "сегменты" - -msgid "Topology Segments" -msgstr "Сегменты топологии" - -msgid "Topology Segment" -msgstr "Сегмент топологии" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "левый узел не является узлом топологии: %(leftnode)s" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "правый узел не является узлом топологии: %(rightnode)s" - -msgid "left node and right node must not be the same" -msgstr "левый узел и правый узел должны быть разными узлами" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "в левом узле ({host}) не предусмотрена поддержка суффикса '{suff}'" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "в правом узле ({host}) не предусмотрена поддержка суффикса '{suff}'" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "установлено соответствие %(count)d сегмента" -msgstr[1] "установлено соответствие %(count)d сегментов" -msgstr[2] "установлено соответствие %(count)d сегментов" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Добавлен сегмент \"%(value)s\"" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Удалён сегмент \"%(value)s\"" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Изменён сегмент \"%(value)s\"" - -#, python-format -msgid "%(value)s" -msgstr "%(value)s" - -msgid "left or right node has to be specified" -msgstr "следует указать левый или правый узел" - -msgid "only one node can be specified" -msgstr "можно указать только один узел" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "Обновление репликации для сегмента: направлен запрос \"%(pkey)s\"." - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "Остановка репликации для сегмента: направлен запрос \"%(pkey)s\"." - -msgid "suffixes" -msgstr "суффиксы" - -msgid "Topology suffixes" -msgstr "Суффиксы топологии" - -msgid "Topology suffix" -msgstr "Суффикс топологии" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "установлено соответствие %(count)d суффикса топологии" -msgstr[1] "установлено соответствие %(count)d суффиксов топологии" -msgstr[2] "установлено соответствие %(count)d суффиксов топологии" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Удалён суффикс топологии \"%(value)s\"" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "Добавлен суффикс топологии \"%(value)s\"" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Изменён суффикс топологии \"%(value)s\"" +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" +"Уровень домена не может быть поднят до {0}, так на сервере {1} не " +"предусмотрена поддержка такого уровня." msgid "" "\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" +"API Schema\n" msgstr "" "\n" -"Проверка топологии репликации для суффикса.\n" +"Схема API\n" + +msgid "" "\n" -"Проверки, которые выполняются:\n" -" 1. проверка того, не отключена ли топология (иначе говоря, имеются ли пути " -"репликации между всеми серверами).\n" -" 2. проверка того, не превышено ли рекомендованное количество соглашений о " -"репликации между серверами.\n" -" \n" +"Provides API introspection capabilities.\n" +msgstr "" +"\n" +"Предоставляет возможности самоанализа API.\n" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" +"\n" +" Показать сведения о user-find:\n" +" ipa command-show user-find\n" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" +"\n" +" Найти параметры user-find:\n" +" ipa param-find user-find\n" + +msgid "Documentation" +msgstr "Документация" + +msgid "Exclude from" +msgstr "Исключить из" + +msgid "Include in" +msgstr "Включить в" #, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" -"Недостаточно привилегий \"write\" для атрибута \"krbLastPwdChange\" записи " -"\"%s\"." +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "Результаты должны содержать только атрибут главного ключа (\"%s\")" + +msgid "Help topic" +msgstr "Раздел справки" + +msgid "Version" +msgstr "Версия" + +msgid "Parameters" +msgstr "Параметры" + +msgid "Method of" +msgstr "Метод" + +msgid "Method name" +msgstr "Имя метода" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s: %(oname)s не найден" + +msgid "Display information about a command." +msgstr "Показать сведения о команде." + +msgid "Search for commands." +msgstr "Поиск команд." + +msgid "Return command defaults" +msgstr "Вернуть значения команд по умолчанию" + +msgid "Display information about a class." +msgstr "Показать сведения о классе." + +msgid "Search for classes." +msgstr "Поиск классов." + +msgid "Display information about a help topic." +msgstr "Показать сведения о разделе справки." + +msgid "Search for help topics." +msgstr "Поиск разделов справки." + +msgid "Required" +msgstr "Обязательно" + +msgid "Multi-value" +msgstr "Многозначный" + +msgid "Always ask" +msgstr "Всегда спрашивать" + +msgid "CLI metavar" +msgstr "Метапеременная CLI" + +msgid "CLI name" +msgstr "Имя CLI" + +msgid "Confirm (password)" +msgstr "Подтвердить (пароль)" + +msgid "Default" +msgstr "По умолчанию" + +msgid "Default from" +msgstr "По умолчанию с" + +msgid "Label" +msgstr "Метка" + +msgid "Convert on server" +msgstr "Преобразовывать на сервере" + +msgid "Option group" +msgstr "Группа параметров" + +msgid "Sensitive" +msgstr "Учитывать" + +msgid "Positional argument" +msgstr "Позиционный аргумент" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(metaobject)s: %(oname)s не найден" + +msgid "Display information about a command parameter." +msgstr "Показать сведения о параметре команды." + +msgid "Search command parameters." +msgstr "Поиск параметров команды." + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(command_name)s: %(oname)s не найден" + +msgid "Display information about a command output." +msgstr "Показать сведения о выводе команды." + +msgid "Search for command outputs." +msgstr "Поиск выводов команд." + +msgid "Store and provide schema for commands and topics" +msgstr "Хранить и предоставлять схему для команд и тем" + +msgid "Fingerprint of schema cached by client" +msgstr "Отпечаток схемы, кэшированный клиентом" + +msgid "Member service groups" +msgstr "Группы служб — участники" + +msgid "Member HBAC service groups" +msgstr "Группы служб HBAC — участники" #, fuzzy -#| msgid "" -#| "\n" -#| "Groups of hosts.\n" -#| "\n" -#| "Manage groups of hosts. This is useful for applying access control to a\n" -#| "number of hosts by using Host-based Access Control.\n" -#| "\n" -#| "EXAMPLES:\n" -#| "\n" -#| " Add a new host group:\n" -#| " ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -#| "\n" -#| " Add another new host group:\n" -#| " ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -#| "\n" -#| " Add members to the hostgroup (using Bash brace expansion):\n" -#| " ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -#| "\n" -#| " Add a hostgroup as a member of another hostgroup:\n" -#| " ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -#| "\n" -#| " Remove a host from the hostgroup:\n" -#| " ipa hostgroup-remove-member --hosts=box2 baltimore\n" -#| "\n" -#| " Display a host group:\n" -#| " ipa hostgroup-show baltimore\n" -#| "\n" -#| " Delete a hostgroup:\n" -#| " ipa hostgroup-del baltimore\n" +#| msgid "Remove user ID overrides" +msgid "Member ID user overrides" +msgstr "Удалить переопределения ID пользователя" + +#, fuzzy +#| msgid "Indirect Member users" +msgid "Indirect Member ID user overrides" +msgstr "Пользователи с непрямым участием" + +msgid "Indirect Member permissions" +msgstr "Разрешения с непрямым участием" + +msgid "Indirect Member HBAC service" +msgstr "Служба HBAC с непрямым участием" + +msgid "Indirect Member HBAC service group" +msgstr "Группа служб HBAC с непрямым участием" + +msgid "Invalid format. Should be name=value" +msgstr "Неправильный формат. Должно быть имя=значение" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Главный IPA-сервер не может быть удалён или отключён" + +msgid "entry" +msgstr "запись" + +msgid "entries" +msgstr "записи" + +msgid "Entry" +msgstr "Запись" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "запись контейнера (%(container)s) не найдена" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s не найден" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "%(oname)s с именем \"%(pkey)s\" уже существует" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "атрибут \"%(attribute)s\" запрещён" + +#, fuzzy, python-format +#| msgid "attribute \"%s\" not allowed" +msgid "these attributes are not allowed: %(attrs)s" +msgstr "атрибут \"%s\" нельзя использовать" + +msgid "attribute is not configurable" +msgstr "настройка атрибута невозможна" + +msgid "No such attribute on this entry" +msgstr "В этой записи нет такого атрибута" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "Переименовать объект %(ldap_obj_name)s" + +msgid "the entry was deleted while being modified" +msgstr "запись была удалена во время внесения изменений" + +#, python-format +msgid "%s" +msgstr "%s" + +#, python-format +msgid "%s to add" +msgstr "%s для добавления" + +#, python-format +msgid "%s to remove" +msgstr "%s для удаления" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "Поиск %(searched_object)s с этими %(relationship)s %(ldap_object)s." + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "Поиск %(searched_object)s без этих %(relationship)s %(ldap_object)s." + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "добавлено значение атрибута в запись %(value)s" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "удалены значения атрибута из записи %(value)s" + +msgid "one or more values to remove" +msgstr "одно или несколько значений, которые следует удалить" + +msgid "The deny type has been deprecated." +msgstr "Тип \"deny\" больше не поддерживается." + +msgid "HBAC rules" +msgstr "правила HBAC" + +msgid "HBAC Rules" +msgstr "Правила HBAC" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "Добавлено правило HBAC \"%(value)s\"" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "Удалено правило HBAC \"%(value)s\"" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "Изменено правило HBAC \"%(value)s\"" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "установлено соответствие %(count)d правила HBAC" +msgstr[1] "установлено соответствие %(count)d правил HBAC" +msgstr[2] "установлено соответствие %(count)d правил HBAC" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "Включено правило HBAC \"%(value)s\"" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "Отключено правило HBAC \"%(value)s\"" + +msgid "Access time" +msgstr "Время доступа" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "Добавить узлы-источники и группы узлов в правило HBAC." + msgid "" "\n" -"Groups of hosts.\n" +"Simulate use of Host-based access controls\n" "\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" -"\n" -"Группы узлов.\n" -"\n" -"Управление группами узлов. Оно полезно при применении управления доступом к " -"ряду узлов с помощью управления доступом на основе узла (HBAC).\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу узлов:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Добавить другую новую группу узлов:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Добавить участников в группу узлов (с использованием выражения Bash в " -"фигурных скобках):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Добавить группу узлов как участника другой группы узлов:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Удалить узел из группы узлов:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Показать группу узлов:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Удалить группу узлов:\n" -" ipa hostgroup-del baltimore\n" - -msgid "host groups" -msgstr "группы узлов" - -msgid "Host Group" -msgstr "Группа узлов" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Добавлена группа узлов \"%(value)s\"" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"сетевая группа с именем \"%s\" уже существует. Группы узлов и сетевые группы " -"имеют общее пространство имён" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Удалена группа узлов \"%(value)s\"" - -msgid "hostgroup" -msgstr "группа узлов" - -msgid "privileged hostgroup" -msgstr "привилегированная группа узлов" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Изменена группа узлов \"%(value)s\"" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "установлено соответствие %(count)d группы узлов" -msgstr[1] "установлено соответствие %(count)d групп узлов" -msgstr[2] "установлено соответствие %(count)d групп узлов" - -#, fuzzy -#| msgid "Add users that can manage this token." -msgid "Add users that can manage members of this hostgroup." -msgstr "Добавить пользователей, которые могут управлять этим токеном." - -#, fuzzy -#| msgid "Remove users that can manage this token." -msgid "Remove users that can manage members of this hostgroup." -msgstr "Удалить пользователей, которые могут управлять этим токеном." - -msgid "" -"\n" -"Vaults\n" -msgstr "" -"\n" -"Хранилища\n" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" -"\n" -"Управление хранилищами.\n" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" -"\n" -"Хранилище — это безопасное место для хранения секрета. В одном хранилище " -"может храниться только один секрет. При архивировании секрета в хранилище " -"существующий секрет (если имеется) будет перезаписан.\n" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" -"\n" -"В зависимости от владения хранилища подразделяются на три категории:\n" -"* хранилища пользователей или личные хранилища\n" -"* хранилища служб\n" -"* хранилища совместного использования\n" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" -"\n" -"Хранилища пользователей — это хранилища, владельцем которых является " -"конкретный пользователь. Личными являются хранилища, владельцем которых " -"является текущий пользователь. Владельцем хранилища службы является " -"определённая служба. Хранилища совместного использования принадлежат " -"администратору, но могут использоваться другими пользователями или " -"службами.\n" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" -"\n" -"В зависимости от механизма обеспечения безопасности выделяют три типа " -"хранилищ:\n" -"* стандартные хранилища\n" -"* симметричные хранилища\n" -"* асимметричные хранилища\n" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" -"\n" -"В стандартном хранилище для передачи и хранения секрета используются " -"безопасные механизмы. Секрет могут получить только те пользователи, у " -"которых есть доступ к хранилищу.\n" -"\n" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" -"\n" -"Симметричное хранилище похоже на стандартное хранилище, но в нём секрет " -"перед передачей предварительно шифруется с помощью пароля. Секрет можно " -"получить только с помощью этого пароля.\n" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" -"\n" -"Асимметричное хранилище похоже на стандартное хранилище, но в нём секрет " -"перед передачей предварительно шифруется с помощью открытого ключа. Секрет " -"можно получить только с помощью закрытого ключа.\n" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Вывести список хранилищ:\n" -" ipa vault-find\n" -" [--user <пользователь>|--service <служба>|--shared]\n" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" -"\n" -" Добавить стандартное хранилище:\n" -" ipa vault-add <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --type standard\n" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" -"\n" -" Добавить симметричное хранилище:\n" -" ipa vault-add <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --type symmetric --password-file password.txt\n" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" -"\n" -" Добавить асимметричное хранилище:\n" -" ipa vault-add <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --type asymmetric --public-key-file public.pem\n" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Показать хранилище:\n" -" ipa vault-show <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" -"\n" -" Изменить описание хранилища:\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --desc <описание>\n" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" -"\n" -" Изменить тип хранилища:\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --type <тип>\n" -" [старый пароль / закрытый ключ]\n" -" [новый пароль / открытый ключ]\n" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" -"\n" -" Изменить пароль симметричного хранилища:\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --change-password\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --old-password <старый пароль>\n" -" --new-password <новый пароль>\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --old-password-file <файл старого пароля>\n" -" --new-password-file <файл нового пароля>\n" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" -"\n" -" Изменить ключи асимметричного хранилища:\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --private-key-file <файл старого закрытого ключа>\n" -" --public-key-file <файл нового открытого ключа>\n" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Удалить хранилище:\n" -" ipa vault-del <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" -"\n" -" Показать конфигурацию хранилища:\n" -" ipa vaultconfig-show\n" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" -"\n" -" Архивировать данные в стандартное хранилище:\n" -" ipa vault-archive <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --in <файл входных данных>\n" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Архивировать данные в симметричное хранилище:\n" -" ipa vault-archive <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --in <файл входных данных>\n" -" --password-file password.txt\n" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" -"\n" -" Архивировать данные в асимметричное хранилище:\n" -" ipa vault-archive <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --in <файл входных данных>\n" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" -"\n" -" Получить данные из стандартного хранилища:\n" -" ipa vault-retrieve <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --out <файл выходных данных>\n" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Получить данные из симметричного хранилища:\n" -" ipa vault-retrieve <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --out <файл выходных данных>\n" -" --password-file password.txt\n" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" -"\n" -" Получить данные из асимметричного хранилища:\n" -" ipa vault-retrieve <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --out <файл выходных данных> --private-key-file private.pem\n" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Добавить владельцев хранилища:\n" -" ipa vault-add-owner <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Удалить владельцев хранилища:\n" -" ipa vault-remove-owner <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Добавить участников хранилища:\n" -" ipa vault-add-member <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Удалить участников хранилища:\n" -" ipa vault-remove-member <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" -"\n" -" Объект контейнера хранилищ.\n" -" " - -msgid "vaultcontainer" -msgstr "контейнер хранилищ" - -msgid "vaultcontainers" -msgstr "контейнеры хранилищ" - -msgid "Vault Containers" -msgstr "Контейнеры хранилищ" - -msgid "Vault Container" -msgstr "Контейнер хранилищ" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" -"Невозможно одновременно указать параметры службы, совместного использования " -"и пользователя" - -msgid "Host is not supported" -msgstr "Поддержка узла не предусмотрена" - -msgid "KRA service is not enabled" -msgstr "Служба KRA не включена" - -msgid "Deleted vault container" -msgstr "Удалён контейнер хранилищ" - -#, python-format -msgid "owner %s" -msgstr "владелец %s" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" -"\n" -" Объект хранилища.\n" -" " - -msgid "vault" -msgstr "хранилище" - -msgid "vaults" -msgstr "хранилища" - -msgid "Vaults" -msgstr "Хранилища" - -msgid "Vault" -msgstr "Хранилище" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" -"Невозможно одновременно указать параметры службы, общего доступа и " -"пользователя" - -msgid "Add a vault." -msgstr "Добавить хранилище." - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "Добавлено хранилище \"%(value)s\"" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "Удалено хранилище \"%(value)s\"" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "установлено соответствие %(count)d хранилища" -msgstr[1] "установлено соответствие %(count)d хранилищ" -msgstr[2] "установлено соответствие %(count)d хранилищ" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" -"Невозможно одновременно указать параметры службы (служб), общего доступа и " -"пользователя (пользователей)" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "Изменено хранилище \"%(value)s\"" - -msgid "Vault configuration" -msgstr "Конфигурация хранилища" - -msgid "IPA KRA servers" -msgstr "KRA-серверы IPA" - -msgid "IPA servers configured as key recovery agents" -msgstr "IPA-серверы, настроенные в качестве агентов восстановления ключей" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "Данные архивированы в хранилище \"%(value)s\"" - -msgid "Retrieve data from a vault." -msgstr "Извлечь данные из хранилища." - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Данные получены из хранища \"%(value)s\"" - -msgid "No archived data." -msgstr "Архивированных данных нет." - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "Проверяет, включена ли служба KRA на каких-либо серверах." - -msgid "netgroups" -msgstr "сетевые группы" - -msgid "Netgroups" -msgstr "Сетевые группы" - -msgid "Netgroup" -msgstr "Сетевая группа" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Добавлена сетевая группа \"%(value)s\"" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"группа узлов с именем \"%s\" уже существует. Группы узлов и сетевые группы " -"имеют общее пространство имён" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Удалена сетевая группа \"%(value)s\"" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Изменена сетевая группа \"%(value)s\"" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "установлено соответствие %(count)d сетевой группы" -msgstr[1] "установлено соответствие %(count)d сетевых групп" -msgstr[2] "установлено соответствие %(count)d сетевых групп" - -msgid "One time password commands" -msgstr "Команды для одноразового пароля" - -msgid "OTP configuration options" -msgstr "Параметры конфигурации OTP" - -msgid "OTP Configuration" -msgstr "Конфигурация OTP" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Изменён пароль \"%(value)s\"" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" -"\n" -"Средства отчётности о состоянии функции пре-аутентификации (PKINIT) " -"Kerberos.\n" -"\n" -"Отчёт о том, включена или отключена пре-аутентификация (PKINIT) Kerberos на " -"главных IPA-серверах \n" -"\n" -"ПРИМЕРЫ:\n" -" Вывести список состояний PKINIT на всех главных серверах:\n" -" ipa pkinit-status\n" -"\n" -" Проверить состояние PKINIT на \"ipa.example.com\":\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" Вывести список всех главных IPA-серверов с отключённой PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"Дополнительные сведения о поддержке PKINIT:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" - -msgid "pkinit" -msgstr "pkinit" - -msgid "PKINIT" -msgstr "PKINIT" - -msgid "PKINIT status" -msgstr "Состояние PKINIT" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "Включена или отключена пре-аутентификация (PKINIT)" - -msgid "Report PKINIT status on the IPA masters" -msgstr "Сообщить состояние PKINIT на главных IPA-серверах" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "установлено соответствие %(count)s сервера" -msgstr[1] "установлено соответствие %(count)s серверов" -msgstr[2] "установлено соответствие %(count)s серверов" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" -"\n" -"Прокси-серверы RADIUS\n" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" -"\n" -"Управление прокси-серверами RADIUS.\n" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" -"\n" -"В IPA поддерживается использование внешнего прокси-сервера RADIUS для " -"выполнения аутентификации с помощью одноразового пароля krb5. Эта поддержка " -"обеспечивает значительную гибкость при интеграции со сторонними службами " -"аутентификации.\n" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" -"\n" -" Добавить новый сервер:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" -"\n" -" Найти все серверы, записи которых содержат строку \"example.com\":\n" -" ipa radiusproxy-find example.com\n" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" -"\n" -" Проверить конфигурацию:\n" -" ipa radiusproxy-show MyRADIUS\n" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" -"\n" -" Изменить секрет:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" -"\n" -" Удалить конфигурацию:\n" -" ipa radiusproxy-del MyRADIUS\n" - -msgid "invalid attribute name" -msgstr "недопустимое имя атрибута" - -msgid "invalid port number" -msgstr "недопустимый номер порта" - -msgid "RADIUS proxy server" -msgstr "прокси-сервер RADIUS" - -msgid "RADIUS proxy servers" -msgstr "прокси-серверы RADIUS" - -msgid "RADIUS Servers" -msgstr "Серверы RADIUS" - -msgid "RADIUS Server" -msgstr "Сервер RADIUS" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "Добавлен прокси-сервер RADIUS \"%(value)s\"" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "Удалён прокси-сервер RADIUS \"%(value)s\"" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "Изменён прокси-сервер RADIUS \"%(value)s\"" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "установлено соответствие %(count)d прокси-сервера RADIUS" -msgstr[1] "установлено соответствие %(count)d прокси-серверов RADIUS" -msgstr[2] "установлено соответствие %(count)d прокси-серверов RADIUS" - -msgid "A list of ACI values" -msgstr "Список значений ACI" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "type, filter, subtree и targetgroup нельзя использовать вместе" - -msgid "ACI prefix is required" -msgstr "Следует указать префикс ACI" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" -"следует указать хотя бы одно из: type, filter, subtree, targetgroup, attrs " -"или memberof" - -msgid "filter and memberof are mutually exclusive" -msgstr "filter и memberof нельзя использовать вместе" - -msgid "group, permission and self are mutually exclusive" -msgstr "group, permission и self нельзя использовать вместе" - -msgid "One of group, permission or self is required" -msgstr "Следует указать одно из значений: group, permission или self" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "Группа \"%s\" не существует" - -msgid "empty filter" -msgstr "пустой фильтр" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Ошибка синтаксиса: %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "Некорректное DN (%s)" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "ACI с именем \"%s\" не найдена" - -msgid "ACI object." -msgstr "Объект ACI." - -msgid "ACIs" -msgstr "ACI" - -msgid "ACI" -msgstr "ACI" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "Создана ACI \"%(value)s\"" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "Удалена ACI \"%(value)s\"" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "Изменена ACI \"%(value)s\"" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "установлено соответствие %(count)d ACI" -msgstr[1] "установлено соответствие %(count)d ACI" -msgstr[2] "установлено соответствие %(count)d ACI" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "ACI переименована в \"%(value)s\"" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" "\n" -"Конфигурация сервера\n" +"Имитация использования управления доступом на основе узла\n" "\n" -"Управление значениями по умолчанию, которые используются IPA, и некоторыми " -"параметрами их настройки.\n" +"Правила HBAC управляют тем, кто и на каких узлах сможет получать доступ к " +"определённым службам. Вы можете воспользоваться HBAC для определения тех " +"пользователей и групп, которые будут иметь доступ к определённой службе или " +"группе служб на целевом узле. \n" "\n" -"ПРИМЕЧАНИЯ:\n" +"Так как применение правил HBAC подразумевает использование рабочей среды, " +"этот подключаемый модуль предназначен для обеспечения имитации оценки правил " +"HBAC при отсутствии доступа к рабочей среде.\n" "\n" -"Здесь хранится значение уведомления о пароле (--pwdexpnotify), поэтому оно " -"будет реплицировано. В текущей версии оно не используется для " -"заблаговременного уведомления пользователей об окончании срока действия " -"пароля.\n" +" Проверка тестового пользователя, который обращается к службе на именованном " +"узле, на соответствие существующим включённым правилам.\n" "\n" -"Некоторые атрибуты предоставлены в ознакомительных целях и доступны только " -"для чтения. Среди них:\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" "\n" -"Основа субъекта сертификата: настроенная основа субъекта сертификата, " -"например O=EXAMPLE.COM. Настраивается только во время установки.\n" -"Возможности подключаемого модуля паролей: в текущей версии он определяет " -"дополнительные хеши, которые создаются на основе пароля (могут быть и другие " -"условия).\n" +" Параметры --user, --host и --service являются обязательными, остальные " +"можно не указывать.\n" "\n" -"При установке приоритета сопоставления пользователей SELinux, возможно, " -"потребуется взять значение в кавычки, чтобы оно не обрабатывалось " -"оболочкой.\n" +" Если указан параметр --rules, имитировать включение указанных правил и " +"проверить возможность входа пользователя в случае использования только этих " +"правил.\n" "\n" -"Максимальная длина имени узла в Linux управляется параметром ядра " -"MAXHOSTNAMELEN и по умолчанию составляет 64 символа. В некоторых других " -"операционных системах, например, в Solaris, разрешены имена узлов длиной " -"вплоть до 255.\n" -"Этот параметр позволяет регулировать длину, но по умолчанию ограничен " -"максимальной длиной для Linux.\n" +" Если указан параметр --enabled, добавить все включённые правила HBAC к " +"имитации.\n" +"\n" +" Если указан параметр --disabled, добавить все отключённые правила HBAC к " +"имитации.\n" +"\n" +" Если указан параметр --nodetail, не возвращать данные о соответствующих или " +"не соответствующих правилах.\n" +"\n" +" Если одновременно указаны параметры --rules и --enabled, выполнить имитацию " +"--rules _и_\n" +" всех включённых правил IPA.\n" +"\n" +" Если не указан параметр --rules, выполнить имитацию всех включённых правил " +"IPA.\n" +" По умолчанию в IPA имеется общее ограничение количества извлекаемых " +"записей, его можно изменить с помощью параметра --sizelimit.\n" +"\n" +" ПРИМЕРЫ:\n" +"\n" +" 1. Использовать все включённые правила HBAC в базе данных IPA:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" Несоответствующие правила: my-second-rule\n" +" Несоответствующие правила: my-third-rule\n" +" Несоответствующие правила: myrule\n" +" Соответствующие правила: allow_all\n" +"\n" +" 2. Отключить подробный отчёт о применении правил:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +"\n" +" 3. Проверить явно указанные правила HBAC:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Доступ предоставлен: Нет\n" +" ---------------------\n" +" Несоответствующие правила: my-second-rule\n" +" Несоответствующие правила: myrule\n" +"\n" +" 4. Использовать все включённые правила HBAC в базе данных IPA + явно " +"указанные правила:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" Несоответствующие правила: my-second-rule\n" +" Несоответствующие правила: my-third-rule\n" +" Несоответствующие правила: myrule\n" +" Соответствующие правила: allow_all\n" +"\n" +" 5. Проверить все отключённые правила HBAC в базе данных IPA:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Доступ предоставлен: Нет\n" +" ---------------------\n" +" Несоответствующие правила: new-rule\n" +"\n" +" 6. Проверить все отключённые правила HBAC в базе данных IPA + явно " +"указанные правила:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Доступ предоставлен: Нет\n" +" ---------------------\n" +" Несоответствующие правила: my-second-rule\n" +" Несоответствующие правила: my-third-rule\n" +" Несоответствующие правила: myrule\n" +"\n" +" 7. Проверить все (включённые и отключённые) правила HBAC в базе данных " +"IPA:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" Несоответствующие правила: my-second-rule\n" +" Несоответствующие правила: my-third-rule\n" +" Несоответствующие правила: myrule\n" +" Несоответствующие правила: new-rule\n" +" Соответствующие правила: allow_all\n" +"\n" +"\n" +"HBACTEST И ДОВЕРЕННЫЕ ДОМЕНЫ\n" +"\n" +"Если в IPA настроен внешний доверенный домен, правила HBAC также применяются " +"к пользователям, которые выполняют доступ к ресурсам IPA из доверенного " +"домена. Пользователи и группы доверенного домена (и их SID) затем могут быть " +"привязаны к внешним группам, которые могут быть участниками POSIX-групп в " +"IPA. Такие привязки можно использовать в правилах HBAC, тем самым разрешая " +"доступ к ресурсам, которые защищены системой HBAC.\n" +"\n" +"Подключаемый модуль hbactest позволяет проверять доступ как для локальных " +"пользователей IPA, так и для пользователей из доверенных доменов, как с " +"полным именем пользователя, так и по SID пользователей. В таких именах " +"пользователей должен быть указан доверенный домен в краткой форме (DOMAIN" +"\\Administrator) или имя учётной записи пользователя (UPN), Administrator@ad." +"test.\n" +"\n" +"Обратите внимание, что выполнять hbactest с аргументом пользователя " +"доверенного домена в параметре --user могут только участники группы \"trust " +"admins\".\n" "\n" "ПРИМЕРЫ:\n" "\n" -" Показать базовую конфигурацию сервера:\n" -" ipa config-show\n" +" 1. Проверить, соответствует ли пользователь из доверенного домена, " +"указанный по краткому имени, какому-либо правилу:\n" "\n" -" Показать все параметры конфигурации:\n" -" ipa config-show --all\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" Соответствующие правила: allow_all\n" +" Соответствующие правила: can_login\n" "\n" -" Изменить максимальную длину имени пользователя на 99 символов:\n" -" ipa config-mod --maxusername=99\n" +" 2. Проверить, соответствует ли пользователь из доверенного домена, " +"указанный по имени домена, какому-либо правилу:\n" "\n" -" Изменить максимальную длину имени узла на 255 символов:¶\n" -" ipa config-mod --maxhostname=255¶\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" Соответствующие правила: allow_all\n" +" Соответствующие правила: can_login\n" "\n" -" Увеличить установленные по умолчанию ограничения времени и размера поиска " -"IPA-сервера:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 3. Проверить, соответствует ли пользователь из доверенного домена, " +"указанный по SID, какому-либо правилу:\n" "\n" -" Указать почтовый домен пользователей по умолчанию:\n" -" ipa config-mod --emaildomain=example.com\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" Соответствующие правила: allow_all\n" +" Соответствующие правила: can_login\n" "\n" -" Включить режим миграции, чтобы сделать работоспособной команду \"ipa " -"migrate-ds\":\n" -" ipa config-mod --enable-migration=TRUE\n" +" 4. Проверить, соответствует ли другой пользователь из доверенного " +"домена, указанный по SID, какому-либо правилу:\n" "\n" -" Определить порядок списка пользователей SELinux:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" Соответствующие правила: allow_all\n" +" Несоответствующие правила: can_login\n" +"\n" +" 5. Проверить, соответствует ли другой пользователь из доверенного домена, " +"указанный по краткому имени, какому-либо правилу:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" Соответствующие правила: allow_all\n" +" Несоответствующие правила: can_login\n" -msgid "must be at least 10" -msgstr "должно быть не меньше 10" +msgid "Unresolved rules in --rules" +msgstr "Непригодные к обработке правила в --rules" -msgid "configuration options" -msgstr "параметры конфигурации" +#, python-format +msgid "Access granted: %s" +msgstr "Доступ предоставлен: %s" -msgid "Configuration" -msgstr "Конфигурация" +msgid "ID View" +msgstr "Представление ID" -msgid "Maximum hostname length" -msgstr "Максимальная длина имени узла" +msgid "system ID View" +msgstr "системное представление ID" -msgid "IPA masters" -msgstr "Главные IPA-серверы" +msgid "ID Views" +msgstr "Представления ID" -msgid "List of all IPA masters" -msgstr "Список всех главных IPA-серверов" +msgid "User object overrides" +msgstr "Приоритет объекта пользователя" -msgid "Hidden IPA masters" -msgstr "Скрытые главные IPA-серверы" +msgid "Group object overrides" +msgstr "Приоритет объекта группы" -msgid "List of all hidden IPA masters" -msgstr "Список всех скрытых главных IPA-серверов" - -msgid "IPA master capable of PKINIT" -msgstr "Главный IPA-сервер с поддержкой PKINIT" - -msgid "IPA master which can process PKINIT requests" -msgstr "Главный IPA-сервер, которой может обрабатывать запросы PKINIT" - -msgid "IPA CA servers" -msgstr "Серверы CA IPA" - -msgid "IPA servers configured as certificate authority" -msgstr "IPA-серверы, настроенные в качестве центра сертификации" - -msgid "Hidden IPA CA servers" -msgstr "Скрытые серверы CA IPA" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "Скрытые IPA-серверы, настроенные в качестве центра сертификации" - -msgid "IPA CA renewal master" -msgstr "Главный сервер обновления CA IPA" - -msgid "Renewal master for IPA certificate authority" -msgstr "Главный сервер обновления центра сертификации IPA" - -msgid "IPA servers configured as key recovery agent" -msgstr "IPA-серверы, настроенные в качестве агента восстановления ключей" - -msgid "Hidden IPA KRA servers" -msgstr "Скрытые KRA-серверы IPA" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" -"Скрытые IPA-серверы, настроенные в качестве агента восстановления ключей" +msgid "Hosts the view applies to" +msgstr "Узлы, к которым применяется представление" msgid "Domain resolution order" msgstr "Порядок разрешения доменов" @@ -21107,418 +25712,190 @@ msgstr "" "Разделённый двоеточиями список доменов, которые используются для обработки " "кратких имён" -msgid "IPA servers configured as domain name server" -msgstr "IPA-серверы, настроенные в качестве сервера доменных имен" - -msgid "Hidden IPA DNS servers" -msgstr "Скрытые DNS-серверы IPA" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "Скрытыие IPA-серверы, настроенные в качестве сервера доменных имен" - -msgid "DNSec key master" -msgstr "Мастер ключей DNSec" - -msgid "Empty domain is not allowed" -msgstr "Использование пустого домена запрещено" +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "Добавлено представление ID \"%(value)s\"" #, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "Недопустимое имя домена \"%(domain)s\": %(e)s" +msgid "Deleted ID View \"%(value)s\"" +msgstr "Удалено представление ID \"%(value)s\"" #, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "На сервере нет сведений о домене \"%(domain)s\"" +msgid "Modified an ID View \"%(value)s\"" +msgstr "Изменено представление ID \"%(value)s\"" #, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "Отключённый домен \"%(domain)s\" нельзя использовать" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "установлено соответствие %(count)d представления ID" +msgstr[1] "установлено соответствие %(count)d представлений ID" +msgstr[2] "установлено соответствие %(count)d представлений ID" -msgid "The group doesn't exist" -msgstr "Группа не существует" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "атрибут \"%s\" нельзя использовать" - -msgid "May not be empty" -msgstr "Не может быть пустым" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "Атрибут %(obj)s по умолчанию, %(attr)s, не будет разрешён!" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "Ожидается список пользователей SELinux, с разделителем $" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgid "Default Trust View cannot be applied on hosts" msgstr "" -"Запись пользователя SELinux \"%(user)s\" не является корректной: %(error)s" +"Представление отношений доверия по умолчанию невозможно применить к узлам" -msgid "SELinux user map default user not in order list" -msgstr "" -"Пользователя списка соответствия пользователей SELinux по умолчанию нет в " -"порядковом списке" +msgid "not found" +msgstr "не найдено" #, fuzzy -#| msgid "" -#| "\n" -#| "Groups of users\n" -#| "\n" -#| "Manage groups of users. By default, new groups are POSIX groups. You\n" -#| "can add the --nonposix option to the group-add command to mark a new " -#| "group\n" -#| "as non-POSIX. You can use the --posix argument with the group-mod " -#| "command\n" -#| "to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -#| "converted to non-POSIX groups.\n" -#| "\n" -#| "Every group must have a description.\n" -#| "\n" -#| "POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -#| "supported but can have an impact on your file permissions. It is not " -#| "necessary\n" -#| "to supply a GID when creating a group. IPA will generate one " -#| "automatically\n" -#| "if it is not provided.\n" -#| "\n" -#| "EXAMPLES:\n" -#| "\n" -#| " Add a new group:\n" -#| " ipa group-add --desc='local administrators' localadmins\n" -#| "\n" -#| " Add a new non-POSIX group:\n" -#| " ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -#| "\n" -#| " Convert a non-POSIX group to posix:\n" -#| " ipa group-mod --posix remoteadmins\n" -#| "\n" -#| " Add a new POSIX group with a specific Group ID number:\n" -#| " ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -#| "\n" -#| " Add a new POSIX group and let IPA assign a Group ID number:\n" -#| " ipa group-add --desc='printer admins' printeradmins\n" -#| "\n" -#| " Remove a group:\n" -#| " ipa group-del unixadmins\n" -#| "\n" -#| " To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -#| " ipa group-add-member --groups=remoteadmins localadmins\n" -#| "\n" -#| " Add multiple users to the \"localadmins\" group:\n" -#| " ipa group-add-member --users=test1 --users=test2 localadmins\n" -#| "\n" -#| " Remove a user from the \"localadmins\" group:\n" -#| " ipa group-remove-member --users=test2 localadmins\n" -#| "\n" -#| " Display information about a named group.\n" -#| " ipa group-show localadmins\n" -#| "\n" -#| "External group membership is designed to allow users from trusted " -#| "domains\n" -#| "to be mapped to local POSIX groups in order to actually use IPA " -#| "resources.\n" -#| "External members should be added to groups that specifically created as\n" -#| "external and non-POSIX. Such group later should be included into one of " -#| "POSIX\n" -#| "groups.\n" -#| "\n" -#| "An external group member is currently a Security Identifier (SID) as " -#| "defined by\n" -#| "the trusted domain. When adding external group members, it is possible " -#| "to\n" -#| "specify them in either SID, or DOM\\name, or name@domain format. IPA will " -#| "attempt\n" -#| "to resolve passed name to SID with the use of Global Catalog of the " -#| "trusted domain.\n" -#| "\n" -#| "Example:\n" -#| "\n" -#| "1. Create group for the trusted domain admins' mapping and their local " -#| "POSIX group:\n" -#| "\n" -#| " ipa group-add --desc=' admins external map' " -#| "ad_admins_external --external\n" -#| " ipa group-add --desc=' admins' ad_admins\n" -#| "\n" -#| "2. Add security identifier of Domain Admins of the to the " -#| "ad_admins_external\n" -#| " group:\n" -#| "\n" -#| " ipa group-add-member ad_admins_external --external 'AD\\Domain " -#| "Admins'\n" -#| "\n" -#| "3. Allow members of ad_admins_external group to be associated with " -#| "ad_admins POSIX group:\n" -#| "\n" -#| " ipa group-add-member ad_admins --groups ad_admins_external\n" -#| "\n" -#| "4. List members of external members of ad_admins_external group to see " -#| "their SIDs:\n" -#| "\n" -#| " ipa group-show ad_admins_external\n" -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +#| msgid "Default Trust View cannot be applied on hosts" +msgid "ID View cannot be applied to IPA master" msgstr "" -"\n" -"Группы пользователей\n" -"\n" -"Управление группами пользователей. По умолчанию все новые группы являются " -"POSIX-группами. Можно добавить параметр --nonposix в команду group-add, " -"чтобы отметить новую группу в качестве не-POSIX-группы. В команде group-mod " -"можно использовать аргумент --posix, чтобы преобразовать не-POSIX-группу в " -"POSIX-группу. POSIX-группы нельзя преобразовать в не-POSIX-группы. \n" -"\n" -"У каждой группы должно быть описание.\n" -"\n" -"У POSIX-групп должен быть идентификатор группы (GID). Изменение GID " -"поддерживается, но может повлиять на разрешения для файлов. При создании " -"группы необязательно предоставлять GID. Если он не будет предоставлен, IPA " -"создаст его автоматически.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Добавить новую не-POSIX-группу:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Преобразовать не-POSIX-группу в posix-группу:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Добавить новую POSIX-группу с определённым ID группы:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Добавить новую POSIX-группу и позволить IPA назначить ID группы:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Удалить группу:\n" -" ipa group-del unixadmins\n" -"\n" -" Чтобы добавить группу \"remoteadmins\" в группу \"localadmins\":\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Добавить нескольких пользователей в группу \"localadmins\":\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Удалить пользователя из группы \"localadmins\":\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Показать сведения об именованной группе:\n" -" ipa group-show localadmins\n" -"\n" -"Участие внешних групп создано для того, чтобы сделать возможной привязку " -"пользователей из доверенных доменов к локальным POSIX-группам с целью " -"использования ресурсов IPA. Внешние участники должны быть добавлены в " -"группы, которые специально созданы, как внешние и не-POSIX. Такая группа " -"затем должна быть включена в одну из групп POSIX.\n" -"\n" -"В текущей версии участник внешней группы является идентификатором " -"безопасности (Security Identifier или SID), определённым доверенным доменом. " -"Добавление участников внешней группы можно выполнить в формате SID, DOM\\имя " -"или имя@домен. IPA попытается определить SID по переданному имени путём " -"использования общего каталога доверенного домена.\n" -"\n" -"Пример:\n" -"\n" -"1. Создать группу для привязки администраторов (admins) доверенного домена и " -"их локальную POSIX-группу:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Добавить идентификатор безопасности Domain Admins домена " -"группе ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Вывести список внешних участников группы ad_admins_external, чтобы " -"определить их SID:\n" -"\n" -" ipa group-show ad_admins_external\n" +"Представление отношений доверия по умолчанию невозможно применить к узлам" -msgid "groups" -msgstr "группы" +msgid "ID View already applied" +msgstr "Представление ID уже применено" -msgid "User Group" -msgstr "Группа пользователей" +msgid "value" +msgstr "значение" #, python-format -msgid "Added group \"%(value)s\"" -msgstr "Добавлена группа \"%(value)s\"" - -msgid "gid cannot be set for external group" -msgstr "невозможно указать gid для внешней группы" +msgid "ID View applied to %i host." +msgstr "Представление ID применено к узлу: %i." #, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Удалена группа \"%(value)s\"" - -msgid "privileged group" -msgstr "привилегированная группа" +msgid "ID View applied to %i hosts." +msgstr "Представление ID применено к узлам: %i." #, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Изменена группа \"%(value)s\"" +msgid "ID View cleared from %i host." +msgstr "Представление ID очищено из %i узла." #, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "установлено соответствие %(count)d группы" -msgstr[1] "установлено соответствие %(count)d групп" -msgstr[2] "установлено соответствие %(count)d групп" +msgid "ID View cleared from %i hosts." +msgstr "Представление ID очищено из %i узлов." msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" -"Невозможно выполнить проверку внешнего участника без установленной поддержки " -"Samba 4. Убедитесь, что на сервере установлен субпакет IPA server-trust-ad" +"Вы пытаетесь сослаться на личную группу, которую запрещено переопределять. " +"Попробуйте переопределить атрибут GID соответствующего пользователя." + +msgid "IPA object" +msgstr "Объект IPA" msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" msgstr "" -"Без настройки собственного домена нельзя выполнять операцию присоединения. " -"Убедитесь, что на IPA-сервере запущена команда ipa-adtrust-install" +"невозможно переопределить системные объекты IPA (например, системные группы, " +"личные группы пользователей)" #, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Отсоединена группа \"%(value)s\" от пользователя \"%(value)s\"" +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "Не удалось определить привязку \"%(anchor)s\"." -msgid "not allowed to modify user entries" -msgstr "запрещено изменять записи пользователей" +msgid "Default Trust View cannot contain IPA users" +msgstr "" +"Представление отношений доверия по умолчанию не может содержать " +"пользователей IPA" -msgid "not allowed to modify group entries" -msgstr "запрещено изменять записи групп" +msgid "Add a new ID override." +msgstr "Добавить новое переопределение ID." -msgid "Not a managed group" -msgstr "Не является управляемой группой" +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "Добавлено переопределение ID \"%(value)s\"" -#, fuzzy -#| msgid "Add users that can manage this token." -msgid "Add users that can manage members of this group." -msgstr "Добавить пользователей, которые могут управлять этим токеном." +msgid "Delete an ID override." +msgstr "Удалить переопределение ID." -#, fuzzy -#| msgid "Remove users that can manage this token." -msgid "Remove users that can manage members of this group." -msgstr "Удалить пользователей, которые могут управлять этим токеном." +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "Удалено переопределение ID \"%(value)s\"" + +msgid "Modify an ID override." +msgstr "Изменить переопределение ID." + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "Изменено переопределение ID \"%(value)s\"" + +msgid "ID override" +msgstr "Переопределение ID" + +msgid "ID overrides cannot be renamed" +msgstr "Невозможно переименовать переопределения ID" + +msgid "Search for an ID override." +msgstr "Поиск переопределения ID." + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "установлено соответствие %(count)d переопределения ID" +msgstr[1] "установлено соответствие %(count)d переопределений ID" +msgstr[2] "установлено соответствие %(count)d переопределений ID" + +msgid "Display information about an ID override." +msgstr "Показать сведения о переопределении ID." + +msgid "User ID override" +msgstr "Переопределение ID пользователя" + +msgid "User ID overrides" +msgstr "Переопределения ID пользователя" + +msgid "Group ID override" +msgstr "Переопределение ID группы" + +msgid "Group ID overrides" +msgstr "Переопределения ID группы" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "Добавить один или несколько сертификатов в запись idoverrideuser." + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Добавлены сертификаты в запись idoverrideuser \"%(value)s\"" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "Удалить один или несколько сертификатов из записи idoverrideuser." + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "Удалены сертификаты из записи idoverrideuser \"%(value)s\"" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "Добавлено переопределение ID пользователя \"%(value)s\"" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Удалено переопределение ID пользователя \"%(value)s\"" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Изменено переопределение ID пользователя \"%(value)s\"" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "установлено соответствие %(count)d переопределения ID пользователя" +msgstr[1] "установлено соответствие %(count)d переопределений ID пользователя" +msgstr[2] "установлено соответствие %(count)d переопределений ID пользователя" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "Добавлено переопределение ID группы \"%(value)s\"" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Удалено переопределение ID группы \"%(value)s\"" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "Изменено переопределение ID группы \"%(value)s\"" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "установлено соответствие %(count)d переопределения ID группы" +msgstr[1] "установлено соответствие %(count)d переопределений ID группы" +msgstr[2] "установлено соответствие %(count)d переопределений ID группы" msgid "" "\n" @@ -21815,1606 +26192,36 @@ msgstr[0] "установлено соответствие %(count)d разре msgstr[1] "установлено соответствие %(count)d разрешений" msgstr[2] "установлено соответствие %(count)d разрешений" -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"Токены OTP\n" +msgid "delegation" +msgstr "делегирование" -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" -"\n" -"Управление токенами OTP.\n" +msgid "delegations" +msgstr "делегирования" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" -"\n" -"В IPA реализована поддержка использования токенов OTP для многофакторной " -"аутентификации. Этот код позволяет управлять токенами OTP.\n" +msgid "Delegations" +msgstr "Делегирования" -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" -"\n" -" Добавить новый токен:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Проверить токен:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" -"\n" -" Изменить поставщика:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Удалить токен:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" - -msgid "OTP token" -msgstr "токен OTP" - -msgid "OTP tokens" -msgstr "токены OTP" - -msgid "OTP Tokens" -msgstr "Токены OTP" - -msgid "OTP Token" -msgstr "Токен OTP" - -msgid "URI" -msgstr "Универсальный код ресурса (URI)" +msgid "Delegation" +msgstr "Делегирование" #, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Добавлен токен OTP \"%(value)s\"" - -msgid "cannot be empty" -msgstr "не может быть пустым" +msgid "Added delegation \"%(value)s\"" +msgstr "Добавлено делегирование \"%(value)s\"" #, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Удалён токен OTP \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" +msgstr "Удалено делегирование \"%(value)s\"" #, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Изменён токен OTP \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" +msgstr "Изменено делегирование \"%(value)s\"" #, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "установлено соответствие %(count)d токена OTP" -msgstr[1] "установлено соответствие %(count)d токенов OTP" -msgstr[2] "установлено соответствие %(count)d токенов OTP" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" -"\n" -"Правила Sudo\n" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" -"\n" -"Sudo (su \"do\") позволяет системному администратору делегировать " -"полномочия, чтобы дать определённым пользователям (или группам " -"пользователей) возможность выполнять некоторые (или все) команды от имени " -"пользователя \"root\" или другого пользователя, вместе с тем предоставляя " -"журнал аудита команд и их аргументов.\n" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" -"\n" -"IPA предоставляет возможности настройки различных аспектов Sudo:\n" -" Users: пользователь (пользователи) или группа (группы), которые могут " -"вызывать Sudo.\n" -" Hosts: узел (узлы) или группа (группы) узлов, пользователи которых могут " -"вызывать Sudo.\n" -" Allow Command: конкретная команда (команды), которые разрешены для " -"выполнения с помощью Sudo. \n" -" Deny Command: конкретная команда (команды), которые запрещены для " -"выполнения с помощью Sudo.\n" -" RunAsUser: пользователь (пользователи) или группа (группы) пользователей, " -"от имени которых Sudo будет выполнять команды.\n" -" RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " -"команды.\n" -" Options: различные параметры sudoers (участники Sudo), которые могут " -"изменить поведение Sudo.\n" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" -"\n" -"Правилу Sudo можно добавить порядок, который будет руководить порядком " -"обработки записей (если такой порядок предусмотрен на клиентской стороне). " -"Порядок определяется числовым индексом (целое число), который не должен " -"повторяться.\n" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" -"\n" -"IPA предусматривает специальную привязку DN (binddn) для использования с " -"Sudo:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" -"\n" -"Чтобы включить binddn, выполните следующую команду для установки пароля:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" -"\n" -" Создать новое правило:\n" -" ipa sudorule-add readfiles\n" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" -"\n" -" Добавить объект команды Sudo и добавить его в правило в качестве " -"разрешённой команды:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" -"\n" -" Добавить узел в правило:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" -"\n" -" Добавить пользователя в правило:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" -"\n" -" Добавить специальное правило Sudo для конфигурации сервера Sudo по " -"умолчанию:\n" -" ipa sudorule-add defaults\n" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" -"\n" -" Указать параметр Sudo по умолчанию:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" -"\n" -" Указать преобразования типа и роли SELinux в правиле:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" - -msgid "this option has been deprecated." -msgstr "этот параметр больше не поддерживается." - -msgid "sudo rules" -msgstr "правила Sudo" - -msgid "Sudo Rules" -msgstr "Правила Sudo" - -msgid "Sudo Rule" -msgstr "Правило Sudo" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" -"порядковый номер должен иметь уникальное значение (%(order)d уже " -"использовано для %(rule)s)" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Добавлено правило Sudo \"%(value)s\"" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Удалено правило Sudo \"%(value)s\"" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Изменено правило Sudo \"%(value)s\"" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" -"для категории %(type)s нельзя установить значение \"all\", когда имеются " -"разрешённые %(objects)s" - -msgid "users" -msgstr "пользователи" - -msgid "command" -msgstr "команда" - -msgid "commands" -msgstr "команды" - -msgid "runAs user" -msgstr "пользователь запуска от имени" - -msgid "runAs users" -msgstr "пользователи запуска от имени" - -msgid "group runAs" -msgstr "группа запуска от имени" - -msgid "runAs groups" -msgstr "группы запуска от имени" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "установлено соответствие %(count)d правила Sudo" -msgstr[1] "установлено соответствие %(count)d правил Sudo" -msgstr[2] "установлено соответствие %(count)d правил Sudo" - -msgid "commands cannot be added when command category='all'" -msgstr "невозможно добавить команды, когда категория команд=\"all\"" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" -"невозможно добавить пользователей, когда категория запуска от имени " -"пользователей или запуска от имени групп=\"all\"" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" -"Нельзя указывать \"%(name)s\" в качестве имени пользователя в записи " -"RunAsUser" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "Имя группы \"%(name)s\" не принимается RunAsUser" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "Имя группы \"%(name)s\" не принимается RunAsGroup" - -msgid "commands for controlling sudo configuration" -msgstr "команды управления конфигурацией Sudo" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" -"\n" -"Команды Sudo \n" -"\n" -"Команды, которые используются в качестве строительных блоков для Sudo\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Создать новую команду\n" -" ipa sudocmd-add --desc='Чтение файлов в журнале' /usr/bin/less\n" -"\n" -" Удалить команду\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" - -msgid "sudo command" -msgstr "команда Sudo" - -msgid "sudo commands" -msgstr "команды Sudo" - -msgid "Sudo Commands" -msgstr "Команды Sudo" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Добавлена команда Sudo \"%(value)s\"" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Удалена команда Sudo \"%(value)s\"" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Изменена команда Sudo \"%(value)s\"" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "установлено соответствие %(count)d команды Sudo" -msgstr[1] "установлено соответствие %(count)d команд Sudo" -msgstr[2] "установлено соответствие %(count)d команд Sudo" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" -"\n" -"Группы команд Sudo\n" -"\n" -"Управление группами команд Sudo.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу команд Sudo:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Удалить группу команд Sudo:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Управлять участием в группе команд Sudo, команды:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Управлять участием в группе команд Sudo, команды:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Показать группу команд Sudo:\n" -" ipa sudocmdgroup-show admincmds\n" - -msgid "sudo command group" -msgstr "группа команд Sudo" - -msgid "sudo command groups" -msgstr "группы команд Sudo" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Добавлена группа команд Sudo \"%(value)s\"" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Удалена группа команд Sudo \"%(value)s\"" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Изменена группа команд Sudo \"%(value)s\"" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "установлено соответствие %(count)d группы команд Sudo" -msgstr[1] "установлено соответствие %(count)d групп команд Sudo" -msgstr[2] "установлено соответствие %(count)d групп команд Sudo" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" -"\n" -"Домены области\n" -"\n" -"Управление списком доменов, связанных с областью (realm) IPA.\n" -"\n" -"Этот список используется контроллерами доменов из других областей (realms), " -"у которых установлено отношение доверия с этой областью (realm) IPA. Им " -"необходимы сведения о том, какой запрос следует перенаправить в центр " -"распространения ключей (KDC) этой области (realm) IPA.\n" -"\n" -"При автоматическом управлении: домен автоматически добавляется в список " -"доменов области (realm) при создании новой зоны DNS под управлением IPA. То " -"же самое относится и к удалению.\n" -"\n" -"При внешнем управлении DNS: домены, которые не управляются в DNS IPA-" -"сервера, необходимо вручную добавить в список с помощью команды ipa " -"realmdomains-mod.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Показать текущий список доменов области:\n" -" ipa realmdomains-show\n" -"\n" -" Заменить список доменов области:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Добавить домен в список доменов области:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Удалить домен из списка доменов области:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" - -msgid "Realm domains" -msgstr "Домены области (realm)" - -msgid "Realm Domains" -msgstr "Домены области (realm)" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" -"\n" -" Изменение доменов области (realm).\n" -"\n" -" Проверка DNS: при ручном добавлении домена в список по умолчанию " -"выполняется проверка DNS. Она устанавливает, связан ли домен с областью " -"(realm) IPA, проверяя, есть ли у домена запись TXT _kerberos, которая " -"содержит имя области (realm) IPA. Эту проверку можно пропустить, указав " -"параметр --force.\n" -"\n" -" Удаление: при удалении домена области (realm), у которого имеется " -"соответствующая находящаяся под управлением IPA зона DNS, также " -"автоматически удаляется и соответствующая запись TXT _kerberos в этой зоне. " -"Другие записи в этой зоне и сама зона остаются.\n" -" " - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" -"Запись зоны DNS для каждого realmdomain должна содержать записи SOA или NS. " -"Для %s такие записи не найдены." - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "Следующие домены не принадлежат к этой области (realm): %(domains)s" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" -"Не удалось определить область (realm) следующих доменов: %(domains)s. Если " -"эти домены принадлежат к этой области, создайте на каждом из них запись TXT " -"_kerberos, которая содержит \"%(realm)s\"." - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" -"Параметр --domain невозможно использовать одновременно с параметром --add-" -"domain или --del-domain. Используйте параметр --domain, чтобы явно указать " -"весь список доменов области (realm). Используйте параметр --add-domain/del-" -"domain, чтобы добавить или удалить отдельные домены." - -msgid "IPA server domain cannot be omitted" -msgstr "Домен IPA-сервера не может быть пропущен" - -msgid "IPA server domain cannot be deleted" -msgstr "Домен IPA-сервера не может быть удалён" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" -"\n" -"Возврат сведений о текущем прошедшем аутентификацию профиле \n" -"\n" -"Команда определения профиля возвращает сведения о том, как получить больше " -"данных о профиле, прошедшем аутентификацию для этого запроса. Данные " -"включают:\n" -"\n" -" * тип объекта\n" -" * команду для получения сведений об объекте\n" -" * аргументы и параметры, которые следует передать команде\n" -"\n" -"Сведения возвращаются в виде словаря. Ниже в качестве примера приведён вывод " -"в формате \"ключ: значение\".\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Поиск от имени пользователя IPA:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Поиск от имени пользователя из доверенного домена:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Поиск от имени узла:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Поиск от имени службы Kerberos:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" - -msgid "Describe currently authenticated identity." -msgstr "Показать описание текущего прошедшего аутентификацию профиля." - -msgid "Object class name" -msgstr "Имя класса объектов." - -msgid "Function to get details" -msgstr "Функция для получения сведений" - -msgid "Arguments to details function" -msgstr "Аргументы функции для получения сведений" - -msgid "Cannot query Directory Manager with API" -msgstr "" -"Не удалось отправить запрос средству управления каталогом (Directory " -"Manager) с помощью программного интерфейса" - -msgid "kerberos ticket policy settings" -msgstr "параметры политики билетов Kerberos" - -msgid "Kerberos Ticket Policy" -msgstr "Политика билетов Kerberos" - -#, fuzzy -#| msgid "Max life" -msgid "OTP max life" -msgstr "Максимальный срок жизни" - -#, fuzzy -#| msgid "Maximum ticket life (seconds)" -msgid "OTP token maximum ticket life (seconds)" -msgstr "Максимальный срок жизни билета (в секундах)" - -#, fuzzy -#| msgid "Max renew" -msgid "OTP max renew" -msgstr "Максимальный срок для обновления" - -#, fuzzy -#| msgid "Maximum renewable age (seconds)" -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "Максимальный срок для обновления (в секундах)" - -#, fuzzy -#| msgid "Max life" -msgid "RADIUS max life" -msgstr "Максимальный срок жизни" - -#, fuzzy -#| msgid "Maximum ticket life (seconds)" -msgid "RADIUS maximum ticket life (seconds)" -msgstr "Максимальный срок жизни билета (в секундах)" - -#, fuzzy -#| msgid "RADIUS proxy server name" -msgid "RADIUS max renew" -msgstr "Имя прокси-сервера RADIUS" - -#, fuzzy -#| msgid "Maximum renewable age (seconds)" -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "Максимальный срок для обновления (в секундах)" - -#, fuzzy -#| msgid "Max life" -msgid "PKINIT max life" -msgstr "Максимальный срок жизни" - -#, fuzzy -#| msgid "Maximum ticket life (seconds)" -msgid "PKINIT maximum ticket life (seconds)" -msgstr "Максимальный срок жизни билета (в секундах)" - -#, fuzzy -#| msgid "Max renew" -msgid "PKINIT max renew" -msgstr "Максимальный срок для обновления" - -#, fuzzy -#| msgid "Maximum renewable age (seconds)" -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "Максимальный срок для обновления (в секундах)" - -msgid "Hardened max life" -msgstr "" - -#, fuzzy -#| msgid "Maximum ticket life (seconds)" -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "Максимальный срок жизни билета (в секундах)" - -msgid "Hardened max renew" -msgstr "" - -#, fuzzy -#| msgid "Maximum renewable age (seconds)" -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "Максимальный срок для обновления (в секундах)" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "Не удалось прочитать политику билетов для %s" - -msgid "Default ticket policy could not be read" -msgstr "Не удалось прочитать политику билетов по умолчанию" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" -"Не удалось прочитать фильтр происхождения (originfilter) определения личной " -"группы пользователя (UPG Definition). Проверьте ваши разрешения." - -msgid "" -"\n" -"IPA locations\n" -msgstr "" -"\n" -"расположения IPA\n" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" -"\n" -"Управлять расположениями DNS\n" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" -"\n" -" Найти все расположения:\n" -" ipa location-find\n" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" -"\n" -" Показать определённое расположение:\n" -" ipa location-show location\n" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" -"\n" -" Добавить расположение:\n" -" ipa location-add location --description 'My location'\n" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" -"\n" -" Удалить расположение:\n" -" ipa location-del location\n" - -msgid "location" -msgstr "расположение" - -msgid "locations" -msgstr "расположения" - -msgid "IPA Locations" -msgstr "Расположения IPA" - -msgid "IPA Location" -msgstr "Расположение IPA" - -msgid "Location name" -msgstr "Имя расположения" - -msgid "IPA location name" -msgstr "Имя расположения IPA" - -msgid "IPA Location description" -msgstr "Описание расположения IPA" - -msgid "Servers" -msgstr "Серверы" - -msgid "Servers that belongs to the IPA location" -msgstr "Серверы, которые принадлежат к записи расположения IPA" - -msgid "Advertised by servers" -msgstr "Сообщено серверами" - -msgid "List of servers which advertise the given location" -msgstr "Список серверов, которые сообщают указанное расположение" - -msgid "Add a new IPA location." -msgstr "Добавить новую запись расположения IPA." - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Добавлена запись расположения IPA \"%(value)s\"" - -msgid "Delete an IPA location." -msgstr "Удалить запись расположения IPA." - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Удалена запись расположения IPA \"%(value)s\"" - -msgid "IPA Server" -msgstr "IPA-сервер" - -msgid "Modify information about an IPA location." -msgstr "Изменить сведения о расположении IPA." - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "Изменена запись расположения IPA \"%(value)s\"" - -msgid "Search for IPA locations." -msgstr "Поиск расположений IPA." - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "установлено соответствие %(count)d расположения IPA" -msgstr[1] "установлено соответствие %(count)d расположений IPA" -msgstr[2] "установлено соответствие %(count)d расположений IPA" - -msgid "Display information about an IPA location." -msgstr "Показать сведения о расположении IPA." - -msgid "Servers in location" -msgstr "Серверы в расположении" - -msgid "" -"\n" -"API Schema\n" -msgstr "" -"\n" -"Схема API\n" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" -"\n" -"Предоставляет возможности самоанализа API.\n" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" -"\n" -" Показать сведения о user-find:\n" -" ipa command-show user-find\n" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" -"\n" -" Найти параметры user-find:\n" -" ipa param-find user-find\n" - -msgid "Name" -msgstr "Имя" - -msgid "Documentation" -msgstr "Документация" - -msgid "Exclude from" -msgstr "Исключить из" - -msgid "Include in" -msgstr "Включить в" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "Результаты должны содержать только атрибут главного ключа (\"%s\")" - -msgid "Help topic" -msgstr "Раздел справки" - -msgid "Version" -msgstr "Версия" - -msgid "Parameters" -msgstr "Параметры" - -msgid "Method of" -msgstr "Метод" - -msgid "Method name" -msgstr "Имя метода" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s: %(oname)s не найден" - -msgid "Display information about a command." -msgstr "Показать сведения о команде." - -msgid "Search for commands." -msgstr "Поиск команд." - -msgid "Return command defaults" -msgstr "Вернуть значения команд по умолчанию" - -msgid "Display information about a class." -msgstr "Показать сведения о классе." - -msgid "Search for classes." -msgstr "Поиск классов." - -msgid "Display information about a help topic." -msgstr "Показать сведения о разделе справки." - -msgid "Search for help topics." -msgstr "Поиск разделов справки." - -msgid "Required" -msgstr "Обязательно" - -msgid "Multi-value" -msgstr "Многозначный" - -msgid "Always ask" -msgstr "Всегда спрашивать" - -msgid "CLI metavar" -msgstr "Метапеременная CLI" - -msgid "CLI name" -msgstr "Имя CLI" - -msgid "Confirm (password)" -msgstr "Подтвердить (пароль)" - -msgid "Default" -msgstr "По умолчанию" - -msgid "Default from" -msgstr "По умолчанию с" - -msgid "Label" -msgstr "Метка" - -msgid "Convert on server" -msgstr "Преобразовывать на сервере" - -msgid "Option group" -msgstr "Группа параметров" - -msgid "Sensitive" -msgstr "Учитывать" - -msgid "Positional argument" -msgstr "Позиционный аргумент" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(metaobject)s: %(oname)s не найден" - -msgid "Display information about a command parameter." -msgstr "Показать сведения о параметре команды." - -msgid "Search command parameters." -msgstr "Поиск параметров команды." - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(command_name)s: %(oname)s не найден" - -msgid "Display information about a command output." -msgstr "Показать сведения о выводе команды." - -msgid "Search for command outputs." -msgstr "Поиск выводов команд." - -msgid "Store and provide schema for commands and topics" -msgstr "Хранить и предоставлять схему для команд и тем" - -msgid "Fingerprint of schema cached by client" -msgstr "Отпечаток схемы, кэшированный клиентом" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" -"=======\n" -"ПРЕДУПРЕЖДЕНИЕ:\n" -"\n" -"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " -"диапазонов, настроенных для локального домена. В текущей версии сам " -"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " -"диапазонов, установленных с помощью этого семейства команд.\n" -"\n" -"Для нового локального диапазона следует вручную изменить настройки " -"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " -"dnaNextRange \"cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " -"образом, чтобы он соответствовал новому диапазону.\n" -"=======\n" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "Диапазоны идентификаторов" - -msgid "ID Range" -msgstr "Диапазон идентификаторов" - -msgid "local domain range" -msgstr "диапазон локальных доменов" - -msgid "Active Directory domain range" -msgstr "диапазон доменов Active Directory" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "Диапазон доверия Active Directory с атрибутами POSIX" - -msgid "ID range type, one of allowed values" -msgstr "Тип диапазона идентификаторов, одно из разрешённых значений" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" -"изменение диапазона, при котором появляются объекты с идентификаторами за " -"пределами указанного диапазона, запрещено " - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"Невозможно выполнить проверку SID без установленной поддержки Samba 4. " -"Убедитесь, что на сервере установлен субпакет IPA server-trust-ad" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" -"Отношения доверия между областями (realm) не настроены. Убедитесь, что на " -"IPA-сервере запущена команда ipa-adtrust-install" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" -"Не удалось распознать SID в качестве допустимого идентификатора безопасности " -"для доверенного домена" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" -"\n" -"Добавление нового диапазона идентификаторов.\n" -"\n" -" Для добавления нового диапазона идентификаторов всегда необходимо " -"указывать\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Кроме того,\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" могут указываться для нового диапазона идентификаторов для локального " -"домена, в то время как\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" должны быть указаны для добавления нового диапазона для доверенного " -"домена AD.\n" -"\n" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "Добавлен диапазон идентификаторов \"%(value)s\"" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "Невозможно одновременно использовать параметры dom-sid и dom-name" - -msgid "Specified trusted domain name could not be found." -msgstr "Указанное имя доверенного домена не найдено." - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" -"Параметры dom-sid/dom-name и rid-base необходимо использовать одновременно" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" -"Если типом диапазона IPA является ipa-ad-trust-posix, параметр rid-base " -"использовать нельзя" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" -"Если указан SID доверенного домена, тип диапазона IPA должен быть ipa-ad-" -"trust или ipa-ad-trust-posix" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" -"Невозможно одновременно использовать параметры dom-sid/dom-name и secondary-" -"rid-base" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" -"Если не указан SID доверенного домена, тип диапазона IPA не должен быть ipa-" -"ad-trust или ipa-ad-trust-posix" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" -"Параметры secondary-rid-base и rid-base необходимо использовать одновременно" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "Основной диапазон RID и вторичный диапазон RID не могут пересекаться" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" -"Необходимо указать оба параметра, rid-base и secondary-rid-base, так как " -"команда ipa-adtrust-install уже запущена." - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "Удалён диапазон идентификаторов \"%(value)s\"" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "установлено соответствие %(count)d диапазона" -msgstr[1] "установлено соответствие %(count)d диапазонов" -msgstr[2] "установлено соответствие %(count)d диапазонов" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" -"Изменить диапазон идентификаторов.\n" -"\n" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "Изменён диапазон идентификаторов \"%(value)s\"" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" -"Эту команду нельзя использовать для изменения выделения идентификаторов для " -"локального домена IPA. Чтобы получить дополнительные сведения, выполните " -"команду `ipa help idrange`" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" -"Не удалось найти SID указанного доверенного домена. Укажите SID в явном виде " -"с помощью параметра dom-sid." - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" -"Невозможно одновременно использовать параметры dom-sid и secondary-rid-base" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "Параметры dom-sid и rid-base необходимо использовать одновременно" - -msgid "self service permission" -msgstr "разрешение самообслуживания" - -msgid "self service permissions" -msgstr "разрешения самообслуживания" - -msgid "Self Service Permissions" -msgstr "Разрешения самообслуживания" - -msgid "Self Service Permission" -msgstr "Разрешение самообслуживания" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Добавлено самообслуживание \"%(value)s\"" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Удалено самообслуживание \"%(value)s\"" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Изменено самообслуживание \"%(value)s\"" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "установлено соответствие %(count)d самообслуживания" -msgstr[1] "установлено соответствие %(count)d самообслуживаний" -msgstr[2] "установлено соответствие %(count)d самообслуживаний" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" -"\n" -"Роли IPA-сервера\n" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" -"\n" -"Получить состояние ролей (DNS-сервер, CA и так далее), предоставленное " -"главными IPA-серверами.\n" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" -"\n" -"Роль может находиться в одном из следующих состояний: включена, настроена " -"или отсутствует.\n" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" -"\n" -" Показать состояние роли \"DNS server\" на сервере:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" -"\n" -" Показать состояние всех ролей, которые содержат \"AD\", на сервере:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" -"\n" -" Показать состояние всех настроенных ролей на сервере:\n" -" ipa server-role-find ipa.example.com\n" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" -"\n" -" Показать неявную роль главного IPA-сервера:\n" -" ipa server-role-find --include-master\n" - -msgid "server role" -msgstr "роль сервера" - -msgid "server roles" -msgstr "роли сервера" - -msgid "IPA Server Roles" -msgstr "Роли IPA-сервера" - -msgid "IPA Server Role" -msgstr "Роль IPA-сервера" - -msgid "IPA server role name" -msgstr "Имя роли IPA-сервера" - -msgid "Role status" -msgstr "Состояние роли" - -msgid "Status of the role" -msgstr "Состояние роли" - -msgid "Show role status on a server" -msgstr "Показать состояние роли на сервере." - -msgid "Find a server role on a server(s)" -msgstr "Поиск роли сервера на сервере (серверах)." - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "установлено соответствие %(count)s роли сервера" -msgstr[1] "установлено соответствие %(count)s ролей сервера" -msgstr[2] "установлено соответствие %(count)s ролей сервера" - -msgid "Include IPA master entries" -msgstr "Включить записи главных IPA-cерверов" - -msgid "roles" -msgstr "роли" - -msgid "IPA role name" -msgstr "Имя роли IPA" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "установлено соответствие %(count)d делегирования" +msgstr[1] "установлено соответствие %(count)d делегирований" +msgstr[2] "установлено соответствие %(count)d делегирований" msgid "HBAC rule and local members cannot both be set" msgstr "Невозможно одновременно указать правило HBAC и локальных участников" @@ -23486,1252 +26293,217 @@ msgstr "Включён список пользователей SELinux \"%(value msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "Отключён список пользователей SELinux \"%(value)s\"" -#, python-brace-format -msgid "{role}: role not found" -msgstr "{role}: роль не найдена" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "{attr}: атрибут не найден" - -msgid "pyhbac is not installed." -msgstr "Пакет pyhbac не установлен." +msgid "" +"\n" +"IPA servers\n" +msgstr "" +"\n" +"IPA-серверы\n" msgid "" "\n" -"IPA certificate operations\n" +"Get information about installed IPA servers.\n" msgstr "" "\n" -"Операции с сертификатами IPA\n" +"Получить сведения об установленных IPA-серверах.\n" msgid "" "\n" -"Implements a set of commands for managing server SSL certificates.\n" +" Find all servers:\n" +" ipa server-find\n" msgstr "" "\n" -"Применение набора команд для управления сертификатами SSL-серверов.\n" +" Найти все серверы:\n" +" ipa server-find\n" msgid "" "\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" msgstr "" "\n" -"Запросы сертификатов существуют в виде запроса подписи сертификата " -"(Certificate Signing Request, CSR) в формате PEM.\n" +" Показать определённый сервер:\n" +" ipa server-show ipa.example.com\n" + +msgid "server" +msgstr "сервер" + +msgid "servers" +msgstr "серверы" + +msgid "IPA Servers" +msgstr "IPA-серверы" + +msgid "Server location" +msgstr "Расположение сервера" + +msgid "Service weight" +msgstr "Вес служб" + +msgid "Weight for server services" +msgstr "Вес служб сервера" + +msgid "Service relative weight" +msgstr "Относительный вес служб" + +msgid "Relative weight for server services (counts per location)" +msgstr "" +"Относительный вес служб сервера (вычисляется для отдельного расположения)" + +msgid "Enabled server roles" +msgstr "Включены роли сервера" + +msgid "List of enabled roles" +msgstr "Список включённых ролей" + +msgid "Modify information about an IPA server." +msgstr "Изменить сведения о IPA-сервере." + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "Изменена запись IPA-сервера \"%(value)s\"" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "установлено соответствие %(count)d IPA-сервера" +msgstr[1] "установлено соответствие %(count)d IPA-серверов" +msgstr[2] "установлено соответствие %(count)d IPA-серверов" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Удалён IPA-сервер \"%(value)s\"" + +msgid "Ignore topology errors" +msgstr "Игнорировать ошибки топологии" + +msgid "Ignore topology connectivity problems after removal" +msgstr "Игнорировать ошибки топологии подключений после удаления" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" +"Игнорировать проверку того, является ли удаляемый сервер последним сервером " +"CA или DNS" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" +"Пропустить проверку того, удаляется ли последний главный сервер CA или DNS-" +"сервер" + +msgid "Force server removal" +msgstr "Принудительное удаление сервера" + +msgid "Force server removal even if it does not exist" +msgstr "Принудительное удаление сервера, даже если он не существует" msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." msgstr "" -"\n" -"Система выдачи сертификатов Dogtag Certificate System использует только " -"значение CN в CSR и принудительно устанавливает остальные параметры субъекта " -"в соответствии со значениями, настроенными на сервере.\n" +"Реплика является активным мастером ключей DNSSEC. Удаление может привести к " +"неработоспособности вашей системы DNS. Сначала следует отключить или " +"заменить мастер ключей DNSSEC." + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" +"Удаление этой записи сервера оставит вашу установленную систему без DNS." msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." msgstr "" -"\n" -"Сертификат хранится в учётной записи службы, а учётной записи службы " -"требуется узел.\n" +"Удаление этой записи сервера запрещено, так как это оставило бы вашу " +"установленную систему без KRA." msgid "" -"\n" -"In order to request a certificate:\n" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." msgstr "" -"\n" -"Чтобы запросить сертификат:\n" +"Удаление этой записи сервера запрещено, так как это оставило бы вашу " +"установленную систему без CA." -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" -"\n" -"* Должен существовать узел\n" -"* Должна существовать служба (либо следует использовать параметр --add для " -"её автоматического добавления)\n" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" -"\n" -"ПОИСК:\n" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" -"\n" -"Сертификаты можно искать по субъекту, серийному номеру, причине отзыва, " -"датам действия и дате выдачи.\n" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" -"\n" -"Если поиск выполняется по дате _с, используется сравнение >=, а если " -"выполняется поиск _до — сравнение <=. Сочетание обоих видов поиска приводит " -"к поиску с логической операцией И.\n" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" -"\n" -"Даты обрабатываются как даты по Гринвичскому времени, в соответствии с " -"датами, определёнными в в сертификатах.\n" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" -"\n" -"Формат даты: ГГГГ-мм-дд.\n" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" -"\n" -"Запросить новый сертификат и добавить учётную запись:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" -"\n" -"Получить существующий сертификат:\n" -" ipa cert-show 1032\n" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" -"\n" -"Отозвать сертификат (подробные сведения о причинах доступны в RFC 5280):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" -"\n" -"Удалить сертификат из списка отзыва:\n" -" ipa cert-remove-hold 1032\n" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" -"\n" -"Проверить состояние запроса подписи:\n" -" ipa cert-status 10\n" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" -"\n" -"Поиск сертификатов по имени узла:\n" -" ipa cert-find --subject=ipaserver.example.com\n" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" -"\n" -"Поиск отозванных сертификатов по причине отзыва:\n" -" ipa cert-find --revocation-reason=5\n" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" -"\n" -"Поиск сертификатов по дате выдачи:\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" -"\n" -" Поиск сертификатов, владельцем которых является определённый пользователь:\n" -" ipa cert-find --user=user\n" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" -"\n" -" Проверить сертификат:\n" -" ipa cert-find --file=cert.pem --all\n" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" -"\n" -" Проверить, что владельцем сертификата является определённый пользователь:\n" -" ipa cert-find --file=cert.pem --user=user\n" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" -"\n" -"В текущей версии IPA немедленно выполняет (или отклоняет) все запросы " -"сертификатов, следовательно, данные о состоянии запроса не являются " -"полезными. Эти данные могут понадобиться в следующих версиях или в случае, " -"если CA не сразу выдаёт сертификат.\n" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" -"\n" -"Поддерживаются следующие причины отзыва:\n" - -msgid " * 0 - unspecified\n" -msgstr " * 0 - не указана\n" - -msgid " * 1 - keyCompromise\n" -msgstr " * 1 - keyCompromise\n" - -msgid " * 2 - cACompromise\n" -msgstr " * 2 - cACompromise\n" - -msgid " * 3 - affiliationChanged\n" -msgstr " * 3 - affiliationChanged\n" - -msgid " * 4 - superseded\n" -msgstr " * 4 - superseded\n" - -msgid " * 5 - cessationOfOperation\n" -msgstr " * 5 - cessationOfOperation\n" - -msgid " * 6 - certificateHold\n" -msgstr " * 6 - certificateHold\n" - -msgid " * 8 - removeFromCRL\n" -msgstr " * 8 - removeFromCRL\n" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr " * 9 - privilegeWithdrawn\n" - -msgid " * 10 - aACompromise\n" -msgstr " * 10 - aACompromise\n" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" -"\n" -"Обратите внимание, что код причины 7 не используется. Подробные сведения в " -"RFC 5280:\n" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" +msgid "Ignoring these warnings and proceeding with removal" +msgstr "Предупреждения игнорируются, процесс удаления продолжается" #, python-format msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" -"Учётной записи \"%(principal)s\" не разрешено использовать службу " -"сертификации \"%(ca)s\" с профилем \"%(profile_id)s\" для выдачи " -"сертификатов." - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "enabledService/configuredService не в записи kdc ipaConfigString" +"Не удалось удалить memberPrincipal %(principal)s из записи s4u2proxy %(dn)s: " +"%(err)s" #, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" -"Узел \"%(hostname)s\" не является активным центром распространения ключей " -"(KDC)" - -msgid "Issuing CA" -msgstr "Выдающий CA" - -msgid "Name of issuing CA" -msgstr "Имя выдающего CA" - -msgid "Base-64 encoded certificate." -msgstr "Base-64 шифрованный сертификат" - -msgid "Certificate chain" -msgstr "Цепочка сертификатов" - -msgid "X.509 certificate chain" -msgstr "Цепочка сертификатов X.509" - -msgid "Subject" -msgstr "Субъект" - -msgid "Subject email address" -msgstr "Адрес электронной почты субъекта" - -msgid "Subject DNS name" -msgstr "DNS-имя субъекта" - -msgid "Subject X.400 address" -msgstr "Адрес X.400 субъекта" - -msgid "Subject directory name" -msgstr "Имя каталога субъекта" - -msgid "Subject EDI Party name" -msgstr "Имя стороны EDI субъекта" - -msgid "Subject URI" -msgstr "Универсальный код ресурса (URI) субъекта" - -msgid "Subject IP Address" -msgstr "IP-адрес субъекта" - -msgid "Subject OID" -msgstr "Идентификатор объекта (OID) субъекта" - -msgid "Subject UPN" -msgstr "Имя участника-пользователя (UPN) субъекта" - -msgid "Subject Kerberos principal name" -msgstr "Имя учётной записи Kerberos субъекта" - -msgid "Subject Other Name" -msgstr "Другое имя субъекта" - -msgid "Issuer" -msgstr "Издатель" - -msgid "Issuer DN" -msgstr "DN издателя" - -msgid "Not Before" -msgstr "Недействителен до" - -msgid "Not After" -msgstr "Недействителен после" - -msgid "Fingerprint (SHA1)" -msgstr "Отпечаток (SHA1)" - -msgid "Fingerprint (SHA256)" -msgstr "Отпечаток (SHA256)" - -msgid "Serial number (hex)" -msgstr "Серийный номер (hex)" - -msgid "Request status" -msgstr "Состояние запроса" - -msgid "Include certificate chain in output" -msgstr "Включить цепочку сертификатов в вывод" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" -"Автоматически добавить учётную запись, если она не существует (только для " -"учётных записей служб)" +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "Не удалось удалить записи имени узла DNA для %(master)s: %(err)s" #, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "сертификаты krbtgt могут использовать только профиль %s" - -msgid "No Common Name was found in subject of request." -msgstr "В субъекте запроса не найдено общее имя (CN)." +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "Не удалось удалить сервер %(master)s из списка серверов: %(err)s" #, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" -"имя узла в субъекте запроса \"%(cn)s\" не соответствует имени или " -"псевдонимам учётной записи \"%(principal)s\"" +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "Не удалось удалить ключи Custodia для %(master)s: %(err)s" #, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" -"имя узла в субъекте запроса \"%(cn)s\" не соответствует имени узла учётной " -"записи \"%(hostname)s\"" - -msgid "DN commonName does not match user's login" -msgstr "В commonName DN не соответствует имени пользователя" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" -"В emailAddress DN не соответствует ни одному адресу электронной почты " -"пользователя" +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "Не удалось удалить учётные записи или ключи сервера: %(err)s" #, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" -"Недостаточно привилегий \"write\" для атрибута \"userCertificate\" записи " -"\"%s\"." +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "Не удалось удалить записи DNS %(hostname)s: %(err)s" + +msgid "You may need to manually remove them from the tree" +msgstr "Возможно, потребуется вручную удалить их из дерева" #, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" -"использование типа альтернативного имени субъекта %s запрещено для учётных " -"записей пользователей" +msgid "Forcing removal of %(hostname)s" +msgstr "Принудительное удаление %(hostname)s" -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" -"Учётная запись службы для альтернативного имени субъекта %s в запросе " -"сертификата не существует" +msgid "Ignoring topology connectivity errors." +msgstr "Игнорирование ошибок топологии подключений." -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" -"Недостаточно привилегий для создания сертификата с альтернативным именем " -"субъекта \"%s\"." +msgid "Server has already been deleted" +msgstr "Сервер уже удалён" -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" -"Учётная запись \"%s\" в альтернативном имени субъекта не соответствует " -"запрошенной учётной записи" +msgid "Agreements deleted" +msgstr "Соглашения удалены" -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" -"RFC822Name не соответствует ни одному адресу электронной почты пользователя" +msgid "Following segments were not deleted:" +msgstr "Следующие сегменты не были удалены:" -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" -"использование типа альтернативного имени субъекта %s запрещено для учётных " -"записей, которые не относятся к пользователям" +msgid "not allowed to perform server connection check" +msgstr "не разрешено выполнение проверки связи с сервером" -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "Использование типа альтернативного имени субъекта %s запрещено" +msgid "Set enabled/hidden state of a server." +msgstr "Установить включённое/скрытое состояние сервера." -#, python-format -msgid "CA '%s' is disabled" -msgstr "CA \"%s\" отключён" - -msgid "'add' option" -msgstr "параметр \"add\"" - -msgid "The principal for this request doesn't exist." -msgstr "Учётная запись для этого запроса не существует." - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "IP-адрес в subjectAltName (%s) недоступен из DNS-имён" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "IP-адрес в subjectAltName (%s) не имеет записи PTR" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "Запись PTR для SAN IP (%s) не соответствует записям A/AAAA" - -msgid "Status" +msgid "State" msgstr "Состояние" -msgid "Revoked" -msgstr "Отозван" - -msgid "Revocation reason" -msgstr "Причина отзыва" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" -"Причина отзыва сертификата (0-10). Введите \"ipa help cert\", чтобы получить " -"сведения о причине отзыва. " +msgid "Server state" +msgstr "Состояние сервера" #, python-format -msgid "Owner %s" -msgstr "Владелец %s" +msgid "Changed server state of \"%(value)s\"." +msgstr "Изменено состояние сервера \"%(value)s\"." + +msgid "Cannot hide CA renewal master." +msgstr "Не удалось скрыть мастер обновления CA." + +msgid "Cannot hide DNSSec key master." +msgstr "Не удалось скрыть мастер ключей DNSSec." #, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" -"Сертификат с серийным номером %(serial)s, выданный CA \"%(ca)s\", не найден" - -msgid "7 is not a valid revocation reason" -msgstr "7 — неверная причина отзыва сертификата" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"certificate\")" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "установлено соответствие %(count)d сертификата" -msgstr[1] "установлено соответствие %(count)d сертификатов" -msgstr[2] "установлено соответствие %(count)d сертификатов" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "Поиск сертификатов, включая те, владельцами которых являются %s" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "Поиск сертификатов, не включая те, владельцами которых являются %s" - -msgid "ID View" -msgstr "Представление ID" - -msgid "system ID View" -msgstr "системное представление ID" - -msgid "ID Views" -msgstr "Представления ID" - -msgid "User object overrides" -msgstr "Приоритет объекта пользователя" - -msgid "Group object overrides" -msgstr "Приоритет объекта группы" - -msgid "Hosts the view applies to" -msgstr "Узлы, к которым применяется представление" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Добавлено представление ID \"%(value)s\"" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "Удалено представление ID \"%(value)s\"" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "Изменено представление ID \"%(value)s\"" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "установлено соответствие %(count)d представления ID" -msgstr[1] "установлено соответствие %(count)d представлений ID" -msgstr[2] "установлено соответствие %(count)d представлений ID" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" -"Представление отношений доверия по умолчанию невозможно применить к узлам" - -msgid "not found" -msgstr "не найдено" - -#, fuzzy -#| msgid "Default Trust View cannot be applied on hosts" -msgid "ID View cannot be applied to IPA master" -msgstr "" -"Представление отношений доверия по умолчанию невозможно применить к узлам" - -msgid "ID View already applied" -msgstr "Представление ID уже применено" - -msgid "value" -msgstr "значение" - -#, python-format -msgid "ID View applied to %i host." -msgstr "Представление ID применено к узлу: %i." - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "Представление ID применено к узлам: %i." - -#, python-format -msgid "ID View cleared from %i host." -msgstr "Представление ID очищено из %i узла." - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "Представление ID очищено из %i узлов." - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" -"Вы пытаетесь сослаться на личную группу, которую запрещено переопределять. " -"Попробуйте переопределить атрибут GID соответствующего пользователя." - -msgid "IPA object" -msgstr "Объект IPA" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" -"невозможно переопределить системные объекты IPA (например, системные группы, " -"личные группы пользователей)" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "Не удалось определить привязку \"%(anchor)s\"." - -msgid "Default Trust View cannot contain IPA users" -msgstr "" -"Представление отношений доверия по умолчанию не может содержать " -"пользователей IPA" - -msgid "Add a new ID override." -msgstr "Добавить новое переопределение ID." - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "Добавлено переопределение ID \"%(value)s\"" - -msgid "Delete an ID override." -msgstr "Удалить переопределение ID." - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "Удалено переопределение ID \"%(value)s\"" - -msgid "Modify an ID override." -msgstr "Изменить переопределение ID." - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "Изменено переопределение ID \"%(value)s\"" - -msgid "ID override" -msgstr "Переопределение ID" - -msgid "ID overrides cannot be renamed" -msgstr "Невозможно переименовать переопределения ID" - -msgid "Search for an ID override." -msgstr "Поиск переопределения ID." - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "установлено соответствие %(count)d переопределения ID" -msgstr[1] "установлено соответствие %(count)d переопределений ID" -msgstr[2] "установлено соответствие %(count)d переопределений ID" - -msgid "Display information about an ID override." -msgstr "Показать сведения о переопределении ID." - -msgid "User ID override" -msgstr "Переопределение ID пользователя" - -msgid "User ID overrides" -msgstr "Переопределения ID пользователя" - -msgid "Base-64 encoded user certificate" -msgstr "Base-64 шифрованный сертификат пользователя" - -msgid "Group ID override" -msgstr "Переопределение ID группы" - -msgid "Group ID overrides" -msgstr "Переопределения ID группы" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "Добавить один или несколько сертификатов в запись idoverrideuser." - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Добавлены сертификаты в запись idoverrideuser \"%(value)s\"" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "Удалить один или несколько сертификатов из записи idoverrideuser." - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "Удалены сертификаты из записи idoverrideuser \"%(value)s\"" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "Добавлено переопределение ID пользователя \"%(value)s\"" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Удалено переопределение ID пользователя \"%(value)s\"" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "Изменено переопределение ID пользователя \"%(value)s\"" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "установлено соответствие %(count)d переопределения ID пользователя" -msgstr[1] "установлено соответствие %(count)d переопределений ID пользователя" -msgstr[2] "установлено соответствие %(count)d переопределений ID пользователя" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "Добавлено переопределение ID группы \"%(value)s\"" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Удалено переопределение ID группы \"%(value)s\"" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Изменено переопределение ID группы \"%(value)s\"" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "установлено соответствие %(count)d переопределения ID группы" -msgstr[1] "установлено соответствие %(count)d переопределений ID группы" -msgstr[2] "установлено соответствие %(count)d переопределений ID группы" +msgid "Cannot hide last enabled %(name)s server." +msgstr "Не удалось скрыть последний включённый сервер %(name)s." msgid "" "\n" -"Auto Membership Rule.\n" +"Session Support for IPA\n" msgstr "" "\n" -"Правило автоучастия.\n" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" -"\n" -"Внося ясные правила о принадлежности узлов и пользователей к группам " -"посредством настройки включающих и исключающих шаблонов регулярных " -"выражений, вы можете автоматически связывать новые записи с группой или " -"группой узлов на основе данных атрибутов.\n" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" -"\n" -"Правило непосредственно связывается с группой по имени, следовательно, вы не " -"можете создать правило без определения группы или группы узлов.\n" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" -"\n" -"Условие является регулярным выражением, используется 389-ds для установления " -"соответствия новой входящей записи правилу автоучастия. Если имеется " -"соответствие правилу включения, запись добавляется в соответствующую группу " -"или группу узлов.\n" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" -"\n" -"Можно указать группу или группу узлов по умолчанию, которая будет " -"использоваться для записей, не соответствующих ни одному правилу. В случае " -"записей пользователей эта группа будет резервной группой, поскольку все " -"пользователи по умолчанию являются участниками группы, указанной в " -"настройках IPA.\n" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" -"\n" -"Команду automember-rebuild можно использовать, чтобы задним числом применить " -"правила автоучастия в отношении уже существующих записей; это перестроит их " -"участие.\n" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" -"\n" -" Добавить начальную группу или группу узлов:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" -"\n" -" Добавить начальное правило:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" -"\n" -" Добавить в правило условие:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" -"\n" -" Добавить в правило исключительное условие, чтобы предотвратить " -"автоназначение:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" -"\n" -"Добавить узел:\n" -" ipa host-add web1.example.com\n" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" -"\n" -" Добавить пользователя:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" -"\n" -"Проверить автоучастие:\n" -" ipa hostgroup-show webservers\n" -" Группа узлов: webservers\n" -" Описание: Web Servers\n" -" Узлы-участники: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Имя группы: devel\n" -" Описание: Developers\n" -" GID: 1004200000\n" -" Пользователи-участники: tuser\n" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" -"\n" -" Удалить условие из правила:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" -"\n" -" Изменить правило автоучастия:\n" -" ipa automember-mod\n" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" -"\n" -"Установить целевую группу по умолчанию (резервную):\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" -"\n" -" Удалить целевую группу по умолчанию (резервную):\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" -"\n" -" Показать целевую группу по умолчанию (резервную):\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" -"\n" -" Найти все правила автоучастия:\n" -" ipa automember-find\n" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" -"\n" -" Найти все неиспользуемые правила автоучастия:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Найти все неиспользуемые правила автоучастия и удалить их:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" -"\n" -" Показать правило автоучастия:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" -"\n" -" Удалить правило автоучастия:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" -"\n" -" Перестроить участие для всех пользователей:\n" -" ipa automember-rebuild --type=group\n" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" -"\n" -" Перестроить участие для всех узлов:\n" -" ipa automember-rebuild --type=hostgroup\n" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" -"\n" -" Перестроить участие для указанных пользователей:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" -"\n" -" Перестроить участие для указанных узлов:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" - -msgid "Auto Membership Rule" -msgstr "Правило автоучастия" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(otype)s \"%(oname)s\" не найден(а)" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "%s неправильный атрибут" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" -"\n" -" Добавить правило автоучастия.\n" -" " - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Добавлено правило автоучастия \"%(value)s\"" - -msgid "Auto Membership is not configured" -msgstr "Автоучастие не настроено" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" -"\n" -" Добавить условия в правило автоучастия.\n" -" " - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Добавлено условие (условия) в \"%(value)s\"" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "Правило автоучастия: %s не найдено!" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" -"\n" -" Переопределить это, чтобы получить возможность добавить данные об " -"успехе или неудаче в возвращаемое сообщение.\n" -" " - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" -"\n" -" Удалить условия из правила автоучастия.\n" -" " - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Удалено условие (условия) из \"%(value)s\"" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" -"\n" -" Переопределить это, чтобы получить возможность указать состояния " -"успеха или неудачи.\n" -" " - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" -"\n" -" Изменить правило автоучастия.\n" -" " - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Изменено правило автоучастия \"%(value)s\"" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" -"\n" -" Удалить правило автоучастия.\n" -" " - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Удалено правило автоучастия \"%(value)s\"" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" -"\n" -"Поиск правил автоучастия." - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "установлено соответствие %(count)d правила" -msgstr[1] "установлено соответствие %(count)d правил" -msgstr[2] "установлено соответствие %(count)d правил" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" -"\n" -"Показать сведения о правиле автоучастия." - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" -"\n" -" Установить группу по умолчанию (резервную) для всех несоответствующих " -"записей.\n" -" " - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" -"Установить группу по умолчанию (резервную) для автоучастия \"%(value)s\"" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" -"\n" -" Удалить группу по умолчанию (резервную) для всех несоответствующих " -"записей.\n" -" " - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "Удалена группа по умолчанию (резервная) для автоучастия \"%(value)s\"" - -msgid "No default (fallback) group set" -msgstr "Группа по умолчанию (резервная) не установлена" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" -"\n" -" Показать сведения о группах автоучастия по умолчанию (резервных).\n" -" " - -msgid "Task DN" -msgstr "DN задачи" - -msgid "DN of the started task" -msgstr "DN запущенной задачи" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "следует указать хотя бы один из параметров: тип, пользователи, узлы" - -msgid "users and hosts cannot both be set" -msgstr "невозможно одновременно указать пользователей и узлы" - -msgid "hosts cannot be set when type is 'group'" -msgstr "невозможно указать узлы, когда тип \"group\"" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "невозможно указать пользователей, когда тип \"hostgroup\"" - -msgid "Automember rebuild membership task started" -msgstr "Выполняется задача по перестройке записей автоучастия" - -msgid "Automember rebuild membership task completed" -msgstr "Завершена задача по перестройке записей автоучастия" - -#, python-format -msgid "Task DN = '%s'" -msgstr "DN задачи = \"%s\"" - -msgid "Automember" -msgstr "Автоучастник" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" -"\n" -" Поиск неиспользуемых правил автоучастия. Чтобы найти все неиспользуемые " -"правила, может потребоваться выполнить команду с правами привилегированного " -"пользователя.\n" -" " - -msgid "Remove orphan automember rules" -msgstr "Удалить неиспользуемые правила автоучастия" +"Сеансовая поддержка для IPA\n" msgid "" "\n" @@ -24922,6 +26694,1141 @@ msgstr "Включить службу сертификации." msgid "Enabled CA \"%(value)s\"" msgstr "Включена служба сертификации \"%(value)s\"" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" +"\n" +"Сопоставление сертификатов с записями пользователей\n" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" +"\n" +"Управление конфигурацией и правилами сопоставления сертификатов с записями " +"пользователей.\n" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" +"\n" +"В IPA предусмотрена поддержка использования сертификатов для аутентификации. " +"Сертификаты могут храниться или в записи пользователя (весь сертификат в " +"атрибуте usercertificate), или просто привязываться к записи пользователя " +"путём сопоставления. С помощью этого кода можно управлять правилами, которые " +"позволяют связывать сертификат с записью пользователя.\n" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" +"\n" +"Показать глобальную конфигурацию сопоставления сертификатов с записями " +"пользователей:\n" +" ipa certmapconfig-show\n" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" +"\n" +" Изменить глобальную конфигурацию сопоставления сертификатов с записями " +"пользователей:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" +"\n" +" Создать новое правило сопоставления сертификатов с записями пользователей:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" +"\n" +" Изменить правило сопоставления сертификатов с записями пользователей:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" +"\n" +" Отключить правило сопоставления сертификатов с записями пользователей:\n" +" ipa certmaprule-disable rule1\n" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" +"\n" +" Включить правило сопоставления сертификатов с записями пользователей:\n" +" ipa certmaprule-enable rule1\n" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" +"\n" +" Показать сведения о правиле сопоставления сертификатов с записями " +"пользователей:\n" +" ipa certmaprule-show rule1\n" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" +"\n" +" Найти все правила сопоставления сертификатов с записями пользователей в " +"указанном домене:\n" +" ipa certmaprule-find --domain example.com\n" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" +"\n" +" Удалить правило сопоставления сертификатов с записями пользователей:\n" +" ipa certmaprule-del rule1\n" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" +"Домен(ы) \"%s\" не могут использоваться для применения проверки " +"altSecurityIdentities." + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" +"Правило сопоставления с altSecurityIdentities должно применяться к " +"доверенному домену Active Directory, но с правилом не был связан ни один " +"домен." + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "Домен %s не является ни доменом IPA, ни доверенным доменом." + +msgid "Certificate Identity Mapping configuration options" +msgstr "" +"Параметры конфигурации сопоставления сертификатов с записями пользователей" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" +"Глобальная конфигурация сопоставления сертификатов с записями пользователей" + +msgid "Prompt for the username" +msgstr "Запрос имени пользователя" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" +"Запрашивать имя пользователя, когда с сертификатом сопоставляются несколько " +"записей пользователей" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" +"Изменить конфигурацию сопоставления сертификатов с записями пользователей." + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" +"Показать текущую конфигурацию сопоставления сертификатов с записями " +"пользователей." + +msgid "Certificate Identity Mapping Rules" +msgstr "Правила сопоставления сертификатов с записями пользователей" + +msgid "Certificate Identity Mapping Rule" +msgstr "Правило сопоставления сертификатов с записями пользователей" + +msgid "Certificate Identity Mapping Rule name" +msgstr "Имя правила сопоставления сертификатов с записями пользователей" + +msgid "Certificate Identity Mapping Rule description" +msgstr "Описание правила сопоставления сертификатов с записями пользователей" + +msgid "Mapping rule" +msgstr "Правило сопоставления" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" +"Правило, которое используется для сопоставления сертификата с записью " +"пользователя" + +msgid "Matching rule" +msgstr "Правило соответствия" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" +"Правило, которое используется для определения того, пригоден ли сертификат " +"для аутентификации" + +msgid "Domain where the user entry will be searched" +msgstr "Домен, в котором будет выполняться поиск записи пользователя" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "Приоритет правила (чем больше число, тем ниже приоритет)" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" +"Создать новое правило сопоставления сертификатов с записями пользователей." + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" +"Добавлено правило сопоставления сертификатов с записями пользователей " +"\"%(value)s\"" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "Изменить правило сопоставления сертификатов с записями пользователей." + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" +"Изменено правило сопоставления сертификатов с записями пользователей " +"\"%(value)s\"" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "Поиск правил сопоставления сертификатов с записями пользователей." + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +"установлено соответствие %(count)d правила сопоставления сертификатов с " +"записями пользователей" +msgstr[1] "" +"установлено соответствие %(count)d правил сопоставления сертификатов с " +"записями пользователей" +msgstr[2] "" +"установлено соответствие %(count)d правил сопоставления сертификатов с " +"записями пользователей" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" +"Показать сведения о правиле сопоставления сертификатов с записями " +"пользователей." + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "Удалить правило сопоставления сертификатов с записями пользователей." + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" +"Удалено правило сопоставления сертификатов с записями пользователей " +"\"%(value)s\"" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "Включить правило сопоставления сертификатов с записями пользователей." + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" +"Включено правило сопоставления сертификатов с записями пользователей " +"\"%(value)s\"" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "Отключить правило сопоставления сертификатов с записями пользователей." + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" +"Отключено правило сопоставления сертификатов с записями пользователей " +"\"%(value)s\"" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" +"Не удалось установить соединение с sssd с помощью SystemBus. Подробные " +"сведения доступны в файле error_log" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" +"Не удалось найти пользователей с помощью SystemBus. Подробные сведения " +"доступны в файле error_log" + +msgid "User logins" +msgstr "Имена входа пользователя" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" +"\n" +" Поиск пользователей, соответствующих предоставленному сертификату.\n" +"\n" +" Чтобы получить список соответствующих пользователей, эта команда " +"использует данные SSSD, следовательно, она может возвращать кэшированные " +"данные. Подробнее об очистке кэша SSSD можно узнать из документации к " +"sss_cache.\n" +" " + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "установлено соответствие %(count)s пользователя" +msgstr[1] "установлено соответствие %(count)s пользователей" +msgstr[2] "установлено соответствие %(count)s пользователей" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" +"\n" +"Конфигурация сервера\n" +"\n" +"Управление значениями по умолчанию, которые используются IPA, и некоторыми " +"параметрами их настройки.\n" +"\n" +"ПРИМЕЧАНИЯ:\n" +"\n" +"Здесь хранится значение уведомления о пароле (--pwdexpnotify), поэтому оно " +"будет реплицировано. В текущей версии оно не используется для " +"заблаговременного уведомления пользователей об окончании срока действия " +"пароля.\n" +"\n" +"Некоторые атрибуты предоставлены в ознакомительных целях и доступны только " +"для чтения. Среди них:\n" +"\n" +"Основа субъекта сертификата: настроенная основа субъекта сертификата, " +"например O=EXAMPLE.COM. Настраивается только во время установки.\n" +"Возможности подключаемого модуля паролей: в текущей версии он определяет " +"дополнительные хеши, которые создаются на основе пароля (могут быть и другие " +"условия).\n" +"\n" +"При установке приоритета сопоставления пользователей SELinux, возможно, " +"потребуется взять значение в кавычки, чтобы оно не обрабатывалось " +"оболочкой.\n" +"\n" +"Максимальная длина имени узла в Linux управляется параметром ядра " +"MAXHOSTNAMELEN и по умолчанию составляет 64 символа. В некоторых других " +"операционных системах, например, в Solaris, разрешены имена узлов длиной " +"вплоть до 255.\n" +"Этот параметр позволяет регулировать длину, но по умолчанию ограничен " +"максимальной длиной для Linux.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Показать базовую конфигурацию сервера:\n" +" ipa config-show\n" +"\n" +" Показать все параметры конфигурации:\n" +" ipa config-show --all\n" +"\n" +" Изменить максимальную длину имени пользователя на 99 символов:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Изменить максимальную длину имени узла на 255 символов:¶\n" +" ipa config-mod --maxhostname=255¶\n" +"\n" +" Увеличить установленные по умолчанию ограничения времени и размера поиска " +"IPA-сервера:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Указать почтовый домен пользователей по умолчанию:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Включить режим миграции, чтобы сделать работоспособной команду \"ipa " +"migrate-ds\":\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Определить порядок списка пользователей SELinux:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" + +msgid "must be at least 10" +msgstr "должно быть не меньше 10" + +msgid "configuration options" +msgstr "параметры конфигурации" + +msgid "Configuration" +msgstr "Конфигурация" + +msgid "Maximum hostname length" +msgstr "Максимальная длина имени узла" + +msgid "IPA masters" +msgstr "Главные IPA-серверы" + +msgid "List of all IPA masters" +msgstr "Список всех главных IPA-серверов" + +msgid "Hidden IPA masters" +msgstr "Скрытые главные IPA-серверы" + +msgid "List of all hidden IPA masters" +msgstr "Список всех скрытых главных IPA-серверов" + +msgid "IPA master capable of PKINIT" +msgstr "Главный IPA-сервер с поддержкой PKINIT" + +msgid "IPA master which can process PKINIT requests" +msgstr "Главный IPA-сервер, которой может обрабатывать запросы PKINIT" + +msgid "IPA CA servers" +msgstr "Серверы CA IPA" + +msgid "IPA servers configured as certificate authority" +msgstr "IPA-серверы, настроенные в качестве центра сертификации" + +msgid "Hidden IPA CA servers" +msgstr "Скрытые серверы CA IPA" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "Скрытые IPA-серверы, настроенные в качестве центра сертификации" + +msgid "IPA CA renewal master" +msgstr "Главный сервер обновления CA IPA" + +msgid "Renewal master for IPA certificate authority" +msgstr "Главный сервер обновления центра сертификации IPA" + +msgid "IPA servers configured as key recovery agent" +msgstr "IPA-серверы, настроенные в качестве агента восстановления ключей" + +msgid "Hidden IPA KRA servers" +msgstr "Скрытые KRA-серверы IPA" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" +"Скрытые IPA-серверы, настроенные в качестве агента восстановления ключей" + +msgid "IPA servers configured as domain name server" +msgstr "IPA-серверы, настроенные в качестве сервера доменных имен" + +msgid "Hidden IPA DNS servers" +msgstr "Скрытые DNS-серверы IPA" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "Скрытыие IPA-серверы, настроенные в качестве сервера доменных имен" + +msgid "DNSec key master" +msgstr "Мастер ключей DNSec" + +msgid "Empty domain is not allowed" +msgstr "Использование пустого домена запрещено" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "Недопустимое имя домена \"%(domain)s\": %(e)s" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "На сервере нет сведений о домене \"%(domain)s\"" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "Отключённый домен \"%(domain)s\" нельзя использовать" + +msgid "The group doesn't exist" +msgstr "Группа не существует" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "атрибут \"%s\" нельзя использовать" + +msgid "May not be empty" +msgstr "Не может быть пустым" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "Атрибут %(obj)s по умолчанию, %(attr)s, не будет разрешён!" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "Ожидается список пользователей SELinux, с разделителем $" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" +"Запись пользователя SELinux \"%(user)s\" не является корректной: %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" +"Пользователя списка соответствия пользователей SELinux по умолчанию нет в " +"порядковом списке" + +msgid "REST API is not logged in." +msgstr "Не выполнен вход в программный интерфейс REST." + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" +"Ответ от программного интерфейса REST CA не соответствует 2xx: %(status)d. " +"%(explanation)s" + +msgid "Unable to communicate with CMS" +msgstr "Не удалось обменяться данными с CMS" + +msgid "Response from CA was not valid JSON" +msgstr "Ответ от CA не являлся корректным кодом JSON" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" +"\n" +"Узлы/Компьютеры\n" +"\n" +"Узел представляет собой отдельный компьютер. Термин может использоваться в " +"нескольких контекстах:\n" +"- записи служб, связанные с определённым узлом \n" +"- узел сохраняет учётную запись узла / службы\n" +"- узел может использоваться в правилах управления доступом на основе узла " +"(Host-based Access Control, HBAC)\n" +"- каждый зарегистрированный клиент создаёт запись узла\n" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" +"\n" +"РЕГИСТРАЦИЯ:\n" +"\n" +"Существует три сценария регистрации нового клиента:\n" +"\n" +"1. Вы регистрируетесь как администратор с полными правами. Запись узла может " +"существовать или отсутствовать. Полноправный администратор выполняет роль " +"hostadmin или является участником группы admins.\n" +"2. Вы регистрируетесь как администратор с ограниченными правами. Узел уже " +"должен существовать. Администратор с ограниченными правами выполняет роль с " +"привилегией Host Enrollment.\n" +"3. Узел создан с одноразовым паролем.\n" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" +"\n" +"ПОВТОРНАЯ РЕГИСТРАЦИЯ\n" +"\n" +"Если узел уже когда-то был зарегистрирован и затем утратил свою конфигурацию " +"(например, была уничтожена виртуальная машина), его можно зарегистрировать " +"повторно.\n" +"\n" +"Дополнительные сведения доступны на страницах справочника по ipa-client-" +"install.\n" +"\n" +"В запись узла при необходимости можно включить данные о его расположении, " +"типе используемой операционной системы и так далее.\n" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" +"\n" +" Добавить новый узел:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" +"\n" +" Удалить узел:\n" +" ipa host-del test.example.com\n" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" +"\n" +" Добавить новый узел с одноразовым паролем:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" +"\n" +" Добавить новый узел со случайным одноразовым паролем:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" +"\n" +" Изменить сведения об узле:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" +"\n" +"Удалить открытые ключи SSH узла и обновить DNS для отображения изменений:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" +"\n" +" Отключить ключ Kerberos, SSL-сертификат и все службы узла:\n" +" ipa host-disable test.example.com\n" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" +"\n" +" Добавить узел, который может управлять таблицей ключей и сертификатом этого " +"узла:\n" +" ipa host-add-managedby --hosts=test2 test\n" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" +"\n" +" Разрешить пользователю создавать таблицу ключей:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" + +msgid "Host" +msgstr "Узел" + +msgid "Base-64 encoded host certificate" +msgstr "Base-64 шифрованный сертификат узла" + +msgid "Serial Number" +msgstr "Серийный номер" + +msgid "Serial Number (hex)" +msgstr "Серийный номер (шестнадцатеричный)" + +msgid "Authentication Indicators" +msgstr "Индикаторы аутентификации" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "Добавлен узел \"%(value)s\"" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Удалён узел \"%(value)s\"" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" +"Удалить записи A, AAAA, SSHFP и PTR узла (узлов) под управлением DNS IPA" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "Записи A, AAAA, SSHFP или PTR не найдены." + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Изменён узел \"%(value)s\"" + +msgid "Password cannot be set on enrolled host." +msgstr "Невозможно установить пароль для зарегистрированного узла." + +msgid "cn is immutable" +msgstr "cn нельзя изменять" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "установлено соответствие %(count)d узела" +msgstr[1] "установлено соответствие %(count)d узлов" +msgstr[2] "установлено соответствие %(count)d узлов" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "Отключён узел \"%(value)s\"" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "Добавлены сертификаты в запись узла \"%(value)s\"" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Удалены сертификаты из записи узла \"%(value)s\"" + +msgid "Add new principal alias to host entry" +msgstr "Добавить новый псевдоним учётной записи в запись узла." + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Добавлены новые псевдонимы в запись узла \"%(value)s\"" + +msgid "Remove principal alias from a host entry" +msgstr "Удалить псевдоним учётной записи из записи узла." + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Удалены псевдонимы из записи узла \"%(value)s\"" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" +"=======\n" +"ПРЕДУПРЕЖДЕНИЕ:\n" +"\n" +"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " +"диапазонов, настроенных для локального домена. В текущей версии сам " +"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " +"диапазонов, установленных с помощью этого семейства команд.\n" +"\n" +"Для нового локального диапазона следует вручную изменить настройки " +"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " +"dnaNextRange \"cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " +"образом, чтобы он соответствовал новому диапазону.\n" +"=======\n" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "Диапазоны идентификаторов" + +msgid "ID Range" +msgstr "Диапазон идентификаторов" + +msgid "local domain range" +msgstr "диапазон локальных доменов" + +msgid "ID range type, one of allowed values" +msgstr "Тип диапазона идентификаторов, одно из разрешённых значений" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" +"изменение диапазона, при котором появляются объекты с идентификаторами за " +"пределами указанного диапазона, запрещено " + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Невозможно выполнить проверку SID без установленной поддержки Samba 4. " +"Убедитесь, что на сервере установлен субпакет IPA server-trust-ad" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" +"Отношения доверия между областями (realm) не настроены. Убедитесь, что на " +"IPA-сервере запущена команда ipa-adtrust-install" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" +"Не удалось распознать SID в качестве допустимого идентификатора безопасности " +"для доверенного домена" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" +"\n" +"Добавление нового диапазона идентификаторов.\n" +"\n" +" Для добавления нового диапазона идентификаторов всегда необходимо " +"указывать\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Кроме того,\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" могут указываться для нового диапазона идентификаторов для локального " +"домена, в то время как\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" должны быть указаны для добавления нового диапазона для доверенного " +"домена AD.\n" +"\n" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "Добавлен диапазон идентификаторов \"%(value)s\"" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "Невозможно одновременно использовать параметры dom-sid и dom-name" + +msgid "Specified trusted domain name could not be found." +msgstr "Указанное имя доверенного домена не найдено." + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" +"Параметры dom-sid/dom-name и rid-base необходимо использовать одновременно" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" +"Если типом диапазона IPA является ipa-ad-trust-posix, параметр rid-base " +"использовать нельзя" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" +"Если указан SID доверенного домена, тип диапазона IPA должен быть ipa-ad-" +"trust или ipa-ad-trust-posix" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" +"Невозможно одновременно использовать параметры dom-sid/dom-name и secondary-" +"rid-base" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" +"Если не указан SID доверенного домена, тип диапазона IPA не должен быть ipa-" +"ad-trust или ipa-ad-trust-posix" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" +"Параметры secondary-rid-base и rid-base необходимо использовать одновременно" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "Основной диапазон RID и вторичный диапазон RID не могут пересекаться" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" +"Необходимо указать оба параметра, rid-base и secondary-rid-base, так как " +"команда ipa-adtrust-install уже запущена." + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "Удалён диапазон идентификаторов \"%(value)s\"" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "установлено соответствие %(count)d диапазона" +msgstr[1] "установлено соответствие %(count)d диапазонов" +msgstr[2] "установлено соответствие %(count)d диапазонов" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" +"Изменить диапазон идентификаторов.\n" +"\n" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "Изменён диапазон идентификаторов \"%(value)s\"" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" +"Эту команду нельзя использовать для изменения выделения идентификаторов для " +"локального домена IPA. Чтобы получить дополнительные сведения, выполните " +"команду `ipa help idrange`" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" +"Не удалось найти SID указанного доверенного домена. Укажите SID в явном виде " +"с помощью параметра dom-sid." + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" +"Невозможно одновременно использовать параметры dom-sid и secondary-rid-base" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "Параметры dom-sid и rid-base необходимо использовать одновременно" + msgid "Internationalization messages" msgstr "Сообщения интернационализации" @@ -26035,12 +28942,6 @@ msgstr "Сертификат отозван" msgid "REVOKED" msgstr "ОТОЗВАНО" -msgid "Serial Number" -msgstr "Серийный номер" - -msgid "Serial Number (hex)" -msgstr "Серийный номер (шестнадцатеричный)" - msgid "SHA1 Fingerprint" msgstr "Отпечаток SHA1" @@ -26093,9 +28994,6 @@ msgstr "Добавить правило сопоставления сертиф msgid "Add certificate mapping data" msgstr "Добавить данные сопоставления сертификата" -msgid "Certificate mapping data" -msgstr "Данные сопоставления сертификата" - msgid "Configuration string" msgstr "Строка конфигурации" @@ -26846,9 +29744,6 @@ msgstr "Добавить группы узлов в сетевую группу msgid "Add users into netgroup '${primary_key}'" msgstr "Добавить пользователей в сетевую группу '${primary_key}'" -msgid "Host" -msgstr "Узел" - msgid "Netgroup Settings" msgstr "Параметры сетевой группы" @@ -26969,9 +29864,6 @@ msgstr "Новый: ключ установлен" msgid "Add password policy" msgstr "Добавить политику паролей" -msgid "Password Policy" -msgstr "Политика паролей" - msgid "Remove password policies" msgstr "Удалить политики паролей" @@ -27443,15 +30335,6 @@ msgstr "Удалить отношения доверия" msgid "Remove domains" msgstr "Удалить домены" -msgid "Trust direction" -msgstr "Направление отношения доверия" - -msgid "Trust status" -msgstr "Состояние отношения доверия" - -msgid "Trust type" -msgstr "Тип отношения доверия" - msgid "Alternative UPN suffixes" msgstr "Альтернативные суффиксы UPN" @@ -28092,9 +30975,6 @@ msgstr "Sudo" msgid "Topology" msgstr "Топология" -msgid "Trusts" -msgstr "Отношения доверия" - msgid "True" msgstr "Да" @@ -28213,2017 +31093,6 @@ msgstr "Обязательное поле" msgid "Unsupported value" msgstr "Неподдерживаемое значение" -msgid "Role" -msgstr "Роль" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "Добавлена роль \"%(value)s\"" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Удалена роль \"%(value)s\"" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Изменена роль \"%(value)s\"" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "установлено соответствие %(count)d роли" -msgstr[1] "установлено соответствие %(count)d ролей" -msgstr[2] "установлено соответствие %(count)d ролей" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" -"\n" -"IPA-серверы\n" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" -"\n" -"Получить сведения об установленных IPA-серверах.\n" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -" Найти все серверы:\n" -" ipa server-find\n" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" -"\n" -" Показать определённый сервер:\n" -" ipa server-show ipa.example.com\n" - -msgid "server" -msgstr "сервер" - -msgid "servers" -msgstr "серверы" - -msgid "IPA Servers" -msgstr "IPA-серверы" - -msgid "Server location" -msgstr "Расположение сервера" - -msgid "Service weight" -msgstr "Вес служб" - -msgid "Weight for server services" -msgstr "Вес служб сервера" - -msgid "Service relative weight" -msgstr "Относительный вес служб" - -msgid "Relative weight for server services (counts per location)" -msgstr "" -"Относительный вес служб сервера (вычисляется для отдельного расположения)" - -msgid "Enabled server roles" -msgstr "Включены роли сервера" - -msgid "List of enabled roles" -msgstr "Список включённых ролей" - -msgid "Modify information about an IPA server." -msgstr "Изменить сведения о IPA-сервере." - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "Изменена запись IPA-сервера \"%(value)s\"" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "установлено соответствие %(count)d IPA-сервера" -msgstr[1] "установлено соответствие %(count)d IPA-серверов" -msgstr[2] "установлено соответствие %(count)d IPA-серверов" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Удалён IPA-сервер \"%(value)s\"" - -msgid "Ignore topology errors" -msgstr "Игнорировать ошибки топологии" - -msgid "Ignore topology connectivity problems after removal" -msgstr "Игнорировать ошибки топологии подключений после удаления" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" -"Игнорировать проверку того, является ли удаляемый сервер последним сервером " -"CA или DNS" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" -"Пропустить проверку того, удаляется ли последний главный сервер CA или DNS-" -"сервер" - -msgid "Force server removal" -msgstr "Принудительное удаление сервера" - -msgid "Force server removal even if it does not exist" -msgstr "Принудительное удаление сервера, даже если он не существует" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" -"Реплика является активным мастером ключей DNSSEC. Удаление может привести к " -"неработоспособности вашей системы DNS. Сначала следует отключить или " -"заменить мастер ключей DNSSEC." - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" -"Удаление этой записи сервера оставит вашу установленную систему без DNS." - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" -"Удаление этой записи сервера запрещено, так как это оставило бы вашу " -"установленную систему без KRA." - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" -"Удаление этой записи сервера запрещено, так как это оставило бы вашу " -"установленную систему без CA." - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "Предупреждения игнорируются, процесс удаления продолжается" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" -"Не удалось удалить memberPrincipal %(principal)s из записи s4u2proxy %(dn)s: " -"%(err)s" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "Не удалось удалить записи имени узла DNA для %(master)s: %(err)s" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "Не удалось удалить сервер %(master)s из списка серверов: %(err)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "Не удалось удалить ключи Custodia для %(master)s: %(err)s" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "Не удалось удалить учётные записи или ключи сервера: %(err)s" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "Не удалось удалить записи DNS %(hostname)s: %(err)s" - -msgid "You may need to manually remove them from the tree" -msgstr "Возможно, потребуется вручную удалить их из дерева" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "Принудительное удаление %(hostname)s" - -msgid "Ignoring topology connectivity errors." -msgstr "Игнорирование ошибок топологии подключений." - -msgid "Server has already been deleted" -msgstr "Сервер уже удалён" - -msgid "Agreements deleted" -msgstr "Соглашения удалены" - -msgid "Following segments were not deleted:" -msgstr "Следующие сегменты не были удалены:" - -#, python-format -msgid "must be \"%s\"" -msgstr "должно быть \"%s\"" - -msgid "not allowed to perform server connection check" -msgstr "не разрешено выполнение проверки связи с сервером" - -msgid "Set enabled/hidden state of a server." -msgstr "Установить включённое/скрытое состояние сервера." - -msgid "State" -msgstr "Состояние" - -msgid "Server state" -msgstr "Состояние сервера" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "Изменено состояние сервера \"%(value)s\"." - -msgid "Cannot hide CA renewal master." -msgstr "Не удалось скрыть мастер обновления CA." - -msgid "Cannot hide DNSSec key master." -msgstr "Не удалось скрыть мастер ключей DNSSec." - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "Не удалось скрыть последний включённый сервер %(name)s." - -#, fuzzy -#| msgid "" -#| "\n" -#| "Service Constrained Delegation\n" -#| "\n" -#| "Manage rules to allow constrained delegation of credentials so\n" -#| "that a service can impersonate a user when communicating with another\n" -#| "service without requiring the user to actually forward their TGT.\n" -#| "This makes for a much better method of delegating credentials as it\n" -#| "prevents exposure of the short term secret of the user.\n" -#| "\n" -#| "The naming convention is to append the word \"target\" or \"targets\" to\n" -#| "a matching rule name. This is not mandatory but helps conceptually\n" -#| "to associate rules and targets.\n" -#| "\n" -#| "A rule consists of two things:\n" -#| " - A list of targets the rule applies to\n" -#| " - A list of memberPrincipals that are allowed to delegate for\n" -#| " those targets\n" -#| "\n" -#| "A target consists of a list of principals that can be delegated.\n" -#| "\n" -#| "In English, a rule says that this principal can delegate as this\n" -#| "list of principals, as defined by these targets.\n" -#| "\n" -#| "EXAMPLES:\n" -#| "\n" -#| " Add a new constrained delegation rule:\n" -#| " ipa servicedelegationrule-add ftp-delegation\n" -#| "\n" -#| " Add a new constrained delegation target:\n" -#| " ipa servicedelegationtarget-add ftp-delegation-target\n" -#| "\n" -#| " Add a principal to the rule:\n" -#| " ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -#| "com ftp-delegation\n" -#| "\n" -#| " Add our target to the rule:\n" -#| " ipa servicedelegationrule-add-target --" -#| "servicedelegationtargets=ftp-delegation-target ftp-delegation\n" -#| "\n" -#| " Add a principal to the target:\n" -#| " ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -#| "com ftp-delegation-target\n" -#| "\n" -#| " Display information about a named delegation rule and target:\n" -#| " ipa servicedelegationrule_show ftp-delegation\n" -#| " ipa servicedelegationtarget_show ftp-delegation-target\n" -#| "\n" -#| " Remove a constrained delegation:\n" -#| " ipa servicedelegationrule-del ftp-delegation-target\n" -#| " ipa servicedelegationtarget-del ftp-delegation\n" -#| "\n" -#| "In this example the ftp service can get a TGT for the ldap service on\n" -#| "the bound user's behalf.\n" -#| "\n" -#| "It is strongly discouraged to modify the delegations that ship with\n" -#| "IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -#| "ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -#| "to delegate, causing the framework to stop functioning.\n" -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" -"\n" -"Ограниченное делегирование служб\n" -"\n" -"Управление правилами, с помощью которых можно ограничить делегирование " -"учётных данных таким образом, что служба сможет выполнять олицетворение " -"пользователя при обмене данными с другой службой без необходимости для " -"пользователя самом деле перенаправлять билет для получения билета (TGT). " -"Такой метод делегирования учётных данных значительно лучше, так как " -"предотвращает раскрытие краткосрочного секрета пользователя.\n" -"\n" -"В соответствии с соглашением об именовании к имени соответствующего правила " -"добавляется слово \"target\" или \"targets\". Такая схема имён не является " -"обязательной, но она помогает концептуально связать правила и их " -"назначения.\n" -"\n" -"Правило состоит из двух компонентов:\n" -" - Список целей (назначений), к которым применяется правило\n" -" - Список memberPrincipals, которым разрешено делегирование для этих " -"целей \n" -"\n" -"Цель состоит из списка учётных записей, которые можно делегировать.\n" -"\n" -"Если проще, правило утверждает, что определённую учетную запись можно " -"делегировать как указанный список учётных записей, согласно заданному списку " -"целей.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новое правило ограниченного делегирования:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Добавить новую цель ограниченного делегирования:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Добавить учётную запись в правило:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Добавить цель в правило:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Добавить учётную запись в цель:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Показать сведения об именованном правиле делегирования и цели:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Удалить ограниченное делегирование:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"В этом примере служба ftp может получать билет для получения билета для " -"службы ldap от имени связанного пользователя.\n" -"\n" -"Настоятельно не рекомендуется изменять делегирования, которые поставляются с " -"IPA, ipa-http-delegation и его цели ipa-cifs-delegation-targets и Ipa-ldap-" -"delegation-targets. Неправильная настройка может привести к потере " -"возможности делегирования, что повлечет неработоспособность всей системы.\n" - -msgid "Allowed to Impersonate" -msgstr "Разрешено олицетворять" - -msgid "Member principals" -msgstr "Учётные записи — участники" - -#, fuzzy, python-format -#| msgid "Malformed principal: '%(value)s'" -msgid "Malformed principal: %(error)s" -msgstr "Недопустимая учётная запись: \"%(value)s\"" - -msgid "Add target to a named service delegation." -msgstr "Добавить цель в именованное делегирование служб." - -#, python-format -msgid "member %s" -msgstr "участник %s" - -msgid "Remove member from a named service delegation." -msgstr "Удалить участника из именованного делегирования служб." - -msgid "service delegation rule" -msgstr "правило делегирования служб" - -msgid "service delegation rules" -msgstr "правила делегирования служб" - -msgid "Service delegation rules" -msgstr "Правила делегирования служб" - -msgid "Service delegation rule" -msgstr "Правило делегирования служб" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Добавлено правило делегирования служб \"%(value)s\"" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Удалено делегирование служб \"%(value)s\"" - -msgid "privileged service delegation rule" -msgstr "правило делегирования привилегированных служб" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "установлено соответствие %(count)d правила делегирования служб" -msgstr[1] "установлено соответствие %(count)d правил делегирования служб" -msgstr[2] "установлено соответствие %(count)d правил делегирования служб" - -msgid "service delegation target" -msgstr "цель делегирования служб" - -msgid "service delegation targets" -msgstr "цели делегирования служб" - -msgid "Service delegation targets" -msgstr "Цели делегирования служб" - -msgid "Service delegation target" -msgstr "Цель делегирования служб" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "Добавлена цель делегирования служб \"%(value)s\"" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Удалена цель делегирования служб \"%(value)s\"" - -msgid "privileged service delegation target" -msgstr "цель делегирования привилегированных служб" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "установлено соответствие %(count)d цели делегирования служб" -msgstr[1] "установлено соответствие %(count)d целей делегирования служб" -msgstr[2] "установлено соответствие %(count)d целей делегирования служб" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" -"\n" -"Переход на IPA\n" -"\n" -"Перенос пользователей и групп с LDAP-сервера на IPA.\n" -"\n" -"Посылает запрос LDAP к удалённому серверу с целью поиска пользователей и " -"групп в контейнере. Чтобы перенести пароли, следует выполнить привязку к " -"серверу от имени пользователя, который может читать атрибут userPassword на " -"удалённом сервере. Перечень таких пользователей обычно ограничен " -"администраторами высшего уровня, в частности cn=Directory Manager на 389-ds " -"(пользователь bind по умолчанию).\n" -"\n" -"Контейнер пользователей по умолчанию: ou=People.\n" -"\n" -"Контейнер групп по умолчанию: ou=Groups.\n" -"\n" -"Записи пользователей и групп, которые уже существуют на IPA-сервере, будут " -"пропущены.\n" -"\n" -"Две схемы LDAP определяют, как хранятся записи участников группы: RFC2307 и\n" -"RFC2307bis. RFC2307bis использует атрибуты member и uniquemember для " -"определения участников группы, а RFC2307 использует атрибут memberUid. По " -"умолчанию используется схема RFC2307bis.\n" -"\n" -"С помощью приложения compat IPA можно повторно форматировать данные для " -"систем, в которых не предусмотрена поддержка RFC2307bis. Рекомендуется " -"отключать это приложение во время переноса, чтобы уменьшить нагрузку на " -"систему. Его можно включить снова после переноса. Чтобы перенести данные с " -"включённым приложением, используйте параметр \"--with-compat\".\n" -"\n" -"У перенесённых пользователей нет учётных данных Kerberos, только пароль " -"LDAP. Для завершения процесса переноса пользователям следует открыть " -"страницу http://ipa.example.com/ipa/migration и пройти аутентификацию с " -"помощью пароля LDAP, чтобы создать свои записи учётных данных Kerberos.\n" -"\n" -"По умолчанию перенос отключён. Чтобы включить его, используйте команду ipa " -"config-mod:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"Если базовое DN не будет предоставлено с помощью --basedn, IPA будет " -"использовать значение defaultNamingContext, если оно установлено, или первое " -"значение в наборе namingContexts в корневой папке удалённого LDAP-сервера.\n" -"\n" -"Записи пользователей добавляются в группу пользователей по умолчанию. " -"Процесс такого добавления может быть довольно длительным, поэтому при " -"переносе он выполняется в пакетном режиме, пакетами по 100 пользователей. В " -"результате возникнет определённый период, когда записи пользователей уже " -"добавлены в IPA, но эти пользователи ещё не стали участниками группы " -"пользователей по умолчанию.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -"Простейший перенос, приняты все значения по умолчанию:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -"Определение контейнеров пользователей и групп. Можно использовать для " -"переноса данных пользователей и групп с сервера IPA версии 1:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts'\n" -" --group-container='cn=groups,cn=accounts'\n" -" ldap://ds.example.com:389\n" -"\n" -"Так как на сервере IPA версии 2 уже предусмотрены предопределённые группы, " -"которые могут совпадать с перенесёнными с сервера (IPA версии 1) группами " -"(например, admins, ipausers), пользователи из таких групп могут быть " -"перенесены в неизвестную группу (unknown) на новом сервере IPA версии 2.\n" -"Используйте параметр --group-overwrite-gid, чтобы перезаписать идентификатор " -"группы (GID) уже созданных групп и предотвратить эту проблему:\n" -" ipa migrate-ds --group-overwrite-gi\n" -" --user-container='cn=users,cn=accounts'\n" -" --group-container='cn=groups,cn=accounts'\n" -" ldap://ds.example.com:389\n" -"\n" -"Перенесённые данные пользователей и групп могут содержать классы объектов и " -"сопутствующие атрибуты, неизвестные серверу IPA версии 2. Эти классы " -"объектов и атрибуты можно исключить из процедуры переноса данных:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts'\n" -" --group-container='cn=groups,cn=accounts'\n" -" --user-ignore-objectclass=radiusprofile\n" -" --user-ignore-attribute=radiusgroupname\n" -" ldap://ds.example.com:389\n" -"\n" -"ВЕДЕНИЕ ЖУРНАЛА\n" -"\n" -"Во время переноса предупреждения и сообщения об ошибках будут добавляться в " -"журнал ошибок Apache. После завершения переноса следует ознакомиться с " -"соответствующим файлом, чтобы исправить или выяснить причины ошибок, которые " -"могли произойти. \n" -"\n" -"Для каждого пакета из 100 перенесённых записей пользователей будет показано " -"информационное сообщение, предназначенное для оценки прогресса обработки и " -"определения её продолжительности. \n" -"\n" -"Если определён уровень ведения журнала debug путём установления debug = True " -"в /etc/ipa/default.conf или в /etc/ipa/server.conf, для каждой перенесённой " -"записи будет добавляться собственная запись, а также отчёт по каждому " -"обновлению группы пользователей по умолчанию.\n" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" -"Учётная запись Kerberos %s уже существует. Используйте команду \"ipa user-mod" -"\", чтобы установить её параметры вручную." - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" -"Не удалось определить, существует ли уже учётная запись Kerberos %s. " -"Используйте команду \"ipa user-mod\", чтобы установить её параметры вручную." - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" -"Не удалось добавить пользователя в группу по умолчанию. Используйте команду " -"\"ipa group-add-member\", чтобы добавить его вручную." - -msgid "Migration of LDAP search reference is not supported." -msgstr "Поддержка миграции поисковой ссылки LDAP не предусмотрена." - -msgid "Malformed DN" -msgstr "Некорректное DN" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(user)s не является POSIX-пользователем" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" -". Проверьте идентификатор существующей группы. Используйте параметр --group-" -"overwrite-gid для перезаписи идентификатора группы" - -msgid "Invalid LDAP URI." -msgstr "Неверный URI LDAP." - -#, python-format -msgid "%s to exclude from migration" -msgstr "%s для исключения из миграции" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" -"список результатов поиска объектов миграции был усечён сервером; возможно, " -"процесс миграции не завершён\n" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" -"Поиск LDAP в %(container)s не вернул никаких результатов (основа поиска: " -"%(search_base)s, класс объектов: %(objectclass)s)" - -msgid "Default group for new users not found" -msgstr "Группа по умолчанию для новых пользователей не найдена" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" -"\n" -"Узлы/Компьютеры\n" -"\n" -"Узел представляет собой отдельный компьютер. Термин может использоваться в " -"нескольких контекстах:\n" -"- записи служб, связанные с определённым узлом \n" -"- узел сохраняет учётную запись узла / службы\n" -"- узел может использоваться в правилах управления доступом на основе узла " -"(Host-based Access Control, HBAC)\n" -"- каждый зарегистрированный клиент создаёт запись узла\n" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" -"\n" -"РЕГИСТРАЦИЯ:\n" -"\n" -"Существует три сценария регистрации нового клиента:\n" -"\n" -"1. Вы регистрируетесь как администратор с полными правами. Запись узла может " -"существовать или отсутствовать. Полноправный администратор выполняет роль " -"hostadmin или является участником группы admins.\n" -"2. Вы регистрируетесь как администратор с ограниченными правами. Узел уже " -"должен существовать. Администратор с ограниченными правами выполняет роль с " -"привилегией Host Enrollment.\n" -"3. Узел создан с одноразовым паролем.\n" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" -"\n" -"ПОВТОРНАЯ РЕГИСТРАЦИЯ\n" -"\n" -"Если узел уже когда-то был зарегистрирован и затем утратил свою конфигурацию " -"(например, была уничтожена виртуальная машина), его можно зарегистрировать " -"повторно.\n" -"\n" -"Дополнительные сведения доступны на страницах справочника по ipa-client-" -"install.\n" -"\n" -"В запись узла при необходимости можно включить данные о его расположении, " -"типе используемой операционной системы и так далее.\n" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" -"\n" -" Добавить новый узел:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" -"\n" -" Удалить узел:\n" -" ipa host-del test.example.com\n" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" -"\n" -" Добавить новый узел с одноразовым паролем:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" -"\n" -" Добавить новый узел со случайным одноразовым паролем:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" -"\n" -" Изменить сведения об узле:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" -"\n" -"Удалить открытые ключи SSH узла и обновить DNS для отображения изменений:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" -"\n" -" Отключить ключ Kerberos, SSL-сертификат и все службы узла:\n" -" ipa host-disable test.example.com\n" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" -"\n" -" Добавить узел, который может управлять таблицей ключей и сертификатом этого " -"узла:\n" -" ipa host-add-managedby --hosts=test2 test\n" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" -"\n" -" Разрешить пользователю создавать таблицу ключей:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" - -msgid "Base-64 encoded host certificate" -msgstr "Base-64 шифрованный сертификат узла" - -msgid "Principal alias" -msgstr "Псевдоним учётной записи" - -msgid "SSH public key fingerprint" -msgstr "Отпечаток открытого ключа SSH" - -msgid "Authentication Indicators" -msgstr "Индикаторы аутентификации" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Добавлен узел \"%(value)s\"" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Удалён узел \"%(value)s\"" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" -"Удалить записи A, AAAA, SSHFP и PTR узла (узлов) под управлением DNS IPA" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "Записи A, AAAA, SSHFP или PTR не найдены." - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Изменён узел \"%(value)s\"" - -msgid "Password cannot be set on enrolled host." -msgstr "Невозможно установить пароль для зарегистрированного узла." - -msgid "cn is immutable" -msgstr "cn нельзя изменять" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "установлено соответствие %(count)d узела" -msgstr[1] "установлено соответствие %(count)d узлов" -msgstr[2] "установлено соответствие %(count)d узлов" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Отключён узел \"%(value)s\"" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Добавлены сертификаты в запись узла \"%(value)s\"" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Удалены сертификаты из записи узла \"%(value)s\"" - -msgid "Add new principal alias to host entry" -msgstr "Добавить новый псевдоним учётной записи в запись узла." - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Добавлены новые псевдонимы в запись узла \"%(value)s\"" - -msgid "Remove principal alias from a host entry" -msgstr "Удалить псевдоним учётной записи из записи узла." - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Удалены псевдонимы из записи узла \"%(value)s\"" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" -"Объект класса обслуживания, который используется для связывания политик с " -"группами" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" -"приоритет должен иметь уникальное значение (%(prio)d уже использовано для " -"%(gname)s)" - -msgid "Add Class of Service entry" -msgstr "Добавить запись класса обслуживания" - -msgid "Delete Class of Service entry" -msgstr "Удалить запись класса обслуживания" - -msgid "Modify Class of Service entry" -msgstr "Изменить запись класса обслуживания" - -msgid "Display Class of Service entry" -msgstr "Показать запись класса обслуживания" - -msgid "Search for Class of Service entry" -msgstr "Поиск записи класса обслуживания" - -msgid "password policy" -msgstr "политика паролей" - -msgid "password policies" -msgstr "политики паролей" - -msgid "Password Policies" -msgstr "Политики паролей" - -#, fuzzy -#| msgid "Max renew" -msgid "Max repeat" -msgstr "Максимальный срок для обновления" - -#, fuzzy -#| msgid "Maximum number of entries returned" -msgid "Maximum number of same consecutive characters" -msgstr "Максимальное количество возвращённых записей" - -#, fuzzy -#| msgid "Max renew" -msgid "Max sequence" -msgstr "Максимальный срок для обновления" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -#| msgid "User name" -msgid "User check" -msgstr "Имя пользователя" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "Максимальный срок жизни пароля должен быть больше минимального." - -msgid "cannot delete global password policy" -msgstr "невозможно удалить глобальную политику паролей" - -msgid "priority cannot be set on global policy" -msgstr "невозможно установить приоритет для глобальной политики" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" -"\n" -"Отношения доверия между областями (realm)\n" -"\n" -"Управление отношениями доверия между доменами IPA и Active Directory.\n" -"\n" -"Чтобы разрешить пользователям из удалённого домена доступ к ресурсам в " -"домене IPA, необходимо установить отношение доверия. В текущей версии IPA " -"поддерживает только отношения доверия между доменами IPA и Active Directory " -"под управлением Windows Server 2008 или более поздней версии с " -"функциональными возможностями уровня 2008 или более поздней версии.\n" -"\n" -"Обратите внимание, что следует надлежащим образом настроить DNS на обоих " -"доменах, IPA и Active Directory, чтобы домены могли обнаруживать друг друга. " -"Работоспособность отношения доверия зависит от возможности обнаруживать " -"специальные ресурсы в другом домене с помощью записей DNS.\n" -"\n" -"Примеры:\n" -"\n" -"1. Установить отношение доверия между областями (realm) с Active Directory с " -"помощью учётных данных администратора AD:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. Вывести список всех существующих отношений доверия:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Показать подробные сведения об определённом отношении доверия:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Удалить существующее отношение доверия:\n" -"\n" -" ipa trust-del \n" -"\n" -"Как только отношение доверия будет установлено, удалённых пользователей " -"потребуется привязать к локальным POSIX-группам, чтобы воспользоваться " -"ресурсами IPA. Привязку следует выполнить с помощью внешнего участия не-" -"POSIX-группы, а затем эту группу необходимо включить в одну из локальных " -"POSIX-групп.\n" -"\n" -"Пример:\n" -"\n" -"1. Создать группу для привязки администраторов (admins) доверенного домена и " -"их локальную POSIX-группу:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Добавить идентификатор безопасности Domain Admins домена " -"группе ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Вывести список участников внешних участников группы ad_admins_external, " -"чтобы определить их SID:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"ГЛОБАЛЬНАЯ КОНФИГУРАЦИЯ ОТНОШЕНИЙ ДОВЕРИЯ\n" -"\n" -"После установки субпакета доверия AD IPA и запуска ipa-adtrust-install " -"создаётся конфигурация локального домена (SID, GUID, имя NetBIOS). Эти " -"идентификаторы затем используются для связи с доверенным доменом конкретного " -"типа.\n" -"\n" -"1. Показать глобальную конфигурацию отношений доверия для типа отношений " -"доверия Active Directory:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Изменить глобальную конфигурацию для всех отношений доверия типа Active " -"Directory и указать другую резервную основную группу (GID резервной основной " -"группы используется в качестве GID основного пользователя, если для " -"пользователя, который выполняет аутентификацию в домене IPA, не был " -"установлен другой основной GID):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Изменить резервную основную группу обратно на скрытую группу по умолчанию " -"(разрешена любая группа с классом объекта posixGroup):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" -" Кроме того, выполнить эту команду могут следующие серверы: %(masters)s" - -msgid "AD Trust setup" -msgstr "Настройка отношений доверия AD" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" -"Невозможно выполнить выбранную команду без установленной поддержки Samba 4. " -"Убедитесь, что субпакет IPA server-trust-ad установлен." - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" -"Невозможно выполнить выбранную команду без настройки экземпляра Samba 4 на " -"этом компьютере. Убедитесь, что на этом сервере запущена команда ipa-adtrust-" -"install." - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Без настройки собственного домена нельзя выполнять поиск в доверенных " -"доменах. Убедитесь, что на IPA-сервере запущена команда ipa-adtrust-install" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" -"Не удалось получить домены из доверенного леса. Подробные сведения доступны " -"в файле error_log" - -msgid "trust" -msgstr "отношение доверия" - -msgid "trusts" -msgstr "отношения доверия" - -msgid "Trust" -msgstr "Отношение доверия" - -#, fuzzy -#| msgid "SID blacklist incoming" -msgid "SID blocklist incoming" -msgstr "Входящий \"чёрный список\" SID" - -#, fuzzy -#| msgid "SID blacklist outgoing" -msgid "SID blocklist outgoing" -msgstr "Исходящий \"чёрный список\" SID" - -msgid "UPN suffixes" -msgstr "Суффиксы UPN" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "недопустимый SID: {SID}" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" -"\n" -"Добавление нового отношения доверия, которое следует использовать.\n" -"\n" -"Эта команда устанавливает отношение доверия с другим доменом, который " -"становится \"доверенным\". В результате пользователи доверенного домена " -"получают доступ к ресурсам этого домена.\n" -"\n" -"В текущей версии поддерживаются только отношения доверия с доменами Active " -"Directory.\n" -"\n" -"Команду можно безопасно запускать несколько раз для одного и того же домена, " -"такой запуск приводит к изменению учётных данных отношения доверия на обеих " -"сторонах.\n" -"\n" -"Если команда уже выполнялась с определённым типом диапазона или с " -"автоматическим определением типа диапазона, а теперь необходимо настроить " -"другой тип диапазона, возможно, потребуется сначала удалить диапазон " -"идентификаторов с помощью команды ipa idrange-del. Затем повторите команду с " -"необходимым типом диапазона.\n" -"\n" -" " - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" -"Тип диапазона идентификаторов доверенного домена, одно из разрешённых " -"значений" - -msgid "External trust" -msgstr "Внешнее отношение доверия" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" -"Установить внешнее отношение доверия с доменом в другом лесу. Отношение " -"доверия не является транзитивным за пределами этого домена." - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" -"Добавлено отношение доверия Active Directory для области (realm) \"%(value)s" -"\"" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Повторно установлено отношение доверия с доменом \"%(value)s\"" - -msgid "missing base_id" -msgstr "отсутствует base_id" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "pysss_murmur недоступен на сервере, base-id не предоставлен." - -msgid "trust type" -msgstr "тип отношения доверия" - -msgid "only \"ad\" is supported" -msgstr "предусмотрена поддержка только \"ad\"" - -msgid "domain" -msgstr "домен" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" -"Невозможно установить отношение доверия с AD, развёрнутой в том же домене, " -"что и IPA. Поддержка такой настройки не предусмотрена." - -msgid "Realm-domain mismatch" -msgstr "Несоответствие области (realm) и домена" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" -"Для установления отношения доверия с Active Directory имя домена и имя " -"области (realm) IPA-сервера должны совпадать" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" -"Доверенный домен %(domain)s находится среди доменов области (realm) IPA. Его " -"необходимо удалить до установления отношения доверия. Смотрите команду \"ipa " -"realmdomains-mod --del-domain\"." - -msgid "Trusted domain and administrator account use different realms" -msgstr "" -"Доверенным доменом и учётной записью администратора используются разные " -"области (realms)" - -msgid "Realm administrator password should be specified" -msgstr "Следует указать пароль администратора области (realm)" - -msgid "id range type" -msgstr "тип диапазона идентификаторов" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" -"При добавлении отношения доверия AD значениями --range-type могут быть " -"только ipa-ad-trust или ipa-ad-trust-posix." - -msgid "id range" -msgstr "диапазон идентификаторов" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" -"Для этого отношения доверия уже существует диапазон идентификаторов. Следует " -"либо удалить старый диапазон, либо исключить из команды параметры --base-" -"id/--range-size." - -msgid "range exists" -msgstr "диапазон существует" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" -"Уже существует диапазон идентификаторов с тем же именем, но другим SID " -"домена. Диапазон идентификаторов для нового доверенного домена необходимо " -"создать вручную." - -msgid "range type change" -msgstr "изменение типа диапазона" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" -"Диапазон идентификаторов для доверенного домена уже существует, но имеет " -"другой тип. Удалите старый диапазон вручную или не устанавливайте тип " -"принудительно с помощью параметра --range-type." - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "Не удалось определить контроллер домена для домена {domain}. " - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" -"В DNS IPA определена соответствующая политика перенаправления. Возможно, " -"перенаправитель указывает на некорректный узел?" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" -"IPA управляет DNS. Проверьте вашу конфигурацию DNS и убедитесь, что " -"настройки позволяют определять адреса служебных записей домена \"{domain}\". " -"Примеры настройки DNS с помощью команд CLI или веб-интерфейса доступны в " -"документации. " - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" -"Поскольку IPA не управляет записями DNS, следует настроить DNS так, чтобы " -"система определяла адрес домена \"{domain}\" по данным узлов IPA и наоборот." - -msgid "Unable to verify write permissions to the AD" -msgstr "Не удалось проверить разрешения на запись в AD" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" -"Указано недостаточно аргументов для выполнения настройки отношения доверия" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Удалено отношение доверия \"%(value)s\"" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" -"\n" -" Изменить отношение доверия (для будущего использования).\n" -"\n" -" В текущей версии для изменения атрибутов LDAP доступен только параметр " -"по умолчанию. В последующих версиях будут добавлены более специфичные " -"параметры.\n" -" " - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" -"Изменено отношение доверия \"%(value)s\" (изменения будут применены через 60 " -"секунд)" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "установлено соответствие %(count)d отношения доверия" -msgstr[1] "установлено соответствие %(count)d отношений доверия" -msgstr[2] "установлено соответствие %(count)d отношений доверия" - -msgid "trust configuration" -msgstr "конфигурация отношений доверия" - -msgid "Global Trust Configuration" -msgstr "Глобальная конфигурация отношений доверия" - -msgid "IPA AD trust agents" -msgstr "Агенты отношений доверия AD IPA" - -msgid "IPA servers configured as AD trust agents" -msgstr "IPA-серверы, настроенные в качестве агентов отношений доверия AD" - -msgid "IPA AD trust controllers" -msgstr "Контролёры отношений доверия AD IPA" - -msgid "IPA servers configured as AD trust controllers" -msgstr "IPA-серверы, настроенные в качестве контролёров отношений доверия AD" - -msgid "unsupported trust type" -msgstr "неподдерживаемый тип отношения доверия" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "Изменена конфигурация отношений доверия \"%(value)s\"" - -msgid "SID" -msgstr "Идентификатор безопасности (SID)" - -msgid "sidgen_was_run" -msgstr "sidgen_was_run" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" -"Для выполнения этой команды должна существовать группа \"editors\", но такая " -"группа не найдена." - -msgid "trust domain" -msgstr "надёжный домен" - -msgid "trust domains" -msgstr "надёжные домены" - -msgid "Trusted domains" -msgstr "Доверенные домены" - -msgid "Trusted domain" -msgstr "Доверенный домен" - -msgid "Domain enabled" -msgstr "Домен включён" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "Удалены сведения о доверенном домене \"%(value)s\"" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"невозможно удалить корневой домен отношения доверия, используйте trust-del " -"для удаления самого отношения доверия" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" -"Список надёжных доменов успешно обновлён. Используйте команду trustdomain-" -"find для вывода этого списка." - -#, fuzzy -#| msgid "IPA servers configured as AD trust agents" -msgid "Configure this server as a trust agent." -msgstr "IPA-серверы, настроенные в качестве агентов отношений доверия AD" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, fuzzy -#| msgid "not allowed to modify user entries" -msgid "not allowed to remotely add agent" -msgstr "запрещено изменять записи пользователей" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Включён надёжный домен \"%(value)s\"" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" -"Корневой домен отношения доверия всегда включён для существующего доверия" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Отключён надёжный домен \"%(value)s\"" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"невозможно отключить корневой домен отношения доверия, используйте trust-del " -"для удаления самого отношения доверия" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" -"\n" -"Сопоставление сертификатов с записями пользователей\n" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" -"\n" -"Управление конфигурацией и правилами сопоставления сертификатов с записями " -"пользователей.\n" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" -"\n" -"В IPA предусмотрена поддержка использования сертификатов для аутентификации. " -"Сертификаты могут храниться или в записи пользователя (весь сертификат в " -"атрибуте usercertificate), или просто привязываться к записи пользователя " -"путём сопоставления. С помощью этого кода можно управлять правилами, которые " -"позволяют связывать сертификат с записью пользователя.\n" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" -"\n" -"Показать глобальную конфигурацию сопоставления сертификатов с записями " -"пользователей:\n" -" ipa certmapconfig-show\n" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" -"\n" -" Изменить глобальную конфигурацию сопоставления сертификатов с записями " -"пользователей:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" -"\n" -" Создать новое правило сопоставления сертификатов с записями пользователей:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" -"\n" -" Изменить правило сопоставления сертификатов с записями пользователей:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" -"\n" -" Отключить правило сопоставления сертификатов с записями пользователей:\n" -" ipa certmaprule-disable rule1\n" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" -"\n" -" Включить правило сопоставления сертификатов с записями пользователей:\n" -" ipa certmaprule-enable rule1\n" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" -"\n" -" Показать сведения о правиле сопоставления сертификатов с записями " -"пользователей:\n" -" ipa certmaprule-show rule1\n" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" -"\n" -" Найти все правила сопоставления сертификатов с записями пользователей в " -"указанном домене:\n" -" ipa certmaprule-find --domain example.com\n" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" -"\n" -" Удалить правило сопоставления сертификатов с записями пользователей:\n" -" ipa certmaprule-del rule1\n" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" -"Домен(ы) \"%s\" не могут использоваться для применения проверки " -"altSecurityIdentities." - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" -"Правило сопоставления с altSecurityIdentities должно применяться к " -"доверенному домену Active Directory, но с правилом не был связан ни один " -"домен." - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "Домен %s не является ни доменом IPA, ни доверенным доменом." - -msgid "Certificate Identity Mapping configuration options" -msgstr "" -"Параметры конфигурации сопоставления сертификатов с записями пользователей" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" -"Глобальная конфигурация сопоставления сертификатов с записями пользователей" - -msgid "Prompt for the username" -msgstr "Запрос имени пользователя" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" -"Запрашивать имя пользователя, когда с сертификатом сопоставляются несколько " -"записей пользователей" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" -"Изменить конфигурацию сопоставления сертификатов с записями пользователей." - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" -"Показать текущую конфигурацию сопоставления сертификатов с записями " -"пользователей." - -msgid "Certificate Identity Mapping Rules" -msgstr "Правила сопоставления сертификатов с записями пользователей" - -msgid "Certificate Identity Mapping Rule" -msgstr "Правило сопоставления сертификатов с записями пользователей" - -msgid "Certificate Identity Mapping Rule name" -msgstr "Имя правила сопоставления сертификатов с записями пользователей" - -msgid "Certificate Identity Mapping Rule description" -msgstr "Описание правила сопоставления сертификатов с записями пользователей" - -msgid "Mapping rule" -msgstr "Правило сопоставления" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" -"Правило, которое используется для сопоставления сертификата с записью " -"пользователя" - -msgid "Matching rule" -msgstr "Правило соответствия" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" -"Правило, которое используется для определения того, пригоден ли сертификат " -"для аутентификации" - -msgid "Domain where the user entry will be searched" -msgstr "Домен, в котором будет выполняться поиск записи пользователя" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "Приоритет правила (чем больше число, тем ниже приоритет)" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" -"Создать новое правило сопоставления сертификатов с записями пользователей." - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" -"Добавлено правило сопоставления сертификатов с записями пользователей " -"\"%(value)s\"" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "Изменить правило сопоставления сертификатов с записями пользователей." - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" -"Изменено правило сопоставления сертификатов с записями пользователей " -"\"%(value)s\"" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "Поиск правил сопоставления сертификатов с записями пользователей." - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -"установлено соответствие %(count)d правила сопоставления сертификатов с " -"записями пользователей" -msgstr[1] "" -"установлено соответствие %(count)d правил сопоставления сертификатов с " -"записями пользователей" -msgstr[2] "" -"установлено соответствие %(count)d правил сопоставления сертификатов с " -"записями пользователей" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" -"Показать сведения о правиле сопоставления сертификатов с записями " -"пользователей." - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "Удалить правило сопоставления сертификатов с записями пользователей." - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" -"Удалено правило сопоставления сертификатов с записями пользователей " -"\"%(value)s\"" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "Включить правило сопоставления сертификатов с записями пользователей." - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" -"Включено правило сопоставления сертификатов с записями пользователей " -"\"%(value)s\"" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "Отключить правило сопоставления сертификатов с записями пользователей." - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" -"Отключено правило сопоставления сертификатов с записями пользователей " -"\"%(value)s\"" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" -"Не удалось установить соединение с sssd с помощью SystemBus. Подробные " -"сведения доступны в файле error_log" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" -"Не удалось найти пользователей с помощью SystemBus. Подробные сведения " -"доступны в файле error_log" - -msgid "User logins" -msgstr "Имена входа пользователя" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" -"\n" -" Поиск пользователей, соответствующих предоставленному сертификату.\n" -"\n" -" Чтобы получить список соответствующих пользователей, эта команда " -"использует данные SSSD, следовательно, она может возвращать кэшированные " -"данные. Подробнее об очистке кэша SSSD можно узнать из документации к " -"sss_cache.\n" -" " - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "установлено соответствие %(count)s пользователя" -msgstr[1] "установлено соответствие %(count)s пользователей" -msgstr[2] "установлено соответствие %(count)s пользователей" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" -"невозможно добавить разрешение \"%(perm)s\" с типом привязки \"%(bindtype)s" -"\" в привилегию" - -msgid "Privilege" -msgstr "Привилегия" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "Добавлена привилегия \"%(value)s\"" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Удалена привилегия \"%(value)s\"" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "Изменена привилегия \"%(value)s\"" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "установлено соответствие %(count)d привилегии" -msgstr[1] "установлено соответствие %(count)d привилегий" -msgstr[2] "установлено соответствие %(count)d привилегий" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" -"\n" -"Сеансовая поддержка для IPA\n" - msgid "" "\n" "Services\n" @@ -30459,901 +31328,36 @@ msgstr "Удалить псевдоним учётной записи из сл msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "Удалены псевдонимы учётной записи службы \"%(value)s\"" -msgid "delegation" -msgstr "делегирование" +msgid "self service permission" +msgstr "разрешение самообслуживания" -msgid "delegations" -msgstr "делегирования" +msgid "self service permissions" +msgstr "разрешения самообслуживания" -msgid "Delegations" -msgstr "Делегирования" +msgid "Self Service Permissions" +msgstr "Разрешения самообслуживания" -msgid "Delegation" -msgstr "Делегирование" +msgid "Self Service Permission" +msgstr "Разрешение самообслуживания" #, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "Добавлено делегирование \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" +msgstr "Добавлено самообслуживание \"%(value)s\"" #, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "Удалено делегирование \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Удалено самообслуживание \"%(value)s\"" #, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "Изменено делегирование \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" +msgstr "Изменено самообслуживание \"%(value)s\"" #, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "установлено соответствие %(count)d делегирования" -msgstr[1] "установлено соответствие %(count)d делегирований" -msgstr[2] "установлено соответствие %(count)d делегирований" - -msgid "The deny type has been deprecated." -msgstr "Тип \"deny\" больше не поддерживается." - -msgid "HBAC rules" -msgstr "правила HBAC" - -msgid "HBAC Rules" -msgstr "Правила HBAC" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "Добавлено правило HBAC \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Удалено правило HBAC \"%(value)s\"" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "Изменено правило HBAC \"%(value)s\"" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "установлено соответствие %(count)d правила HBAC" -msgstr[1] "установлено соответствие %(count)d правил HBAC" -msgstr[2] "установлено соответствие %(count)d правил HBAC" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "Включено правило HBAC \"%(value)s\"" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "Отключено правило HBAC \"%(value)s\"" - -msgid "Access time" -msgstr "Время доступа" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "Добавить узлы-источники и группы узлов в правило HBAC." - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" -"\n" -"Имитация использования управления доступом на основе узла\n" -"\n" -"Правила HBAC управляют тем, кто и на каких узлах сможет получать доступ к " -"определённым службам. Вы можете воспользоваться HBAC для определения тех " -"пользователей и групп, которые будут иметь доступ к определённой службе или " -"группе служб на целевом узле. \n" -"\n" -"Так как применение правил HBAC подразумевает использование рабочей среды, " -"этот подключаемый модуль предназначен для обеспечения имитации оценки правил " -"HBAC при отсутствии доступа к рабочей среде.\n" -"\n" -" Проверка тестового пользователя, который обращается к службе на именованном " -"узле, на соответствие существующим включённым правилам.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" Параметры --user, --host и --service являются обязательными, остальные " -"можно не указывать.\n" -"\n" -" Если указан параметр --rules, имитировать включение указанных правил и " -"проверить возможность входа пользователя в случае использования только этих " -"правил.\n" -"\n" -" Если указан параметр --enabled, добавить все включённые правила HBAC к " -"имитации.\n" -"\n" -" Если указан параметр --disabled, добавить все отключённые правила HBAC к " -"имитации.\n" -"\n" -" Если указан параметр --nodetail, не возвращать данные о соответствующих или " -"не соответствующих правилах.\n" -"\n" -" Если одновременно указаны параметры --rules и --enabled, выполнить имитацию " -"--rules _и_\n" -" всех включённых правил IPA.\n" -"\n" -" Если не указан параметр --rules, выполнить имитацию всех включённых правил " -"IPA.\n" -" По умолчанию в IPA имеется общее ограничение количества извлекаемых " -"записей, его можно изменить с помощью параметра --sizelimit.\n" -"\n" -" ПРИМЕРЫ:\n" -"\n" -" 1. Использовать все включённые правила HBAC в базе данных IPA:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Несоответствующие правила: my-second-rule\n" -" Несоответствующие правила: my-third-rule\n" -" Несоответствующие правила: myrule\n" -" Соответствующие правила: allow_all\n" -"\n" -" 2. Отключить подробный отчёт о применении правил:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -"\n" -" 3. Проверить явно указанные правила HBAC:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Доступ предоставлен: Нет\n" -" ---------------------\n" -" Несоответствующие правила: my-second-rule\n" -" Несоответствующие правила: myrule\n" -"\n" -" 4. Использовать все включённые правила HBAC в базе данных IPA + явно " -"указанные правила:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Несоответствующие правила: my-second-rule\n" -" Несоответствующие правила: my-third-rule\n" -" Несоответствующие правила: myrule\n" -" Соответствующие правила: allow_all\n" -"\n" -" 5. Проверить все отключённые правила HBAC в базе данных IPA:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Доступ предоставлен: Нет\n" -" ---------------------\n" -" Несоответствующие правила: new-rule\n" -"\n" -" 6. Проверить все отключённые правила HBAC в базе данных IPA + явно " -"указанные правила:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Доступ предоставлен: Нет\n" -" ---------------------\n" -" Несоответствующие правила: my-second-rule\n" -" Несоответствующие правила: my-third-rule\n" -" Несоответствующие правила: myrule\n" -"\n" -" 7. Проверить все (включённые и отключённые) правила HBAC в базе данных " -"IPA:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Несоответствующие правила: my-second-rule\n" -" Несоответствующие правила: my-third-rule\n" -" Несоответствующие правила: myrule\n" -" Несоответствующие правила: new-rule\n" -" Соответствующие правила: allow_all\n" -"\n" -"\n" -"HBACTEST И ДОВЕРЕННЫЕ ДОМЕНЫ\n" -"\n" -"Если в IPA настроен внешний доверенный домен, правила HBAC также применяются " -"к пользователям, которые выполняют доступ к ресурсам IPA из доверенного " -"домена. Пользователи и группы доверенного домена (и их SID) затем могут быть " -"привязаны к внешним группам, которые могут быть участниками POSIX-групп в " -"IPA. Такие привязки можно использовать в правилах HBAC, тем самым разрешая " -"доступ к ресурсам, которые защищены системой HBAC.\n" -"\n" -"Подключаемый модуль hbactest позволяет проверять доступ как для локальных " -"пользователей IPA, так и для пользователей из доверенных доменов, как с " -"полным именем пользователя, так и по SID пользователей. В таких именах " -"пользователей должен быть указан доверенный домен в краткой форме (DOMAIN" -"\\Administrator) или имя учётной записи пользователя (UPN), Administrator@ad." -"test.\n" -"\n" -"Обратите внимание, что выполнять hbactest с аргументом пользователя " -"доверенного домена в параметре --user могут только участники группы \"trust " -"admins\".\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" 1. Проверить, соответствует ли пользователь из доверенного домена, " -"указанный по краткому имени, какому-либо правилу:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Соответствующие правила: allow_all\n" -" Соответствующие правила: can_login\n" -"\n" -" 2. Проверить, соответствует ли пользователь из доверенного домена, " -"указанный по имени домена, какому-либо правилу:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Соответствующие правила: allow_all\n" -" Соответствующие правила: can_login\n" -"\n" -" 3. Проверить, соответствует ли пользователь из доверенного домена, " -"указанный по SID, какому-либо правилу:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Соответствующие правила: allow_all\n" -" Соответствующие правила: can_login\n" -"\n" -" 4. Проверить, соответствует ли другой пользователь из доверенного " -"домена, указанный по SID, какому-либо правилу:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Соответствующие правила: allow_all\n" -" Несоответствующие правила: can_login\n" -"\n" -" 5. Проверить, соответствует ли другой пользователь из доверенного домена, " -"указанный по краткому имени, какому-либо правилу:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Соответствующие правила: allow_all\n" -" Несоответствующие правила: can_login\n" - -msgid "Unresolved rules in --rules" -msgstr "Непригодные к обработке правила в --rules" - -#, python-format -msgid "Access granted: %s" -msgstr "Доступ предоставлен: %s" - -msgid "operation not defined" -msgstr "операция не определена" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "не разрешено выполнение операции: %s" - -msgid "No such virtual command" -msgstr "Такая виртуальная команда отсутствует" - -msgid "Member service groups" -msgstr "Группы служб — участники" - -msgid "Member HBAC service groups" -msgstr "Группы служб HBAC — участники" - -#, fuzzy -#| msgid "Remove user ID overrides" -msgid "Member ID user overrides" -msgstr "Удалить переопределения ID пользователя" - -#, fuzzy -#| msgid "Indirect Member users" -msgid "Indirect Member ID user overrides" -msgstr "Пользователи с непрямым участием" - -msgid "Indirect Member permissions" -msgstr "Разрешения с непрямым участием" - -msgid "Indirect Member HBAC service" -msgstr "Служба HBAC с непрямым участием" - -msgid "Indirect Member HBAC service group" -msgstr "Группа служб HBAC с непрямым участием" - -msgid "Invalid format. Should be name=value" -msgstr "Неправильный формат. Должно быть имя=значение" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Главный IPA-сервер не может быть удалён или отключён" - -msgid "entry" -msgstr "запись" - -msgid "entries" -msgstr "записи" - -msgid "Entry" -msgstr "Запись" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "запись контейнера (%(container)s) не найдена" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s не найден" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "%(oname)s с именем \"%(pkey)s\" уже существует" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "атрибут \"%(attribute)s\" запрещён" - -#, fuzzy, python-format -#| msgid "attribute \"%s\" not allowed" -msgid "these attributes are not allowed: %(attrs)s" -msgstr "атрибут \"%s\" нельзя использовать" - -msgid "attribute is not configurable" -msgstr "настройка атрибута невозможна" - -msgid "No such attribute on this entry" -msgstr "В этой записи нет такого атрибута" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "Переименовать объект %(ldap_obj_name)s" - -msgid "the entry was deleted while being modified" -msgstr "запись была удалена во время внесения изменений" - -#, python-format -msgid "%s" -msgstr "%s" - -#, python-format -msgid "%s to add" -msgstr "%s для добавления" - -#, python-format -msgid "%s to remove" -msgstr "%s для удаления" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "Поиск %(searched_object)s с этими %(relationship)s %(ldap_object)s." - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "Поиск %(searched_object)s без этих %(relationship)s %(ldap_object)s." - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "добавлено значение атрибута в запись %(value)s" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "удалены значения атрибута из записи %(value)s" - -msgid "one or more values to remove" -msgstr "одно или несколько значений, которые следует удалить" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" -"\n" -"Основной пользователь\n" -"\n" -"Содержит общие определения для пользователя или неподтверждённого " -"пользователя\n" - -msgid "must be TRUE or FALSE" -msgstr "должно быть TRUE или FALSE" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" -"Класс объектов ipaNTUserAttrs отсутствует, запись пользователя не может " -"иметь атрибуты SMB." - -msgid "User password expiration" -msgstr "Окончание действия пароля пользователя" - -msgid "SMB logon script path" -msgstr "Путь к сценарию входа SMB" - -msgid "SMB profile path" -msgstr "Путь к профилю SMB" - -msgid "SMB Home Directory" -msgstr "Домашний каталог SMB" - -msgid "SMB Home Directory Drive" -msgstr "Диск домашнего каталога SMB" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "неправильный формат почты: %(email)s" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "руководитель %(manager)s не найден" - -msgid "Issuer of the certificate" -msgstr "Издатель сертификата" - -msgid "Subject of the certificate" -msgstr "Субъект сертификата" - -msgid "cannot have an empty subject" -msgstr "поле субъекта не может быть пустым" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "невозможно одновременно указать subject/issuer и certificate" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "невозможно одновременно указать subject/issuer и ipacertmapdata" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" -"Добавить одно или несколько сопоставлений сертификатов в запись пользователя." - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" -"Добавлены сопоставления сертификатов в запись пользователя \"%(value)s\"" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" -"Удалить одно или несколько сопоставлений сертификатов из записи пользователя." - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" -"Удалены сопоставления сертификатов из записи пользователя \"%(value)s\"" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" -"\n" -"Подключаемый модуль для выполнения нескольких вызовов ipa с помощью одного " -"удалённого вызова процедур \n" -"\n" -"Чтобы запустить этот код на легком сервере (lite-server), выполните " -"следующие команды:\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"где содержимое файла batch_request.json соответствует следующему примеру\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"Формат ответа точно так же распределяется по уровням вложенности. На верхнем " -"уровне:\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"а далее находится вложенный ответ для каждого метода команды IPA, " -"отправленного в запросе\n" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" -"Совершать несколько вызовов ipa с помощью одного удалённого вызова процедур " - -msgid "must contain a tuple (list, dict)" -msgstr "должно содержать кортеж (список, словарь)" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Добавлен пользователь \"%(value)s\"" - -msgid "Default group for new users is not POSIX" -msgstr "Группа по умолчанию для новых пользователей не является POSIX-группой" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Удален пользователь \"%(value)s\"" - -#, python-format -msgid "%s: user is already preserved" -msgstr "%s: пользователь уже хранится" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Изменён пользователь \"%(value)s\"" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Учётная запись пользователя \"%(value)s\" возвращена после удаления" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "пользователь \"%s\" уже активен" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Учётная запись неподтверждённого пользователя \"%(value)s\"" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Учётная запись пользователя \"%(value)s\" отключена" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "Учётная запись пользователя \"%(value)s\" включена" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" -"\n" -"Разблокировка учётной записи пользователя.\n" -" \n" -"Учётная запись может быть заблокирована, если в течение определённого " -"периода времени слишком большое количество раз был введён неверный пароль " -"(соответствующие ограничения регулируются политикой паролей). Запись " -"блокируется временно, она может быть разблокирована администратором." - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Учётная запись \"%(value)s\" разблокирована" - -msgid "Failed logins" -msgstr "Неудачные попытки входа" - -msgid "Last successful authentication" -msgstr "Последняя успешная аутентификация" - -msgid "Last failed authentication" -msgstr "Последняя ошибка при аутентификации" - -msgid "Time now" -msgstr "Время сейчас" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" -"\n" -"Состояние блокировки учётной записи пользователя.\n" -"\n" -" Учётная запись может быть заблокирована, если в течение определённого " -"периода времени слишком большое количество раз был введён неверный пароль " -"(соответствующие ограничения регулируются политикой паролей). Запись " -"блокируется временно, она может быть разблокирована администратором.\n" -"\n" -" Эта программа соединяется с каждым главным IPA-сервером и показывает " -"состояние блокировки на каждом из них.\n" -"\n" -" Чтобы определить, заблокирована ли учётная запись на указанном сервере, " -"потребуется сравнить количество неудачных попыток входа и время последней " -"неудачной попытки с эталонными значениями. Для блокировки учётной записи " -"количество неудачных попыток входа должно превысить значение maxfail в " -"течение временного интервала failinterval в соответствии с политикой " -"паролей, связанной с пользователем.\n" -"\n" -" Счётчик неудачных попыток изменяется только тогда, когда пользователь " -"выполняет попытку войти, поэтому учётная запись может казаться " -"заблокированной, но время, прошедшее с последней неудачной попытки входа, " -"превышает время блокировки (lockouttime), установленное политикой паролей. " -"Это означает, что пользователь может войти в систему снова.\n" -" " - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "Ошибка %(host)s: %(error)s" - -#, python-format -msgid "%(host)s failed" -msgstr "Ошибка %(host)s" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Учётная запись отключена: %(disabled)s" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Добавлены сертификаты в запись пользователя \"%(value)s\"" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Удалены сертификаты из записи пользователя \"%(value)s\"" - -msgid "Add new principal alias to the user entry" -msgstr "Добавить новый псевдоним учётной записи в запись пользователя." - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Добавлены новые псевдонимы в запись пользователя \"%(value)s\"" - -msgid "Remove principal alias from the user entry" -msgstr "Удалить псевдоним учётной записи из записи пользователя." - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Удалены псевдонимы из записи пользователя \"%(value)s\"" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "установлено соответствие %(count)d самообслуживания" +msgstr[1] "установлено соответствие %(count)d самообслуживаний" +msgstr[2] "установлено соответствие %(count)d самообслуживаний" #, python-format msgid "all masters must have %(role)s role enabled" @@ -31559,6 +31563,27 @@ msgstr "" "Нетранзитивное внешнее отношение доверия с областью (realm) Kerberos, " "которая соответствует RFC4120" +msgid "Request must be a dict" +msgstr "Запрос должен принадлежать к типу словаря (dict)" + +msgid "Request is missing \"method\"" +msgstr "В запросе не указан метод (\"method\")" + +msgid "Request is missing \"params\"" +msgstr "В запросе не указаны параметры (\"params\")" + +msgid "params must be a list" +msgstr "params должны быть списком (list)" + +msgid "params must contain [args, options]" +msgstr "params должен содержать записи [аргументы, параметры]" + +msgid "params[0] (aka args) must be a list" +msgstr "params [0] (или аргументы) должны быть списком (list)" + +msgid "params[1] (aka options) must be a dict" +msgstr "params [1] (или параметры) должны принадлежать к типу словаря (dict)" + #, python-format msgid "" "\n" @@ -31586,27 +31611,6 @@ msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" "Топология не позволяет серверу %(server)s выполнять репликацию с серверами:" -msgid "Request must be a dict" -msgstr "Запрос должен принадлежать к типу словаря (dict)" - -msgid "Request is missing \"method\"" -msgstr "В запросе не указан метод (\"method\")" - -msgid "Request is missing \"params\"" -msgstr "В запросе не указаны параметры (\"params\")" - -msgid "params must be a list" -msgstr "params должны быть списком (list)" - -msgid "params must contain [args, options]" -msgstr "params должен содержать записи [аргументы, параметры]" - -msgid "params[0] (aka args) must be a list" -msgstr "params [0] (или аргументы) должны быть списком (list)" - -msgid "params[1] (aka options) must be a dict" -msgstr "params [1] (или параметры) должны принадлежать к типу словаря (dict)" - #, python-format msgid "must equal %r" msgstr "должно равняться %r" diff --git a/po/sk.po b/po/sk.po index 77322dac5..0762d5fc3 100644 --- a/po/sk.po +++ b/po/sk.po @@ -3,7 +3,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2019-11-11 10:26+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Slovak\n" @@ -14,6 +14,104 @@ msgstr "" "Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to add" +msgid "Failed to open keytab\n" +msgstr "Zlyhalo pridanie" + +#, fuzzy, c-format +#| msgid "not found" +msgid "principal not found\n" +msgstr "Nenašlo sa" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "not found" +msgid "realm not found\n" +msgstr "Nenašlo sa" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Realm name" +msgstr "Premenovať" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + #, c-format msgid "Out of memory!\n" msgstr "" @@ -279,104 +377,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, fuzzy, c-format -#| msgid "Failed to add" -msgid "Failed to open keytab\n" -msgstr "Zlyhalo pridanie" - -#, fuzzy, c-format -#| msgid "not found" -msgid "principal not found\n" -msgstr "Nenašlo sa" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -#| msgid "not found" -msgid "realm not found\n" -msgstr "Nenašlo sa" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -#, fuzzy -#| msgid "Rename" -msgid "Realm name" -msgstr "Premenovať" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - #, fuzzy, c-format #| msgid "Replication configuration" msgid "cannot open configuration file %s\n" @@ -10234,6 +10234,115 @@ msgid "" "Establish bi-directional trust. By default trust is inbound one-way only." msgstr "" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +#| msgid "Group description" +msgid "Profile description" +msgstr "Popis skupiny" + +msgid "Brief description of this profile" +msgstr "" + +#, fuzzy +#| msgid "Service Certificate" +msgid "Store issued certificates" +msgstr "Certifikát služby" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "Odstrániť certifikačný profil" + +#, fuzzy +#| msgid "Certificate Profiles" +msgid "Search for Certificate Profiles." +msgstr "Certifikačné profily" + +msgid "Import a Certificate Profile." +msgstr "Importovať certifikačný profil" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +#, fuzzy +#| msgid "Modify CA configuration." +msgid "Modify Certificate Profile configuration." +msgstr "Upraviť CA konfiguráciu." + +#, fuzzy +#| msgid "Profile configuration" +msgid "File containing profile configuration" +msgstr "Configurácia profilu" + +#, fuzzy +#| msgid "Delete a Certificate Profile." +msgid "Display the properties of a Certificate Profile." +msgstr "Odstrániť certifikačný profil" + +#, fuzzy +#| msgid "Profile configuration" +msgid "Write profile configuration to file" +msgstr "Configurácia profilu" + msgid "" "\n" "ID ranges\n" @@ -10446,115 +10555,6 @@ msgid "" " " msgstr "" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -#| msgid "Group description" -msgid "Profile description" -msgstr "Popis skupiny" - -msgid "Brief description of this profile" -msgstr "" - -#, fuzzy -#| msgid "Service Certificate" -msgid "Store issued certificates" -msgstr "Certifikát služby" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "Odstrániť certifikačný profil" - -#, fuzzy -#| msgid "Certificate Profiles" -msgid "Search for Certificate Profiles." -msgstr "Certifikačné profily" - -msgid "Import a Certificate Profile." -msgstr "Importovať certifikačný profil" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -#, fuzzy -#| msgid "Modify CA configuration." -msgid "Modify Certificate Profile configuration." -msgstr "Upraviť CA konfiguráciu." - -#, fuzzy -#| msgid "Profile configuration" -msgid "File containing profile configuration" -msgstr "Configurácia profilu" - -#, fuzzy -#| msgid "Delete a Certificate Profile." -msgid "Display the properties of a Certificate Profile." -msgstr "Odstrániť certifikačný profil" - -#, fuzzy -#| msgid "Profile configuration" -msgid "Write profile configuration to file" -msgstr "Configurácia profilu" - #, fuzzy #| msgid "Add users that can manage this token." msgid "Remove users that can manage this token." @@ -12851,175 +12851,20 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "Additional instructions:" -msgstr "" +msgid "Results are truncated, try a more specific search" +msgstr "Výsledky sú skrátené, vyskúšajte viac špecifické vyhľadávanie" #, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" +msgid "Unknown option: %(option)s" +msgstr "Neznáma voľba: %(option)s" + +msgid "Client version. Used to determine if server will accept request." msgstr "" -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" -"Sémantika DNS forwarderov je zmenená od IPA 4.0.\n" -"Pravdepodobne ste chceli použiť (dnsforwardzone-*).\n" -"Pre viac informácií prosím prečítajte dokumentáciu." - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" -"DNSSEC podpora je experimentálna.\n" -"%(additional_info)s" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "'%(option)s'voľba je zastaraná. %(additional_info)s" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" -"Sémantika %(label)s bola zmenená. %(current_behavior)s\n" -"%(hint)s" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "DNS server %(server)s: %(error)s." - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"DNS server %(server)s nepodporuje DNSSEC: %(error)s.\n" -"Ak je DNSSEC validácia aktivovaná na IPA serveroch, prosím deaktivujte ju." - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgid "any of the configured servers" msgstr "" -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"DNS server %(server)s nepodporuje EDNS0 (RFC 6891): %(error)s.\n" -"Ak je DNSSEC validácia aktivovaná na IPA serveroch, prosím deaktivujte ju." - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" -"DNSSEC validácia zlyhala: %(error)s.\n" -"Prosím overte Vašu DNSSEC konfiguráciu alebo deaktivujte DNSSEC validáciu na " -"všetkých IPA serveroch." - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "'%(command)s' príkaz je zastaraný %(additional_info)s" - -#, python-format -msgid "%(line)s" -msgstr "%(line)s" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." +msgid "Exceeded number of tries to forward a request." msgstr "" #, fuzzy, python-format @@ -13083,6 +12928,159 @@ msgstr "Zastarané voľby" msgid "No file to read" msgstr "Zlyhalo pridanie" +msgid "incorrect type" +msgstr "Nesprávný typ" + +msgid "Only one value is allowed" +msgstr "Len jedna hodnota je povolená" + +msgid "this option is deprecated" +msgstr "táto voľba je zastaraná" + +msgid "must be True or False" +msgstr "musí byť True alebo False" + +msgid "must be an integer" +msgstr "musí byť integer" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "musí byť najmenej %(minvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "môže byť najviac %(maxvalue)d" + +msgid "must be a decimal number" +msgstr "musí byť desiatkové číslo" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "musí byť najmenej %(minvalue)s" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "môže byť najviac %(maxvalue)s" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "musí byť binárny údaj" + +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)d" +msgid "must be at least %(minlength)d bytes" +msgstr "musí byť najmenej %(minvalue)d" + +#, fuzzy, python-format +#| msgid "can be at most %(maxvalue)d" +msgid "can be at most %(maxlength)d bytes" +msgstr "môže byť najviac %(maxvalue)d" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "must be a certificate" +msgstr "Revokácia certifikátu." + +#, fuzzy +#| msgid "Certificate requested" +msgid "must be a certificate signing request" +msgstr "Certifikačná požiadavka" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "musí byť Unicode text" + +msgid "Leading and trailing spaces are not allowed" +msgstr "Počiatočné a koncové medzery nie sú povolené" + +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)d" +msgid "must be at least %(minlength)d characters" +msgstr "musí byť najmenej %(minvalue)d" + +#, fuzzy, python-format +#| msgid "can be at most %(maxvalue)d" +msgid "can be at most %(maxlength)d characters" +msgstr "môže byť najviac %(maxvalue)d" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Found '%(value)s'" +msgid "must be '%(value)s'" +msgstr "Nájdené '%(value)s'" + +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)s" +msgid "must be one of %(values)s" +msgstr "musí byť najmenej %(minvalue)s" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be datetime value" +msgstr "musí byť najmenej %(minvalue)d" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be DNS name" +msgstr "musí byť integer" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be absolute" +msgstr "musí byť integer" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be relative" +msgstr "musí byť True alebo False" + +#, fuzzy +#| msgid "must be binary data" +msgid "must be dictionary" +msgstr "musí byť binárny údaj" + +msgid "must be Kerberos principal" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted profile \"%(value)s\"" +msgid "Malformed principal: '%(value)s'" +msgstr "Odstránený profil \"%(value)s\"" + +#, fuzzy +#| msgid "New password is required" +msgid "Service principal is required" +msgstr "Nové heslo je povinné" + msgid "A dictionary representing an LDAP entry" msgstr "" @@ -13092,16 +13090,6 @@ msgstr "" msgid "All commands should at least have a result" msgstr "" -msgid "Results are truncated, try a more specific search" -msgstr "Výsledky sú skrátené, vyskúšajte viac špecifické vyhľadávanie" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "Neznáma voľba: %(option)s" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" @@ -13481,172 +13469,175 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" -msgid "incorrect type" -msgstr "Nesprávný typ" - -msgid "Only one value is allowed" -msgstr "Len jedna hodnota je povolená" - -msgid "this option is deprecated" -msgstr "táto voľba je zastaraná" - -msgid "must be True or False" -msgstr "musí byť True alebo False" - -msgid "must be an integer" -msgstr "musí byť integer" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "musí byť najmenej %(minvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "môže byť najviac %(maxvalue)d" - -msgid "must be a decimal number" -msgstr "musí byť desiatkové číslo" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "musí byť najmenej %(minvalue)s" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "môže byť najviac %(maxvalue)s" +msgid "Additional instructions:" +msgstr "" #, python-format msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" +"Sémantika DNS forwarderov je zmenená od IPA 4.0.\n" +"Pravdepodobne ste chceli použiť (dnsforwardzone-*).\n" +"Pre viac informácií prosím prečítajte dokumentáciu." + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" +"DNSSEC podpora je experimentálna.\n" +"%(additional_info)s" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "'%(option)s'voľba je zastaraná. %(additional_info)s" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" +"Sémantika %(label)s bola zmenená. %(current_behavior)s\n" +"%(hint)s" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "DNS server %(server)s: %(error)s." + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"DNS server %(server)s nepodporuje DNSSEC: %(error)s.\n" +"Ak je DNSSEC validácia aktivovaná na IPA serveroch, prosím deaktivujte ju." + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." msgstr "" #, python-format -msgid "must match pattern \"%(pattern)s\"" +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" - -msgid "must be binary data" -msgstr "musí byť binárny údaj" - -#, fuzzy, python-format -#| msgid "must be at least %(minvalue)d" -msgid "must be at least %(minlength)d bytes" -msgstr "musí byť najmenej %(minvalue)d" - -#, fuzzy, python-format -#| msgid "can be at most %(maxvalue)d" -msgid "can be at most %(maxlength)d bytes" -msgstr "môže byť najviac %(maxvalue)d" +"DNS server %(server)s nepodporuje EDNS0 (RFC 6891): %(error)s.\n" +"Ak je DNSSEC validácia aktivovaná na IPA serveroch, prosím deaktivujte ju." #, python-format -msgid "must be exactly %(length)d bytes" +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." msgstr "" - -#, fuzzy -#| msgid "Revoke a certificate." -msgid "must be a certificate" -msgstr "Revokácia certifikátu." - -#, fuzzy -#| msgid "Certificate requested" -msgid "must be a certificate signing request" -msgstr "Certifikačná požiadavka" +"DNSSEC validácia zlyhala: %(error)s.\n" +"Prosím overte Vašu DNSSEC konfiguráciu alebo deaktivujte DNSSEC validáciu na " +"všetkých IPA serveroch." #, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "musí byť Unicode text" - -msgid "Leading and trailing spaces are not allowed" -msgstr "Počiatočné a koncové medzery nie sú povolené" - -#, fuzzy, python-format -#| msgid "must be at least %(minvalue)d" -msgid "must be at least %(minlength)d characters" -msgstr "musí byť najmenej %(minvalue)d" - -#, fuzzy, python-format -#| msgid "can be at most %(maxvalue)d" -msgid "can be at most %(maxlength)d characters" -msgstr "môže byť najviac %(maxvalue)d" - -#, python-format -msgid "must be exactly %(length)d characters" +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" msgstr "" #, python-format -msgid "The character %(char)r is not allowed." +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." msgstr "" -#, fuzzy, python-format -#| msgid "Found '%(value)s'" -msgid "must be '%(value)s'" -msgstr "Nájdené '%(value)s'" - -#, fuzzy, python-format -#| msgid "must be at least %(minvalue)s" -msgid "must be one of %(values)s" -msgstr "musí byť najmenej %(minvalue)s" - -#, fuzzy -#| msgid "must be at least %(minvalue)d" -msgid "must be datetime value" -msgstr "musí byť najmenej %(minvalue)d" - -msgid "does not match any of accepted formats: " +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." msgstr "" -msgid "incomplete time value" +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." msgstr "" -#, fuzzy -#| msgid "must be an integer" -msgid "must be DNS name" -msgstr "musí byť integer" +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "'%(command)s' príkaz je zastaraný %(additional_info)s" -#, fuzzy -#| msgid "must be an integer" -msgid "must be absolute" -msgstr "musí byť integer" +#, python-format +msgid "%(line)s" +msgstr "%(line)s" -#, fuzzy -#| msgid "must be True or False" -msgid "must be relative" -msgstr "musí byť True alebo False" - -#, fuzzy -#| msgid "must be binary data" -msgid "must be dictionary" -msgstr "musí byť binárny údaj" - -msgid "must be Kerberos principal" +#, python-format +msgid "Search result has been truncated: %(reason)s" msgstr "" -#, fuzzy, python-format -#| msgid "Deleted profile \"%(value)s\"" -msgid "Malformed principal: '%(value)s'" -msgstr "Odstránený profil \"%(value)s\"" - -#, fuzzy -#| msgid "New password is required" -msgid "Service principal is required" -msgstr "Nové heslo je povinné" - -#, fuzzy, python-format -#| msgid "File %(file)s not found" -msgid "%(filename)s: file not found" -msgstr "Súbor %(file)s nenájdený" - -#, python-brace-format -msgid "Unable to parse option {item}" +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." msgstr "" -msgid "any of the configured servers" +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" msgstr "" -msgid "Exceeded number of tries to forward a request." +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." msgstr "" msgid "Filename is empty" @@ -13757,6 +13748,19 @@ msgstr "" msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "%(filename)s: file not found" +msgstr "Súbor %(file)s nenájdený" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "objectclass %s nenájdená" + #, fuzzy, python-format #| msgid "Retrieving CA status failed: %s" msgid "Retrieving CA cert chain failed: %s" @@ -13775,10 +13779,6 @@ msgstr "Získanie CA stavu zlyhalo: %s" msgid "Retrieving CA status failed with status %d" msgstr "Získanie CA stavu zlyhalo: %s" -#, python-format -msgid "objectclass %s not found" -msgstr "objectclass %s nenájdená" - #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" @@ -13952,119 +13952,10 @@ msgstr[0] "%(count)d IPA lokalita nájdená" msgstr[1] "%(count)d IPA lokalít nájdených" msgstr[2] "%(count)d IPA lokalít nájdených" +#, python-format msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "nevalídne ID profilu" - -msgid "Certificate Profile" -msgstr "Certifikačný profil" - -msgid "Certificate Profiles" -msgstr "Certifikačné profily" - -msgid "Profile configuration" -msgstr "Configurácia profilu" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -#| msgid "Deleted profile \"%(value)s\"" -msgid "Imported profile \"%(value)s\"" -msgstr "Odstránený profil \"%(value)s\"" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Odstránený profil \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Certificate profiles cannot be renamed" -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "Certifikačné profily nemôžu byť premenované" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -msgid "Certificate profiles cannot be renamed" -msgstr "Certifikačné profily nemôžu byť premenované" - -msgid "Insufficient privilege to modify a certificate profile." +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "" @@ -14301,22 +14192,4691 @@ msgstr "" msgid "%i CAs removed." msgstr "" +#, fuzzy +#| msgid "Automember Rule" +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "Automember pravidlo" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Find all locations:\n" +#| " ipa location-find\n" +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" +"\n" +" Nájdenie všetkých lokalít:\n" +" ipa location-find\n" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +#, fuzzy +#| msgid "Automember Rule" +msgid "Auto Membership Rule" +msgstr "Automember pravidlo" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(otype)s \"%(oname)s\" nenájdené" + +#, fuzzy, python-format +#| msgid "%(port)s is not a valid port" +msgid "%s is not a valid attribute." +msgstr "%(port)s nie je platný port" + +#, fuzzy +#| msgid "Added automember rule \"%(value)s\"" +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "Pridané automember pravidlo \"%(value)s\"" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "Pridané automember pravidlo \"%(value)s\"" + +#, fuzzy +#| msgid "Auto member rule: %s not found!" +msgid "Auto Membership is not configured" +msgstr "Automember pravidlo: %s nenájdené!" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added IPA location \"%(value)s\"" +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Pridaná IPA lokalita \"%(value)s\"" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "Automember pravidlo: %s nenájdené!" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added automember rule \"%(value)s\"" +msgid "Modified automember rule \"%(value)s\"" +msgstr "Pridané automember pravidlo \"%(value)s\"" + +#, fuzzy +#| msgid "Deleted automember rule \"%(value)s\"" +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "Odstránené automember pravidlo \"%(value)s\"" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Odstránené automember pravidlo \"%(value)s\"" + +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "Vyhľadať HBAC pravidlá." + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "Úloha obnovenia automember členstva začala" + +msgid "Automember rebuild membership task completed" +msgstr "Úloha obnovenia automember členstva dokončená" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "Automember" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "skupiny" + +msgid "User Group" +msgstr "Používateľská skupina" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy +#| msgid "No private group" +msgid "privileged group" +msgstr "Bez privátnej skupiny" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Not a managed group" +msgstr "Vytvoriť novú skupinu." + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this group." +msgstr "Pridať používateľa, ktorý môže spravovať tento token." + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Remove users that can manage members of this group." +msgstr "Pridať používateľa, ktorý môže spravovať tento token." + +#, fuzzy +#| msgid "RADIUS proxy configuration" +msgid "" +"\n" +"DNS server configuration\n" +msgstr "RADIUS proxy konfigurácia" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Manipulate DNS locations\n" +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" +"\n" +"Narábanie s DNS lokalitami\n" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "DNS server" + +#, fuzzy +#| msgid "DNS server" +msgid "DNS servers" +msgstr "DNS server" + +#, fuzzy +#| msgid "DNS server" +msgid "DNS Servers" +msgstr "DNS server" + +#, fuzzy +#| msgid "DNS server" +msgid "DNS Server" +msgstr "DNS server" + +#, fuzzy +#| msgid "Service name" +msgid "DNS Server name" +msgstr "Názov služby" + +msgid "SOA mname override" +msgstr "" + +#, fuzzy +#| msgid "Authoritative nameserver domain name" +msgid "SOA mname (authoritative server) override" +msgstr "Doménové meno autoritatívneho nameservera" + +msgid "Forwarders" +msgstr "Forwardery" + +#, fuzzy +#| msgid "" +#| "Global forwarders. A custom port can be specified for each forwarder " +#| "using a standard format \"IP_ADDRESS port PORT\"" +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Globálne forwardery. Vlastný port môže byť nastavený použítím štandardného " +"formátu \"IP_ADRESA port PORT\" pre každý forwarder " + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +#, fuzzy +#| msgid "Modify CA configuration." +msgid "Modify DNS server configuration" +msgstr "Upraviť CA konfiguráciu." + +#, fuzzy, python-format +#| msgid "Modified HBAC service \"%(value)s\"" +msgid "Modified DNS server \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +msgid "Search for DNS servers." +msgstr "Vyhľadať DNS servery" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "IPA DNS version" +msgid "IPA DNS Server is not installed" +msgstr "Verzia IPA DNS" + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Display configuration of a DNS server." +msgstr "Zobraziť informácie o DNS forward zóne" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new DNS server." +msgstr "Pridať novú HBAC službu." + +#, fuzzy, python-format +#| msgid "Added HBAC service \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola pridaná" + +#, fuzzy +#| msgid "Delete a user" +msgid "Delete a DNS server" +msgstr "Odstrániť používateľa" + +#, fuzzy, python-format +#| msgid "Deleted DNS zone \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Odstránená DNS zóna \"%(value)s\"" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "HBAC služby" + +msgid "HBAC Services" +msgstr "HBAC služby" + +msgid "HBAC Service" +msgstr "HBAC služba" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola pridaná" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "HBAC service" +msgid "HBAC service group" +msgstr "HBAC služba" + +#, fuzzy +#| msgid "HBAC services" +msgid "HBAC service groups" +msgstr "HBAC služby" + +#, fuzzy +#| msgid "HBAC Services" +msgid "HBAC Service Groups" +msgstr "HBAC služby" + +#, fuzzy +#| msgid "HBAC Service" +msgid "HBAC Service Group" +msgstr "HBAC služba" + +#, fuzzy, python-format +#| msgid "Added HBAC service \"%(value)s\"" +msgid "Added HBAC service group \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola pridaná" + +#, fuzzy, python-format +#| msgid "Deleted HBAC service \"%(value)s\"" +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +#, fuzzy, python-format +#| msgid "Modified HBAC service \"%(value)s\"" +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be TRUE or FALSE" +msgstr "musí byť True alebo False" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "Principal alias" +msgstr "" + +#, fuzzy +#| msgid "Password expiration" +msgid "User password expiration" +msgstr "Vypršanie hesla" + +msgid "SSH public key fingerprint" +msgstr "Odtlačok verejného SSH kľúča (fingerprint)" + +msgid "Base-64 encoded user certificate" +msgstr "Base-64 zakódovaný používateľský certifikát" + +#, fuzzy +#| msgid "Certificate Hold" +msgid "Certificate mapping data" +msgstr "Držanie certifikátu" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +#, fuzzy +#| msgid "Home directory" +msgid "SMB Home Directory" +msgstr "Domovský priečinok" + +#, fuzzy +#| msgid "Home directory" +msgid "SMB Home Directory Drive" +msgstr "Domovský priečinok" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "neplatný formát e-mailovej adresy: %(email)s" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "manažér %(manager)s nenájdený" + +#, fuzzy, python-format +#| msgid "can be at most %(maxvalue)d" +msgid "can be at most %(len)d characters" +msgstr "môže byť najviac %(maxvalue)d" + +#, fuzzy +#| msgid "Issue" +msgid "Issuer" +msgstr "Vydať" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Issuer of the certificate" +msgstr "Revokácia certifikátu." + +msgid "Subject" +msgstr "" + +#, fuzzy +#| msgid "Service Certificate" +msgid "Subject of the certificate" +msgstr "Certifikát služby" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificate mappings to the user entry." +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificate mappings from the user entry." +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "{role}: rola nenájdená" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Find all locations:\n" +#| " ipa location-find\n" +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" +"\n" +" Nájdenie všetkých lokalít:\n" +" ipa location-find\n" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +#, fuzzy +#| msgid "Segment details" +msgid "segments" +msgstr "Detaily segmentu" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added segment \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted segment \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified segment \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "value" +msgid "%(value)s" +msgstr "hodnota" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +#| msgid "Deleted profile \"%(value)s\"" +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Odstránený profil \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "Poškodené DN" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "%(user)s nie je POSIX užívateľ" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "Neplatná LDAP URI." + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "Predvolená skupina pre nových používateľov nenájdená" + +#, fuzzy +#| msgid "groups" +msgid "netgroups" +msgstr "skupiny" + +#, fuzzy +#| msgid "groups" +msgid "Netgroups" +msgstr "skupiny" + +#, fuzzy +#| msgid "group" +msgid "Netgroup" +msgstr "skupina" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added netgroup \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified netgroup \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "One Time Password" +msgid "One time password commands" +msgstr "Jednorázové heslo (OTP)" + +msgid "OTP configuration options" +msgstr "OTP konfiguračné voľby" + +msgid "OTP Configuration" +msgstr "OTP konfigurácia" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Zmenené heslo pre \"%(value)s\"" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "pkinit" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "Whether PKINIT is enabled or disabled" +msgstr "Táto položka nemôže byť aktivovaná alebo deaktivovaná" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "RADIUS Proxy Server Settings" +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "RADIUS Proxy serverové nastavenia" + +#, fuzzy +#| msgid "RADIUS Proxy Server Settings" +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "RADIUS Proxy serverové nastavenia" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Delete location:\n" +#| " ipa location-del location\n" +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" +"\n" +" Odstránenie lokality:\n" +" ipa location-del lokalita\n" + +#, fuzzy +#| msgid "invalid domain name" +msgid "invalid attribute name" +msgstr "neplatné doménové meno" + +#, fuzzy +#| msgid "invalid domain name" +msgid "invalid port number" +msgstr "neplatné doménové meno" + +#, fuzzy +#| msgid "RADIUS proxy username" +msgid "RADIUS proxy server" +msgstr "RADIUS proxy používateľské meno" + +#, fuzzy +#| msgid "RADIUS proxy username" +msgid "RADIUS proxy servers" +msgstr "RADIUS proxy používateľské meno" + +#, fuzzy +#| msgid "RADIUS Proxy Server Settings" +msgid "RADIUS Servers" +msgstr "RADIUS Proxy serverové nastavenia" + +#, fuzzy +#| msgid "IPA Server" +msgid "RADIUS Server" +msgstr "IPA Server" + +#, fuzzy, python-format +#| msgid "Added HBAC service \"%(value)s\"" +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola pridaná" + +#, fuzzy, python-format +#| msgid "Deleted HBAC service \"%(value)s\"" +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +#, fuzzy, python-format +#| msgid "Modified HBAC service \"%(value)s\"" +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +#, fuzzy +#| msgid "Privilege Settings" +msgid "Privilege" +msgstr "Nastavenia privilégia" + +#, fuzzy, python-format +#| msgid "Added HBAC rule \"%(value)s\"" +msgid "Added privilege \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo pridané" + +#, fuzzy, python-format +#| msgid "Deleted profile \"%(value)s\"" +msgid "Deleted privilege \"%(value)s\"" +msgstr "Odstránený profil \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified HBAC rule \"%(value)s\"" +msgid "Modified privilege \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo upravené" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Modify an HBAC service." +msgid "Modify Class of Service entry" +msgstr "Upraviť HBAC službu." + +msgid "Display Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Search for HBAC services." +msgid "Search for Class of Service entry" +msgstr "Vyhľadať HBAC služby." + +#, fuzzy +#| msgid "password policies" +msgid "password policy" +msgstr "Politky hesiel" + +msgid "password policies" +msgstr "Politky hesiel" + +msgid "Password Policies" +msgstr "Politiky hesiel" + +msgid "Password Policy" +msgstr "Politika hesiel" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "Používateľské meno" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +#, fuzzy +#| msgid "Realm Domains" +msgid "Realm domains" +msgstr "Realm domény" + +msgid "Realm Domains" +msgstr "Realm domény" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +#, fuzzy +#| msgid "IPA CA cannot be deleted" +msgid "IPA server domain cannot be omitted" +msgstr "IPA CA nemôže byť odstránené" + +#, fuzzy +#| msgid "IPA CA cannot be deleted" +msgid "IPA server domain cannot be deleted" +msgstr "IPA CA nemôže byť odstránené" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +#| msgid "Member groups" +msgid "Member principals" +msgstr "Členské skupiny" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, fuzzy, python-format +#| msgid "Member of" +msgid "member %s" +msgstr "Členom" + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove member from a named service delegation." +msgstr "Odstrániť certifikáty zo služby" + +#, fuzzy +#| msgid "Add services to an HBAC rule." +msgid "service delegation rule" +msgstr "Pridať služby do HBAC pravidla." + +#, fuzzy +#| msgid "Service Options" +msgid "service delegation rules" +msgstr "Voľby služieb" + +#, fuzzy +#| msgid "Service Options" +msgid "Service delegation rules" +msgstr "Voľby služieb" + +#, fuzzy +#| msgid "Service Options" +msgid "Service delegation rule" +msgstr "Voľby služieb" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted HBAC service \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +msgid "privileged service delegation rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d IPA location matched" +#| msgid_plural "%(count)d IPA locations matched" +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +msgid "service delegation target" +msgstr "" + +#, fuzzy +#| msgid "Service Settings" +msgid "service delegation targets" +msgstr "Nastavenia služby" + +#, fuzzy +#| msgid "Service Settings" +msgid "Service delegation targets" +msgstr "Nastavenia služby" + +#, fuzzy +#| msgid "Service Settings" +msgid "Service delegation target" +msgstr "Nastavenia služby" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted HBAC service \"%(value)s\"" +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +msgid "privileged service delegation target" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d IPA location matched" +#| msgid_plural "%(count)d IPA locations matched" +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Stage users" +msgid "Stage Users" +msgstr "Predpripravení používatelia" + +#, fuzzy +#| msgid "Stage users" +msgid "Stage User" +msgstr "Predpripravení používatelia" + +#, fuzzy +#| msgid "Stage users" +msgid "stage user" +msgstr "Predpripravení používatelia" + +#, fuzzy +#| msgid "Stage users" +msgid "stage users" +msgstr "Predpripravení používatelia" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added stage user \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "givenname is required" +msgstr "'%(name)s' je požadované" + +#, fuzzy +#| msgid "is required" +msgid "sn is required" +msgstr "je povinné" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted stage user \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified stage user \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Activate a stage user \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Entry %s not found" +msgid "Entry RDN is not 'uid'" +msgstr "Položka %s nenájdená" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "key %(key)s already exists" +msgid "active user with name \"%(user)s\" already exists" +msgstr "kľúč %(key)s už existuje" + +#, fuzzy, python-format +#| msgid "Stage users" +msgid "Stage user %s activated" +msgstr "Predpripravení používatelia" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificates to the stageuser entry" +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificates to the stageuser entry" +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add new principal alias to the stageuser entry" +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove principal alias from the stageuser entry" +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +msgid "pyhbac is not installed." +msgstr "" + +#, fuzzy +#| msgid "Certificate Authorities" +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "Certifikačné autority" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +#, fuzzy +#| msgid "Retrieve an existing certificate." +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "Získať existujúci certifikát." + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Unspecified" +msgid " * 0 - unspecified\n" +msgstr "Nešpecifikované" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +#, fuzzy +#| msgid "Certificate Hold" +msgid " * 6 - certificateHold\n" +msgstr "Držanie certifikátu" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "Base-64 zakódovaný certifikát." + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate chain" +msgstr "Certifikát" + +#, fuzzy +#| msgid "CA certificate" +msgid "X.509 certificate chain" +msgstr "CA certifikát" + +#, fuzzy +#| msgid "Email address" +msgid "Subject email address" +msgstr "E-mailová adresa" + +msgid "Subject DNS name" +msgstr "" + +#, fuzzy +#| msgid "Street address" +msgid "Subject X.400 address" +msgstr "Ulica" + +#, fuzzy +#| msgid "Home directory" +msgid "Subject directory name" +msgstr "Domovský priečinok" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +#, fuzzy +#| msgid "IP Address" +msgid "Subject IP Address" +msgstr "IP adresa" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +#, fuzzy +#| msgid "Issue" +msgid "Issuer DN" +msgstr "Vydať" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +msgid "Serial number (hex)" +msgstr "Sériové číslo (hexadecimálne)" + +#, fuzzy +#| msgid "Rule status" +msgid "Request status" +msgstr "Stav pravidla" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "'add' option" +msgstr "Zastarané voľby" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "Stav" + +msgid "Revoked" +msgstr "" + +#, fuzzy +#| msgid "Replication configuration" +msgid "Revocation reason" +msgstr "Konfigurácia repliky" + +#, fuzzy +#| msgid "Reason for revoking the certificate (0-10)" +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "Dôvod revokácie certifikátu (0-10)" + +#, fuzzy, python-format +#| msgid "Owner" +msgid "Owner %s" +msgstr "Vlastník" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" +"Certifikát so sériovým číslom %(serial)s vydaný CA '%(ca)s' sa nenašiel" + +#, fuzzy +#| msgid "\"%s\" is not a valid permission type" +msgid "7 is not a valid revocation reason" +msgstr "\"%s\" nie je platný typ povolenia" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +#| msgid "Add one or more certificates to the user entry" +msgid "Search for certificates with these owner %s." +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy, python-format +#| msgid "Add one or more certificates to the user entry" +msgid "Search for certificates without these owner %s." +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo command" +msgstr "sudo príkazy" + +msgid "sudo commands" +msgstr "sudo príkazy" + +msgid "Sudo Commands" +msgstr "Sudo príkazy" + +#, fuzzy, python-format +#| msgid "Added IPA location \"%(value)s\"" +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Pridaná IPA lokalita \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted DNS zone \"%(value)s\"" +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Odstránená DNS zóna \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Upravené ACI \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d IPA location matched" +#| msgid_plural "%(count)d IPA locations matched" +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +#, fuzzy +#| msgid "Sudo Rules" +msgid "" +"\n" +"Sudo Rules\n" +msgstr "Sudo pravidlá" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +#, fuzzy +#| msgid "this option is deprecated" +msgid "this option has been deprecated." +msgstr "táto voľba je zastaraná" + +msgid "sudo rules" +msgstr "sudo pravidlá" + +msgid "Sudo Rules" +msgstr "Sudo pravidlá" + +#, fuzzy +#| msgid "Sudo Rules" +msgid "Sudo Rule" +msgstr "Sudo pravidlá" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added HBAC rule \"%(value)s\"" +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo pridané" + +#, fuzzy, python-format +#| msgid "Deleted HBAC rule \"%(value)s\"" +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Odstránené HBAC pravidlo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified HBAC rule \"%(value)s\"" +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo upravené" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +#, fuzzy +#| msgid "Users" +msgid "users" +msgstr "Používatelia" + +#, fuzzy +#| msgid "Commands" +msgid "command" +msgstr "Príkazy" + +#, fuzzy +#| msgid "Commands" +msgid "commands" +msgstr "Príkazy" + +msgid "runAs user" +msgstr "" + +#, fuzzy +#| msgid "Preserved users" +msgid "runAs users" +msgstr "Uschovaní používatelia" + +#, fuzzy +#| msgid "groups" +msgid "group runAs" +msgstr "skupiny" + +#, fuzzy +#| msgid "groups" +msgid "runAs groups" +msgstr "skupiny" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo command group" +msgstr "sudo príkazy" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo command groups" +msgstr "sudo príkazy" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "IPA trust" +msgid "trust" +msgstr "IPA trust" + +#, fuzzy +#| msgid "IPA trust" +msgid "trusts" +msgstr "IPA trust" + +#, fuzzy +#| msgid "Trust Settings" +msgid "Trusts" +msgstr "Trust nastavenia" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +#, fuzzy +#| msgid "Trust Settings" +msgid "Trust direction" +msgstr "Trust nastavenia" + +msgid "Trust type" +msgstr "" + +#, fuzzy +#| msgid "Rule status" +msgid "Trust status" +msgstr "Stav pravidla" + +msgid "UPN suffixes" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "invalid Profile ID" +msgid "invalid SID: {SID}" +msgstr "nevalídne ID profilu" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Active Directory domain range" +msgstr "Active Directory doména" + +#, fuzzy +#| msgid "Active Directory domain with POSIX attributes" +msgid "Active Directory trust range with POSIX attributes" +msgstr "Active Directory doména s POSIX attribútmy" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +#, fuzzy +#| msgid "Domain" +msgid "domain" +msgstr "Doména" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +#, fuzzy +#| msgid "Realm Domains" +msgid "Realm-domain mismatch" +msgstr "Realm domény" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +#, fuzzy +#| msgid "ID Range" +msgid "id range" +msgstr "ID rozsah" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +#, fuzzy +#| msgid "Range Settings" +msgid "range exists" +msgstr "Nastavenie rozsahu" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " msgstr "" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." msgstr "" +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted trust \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "Profile configuration" +msgid "trust configuration" +msgstr "Configurácia profilu" + +#, fuzzy +#| msgid "DNS Global Configuration" +msgid "Global Trust Configuration" +msgstr "DNS globálne nastavenia" + +#, fuzzy +#| msgid "IPA trust" +msgid "IPA AD trust agents" +msgstr "IPA trust" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +#, fuzzy +#| msgid "Unsupported value" +msgid "unsupported trust type" +msgstr "Nepodporovaná hodnota" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified \"%(value)s\" trust configuration" +msgstr "Upravené ACI \"%(value)s\"" + +msgid "Name" +msgstr "Názov" + +msgid "SID" +msgstr "SID" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +#, fuzzy +#| msgid "trusted domain user not found" +msgid "trust domains" +msgstr "trust doménový užívateľ nenájdený" + +#, fuzzy +#| msgid "trusted domain user not found" +msgid "Trusted domains" +msgstr "trust doménový užívateľ nenájdený" + +#, fuzzy +#| msgid "trusted domain user not found" +msgid "Trusted domain" +msgstr "trust doménový užívateľ nenájdený" + +#, fuzzy +#| msgid "Domain name" +msgid "Domain enabled" +msgstr "Doménové meno" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, fuzzy, python-format +#| msgid "Enabled HBAC rule \"%(value)s\"" +msgid "Enabled trust domain \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo aktivované" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +#, fuzzy +#| msgid "IPA server role name" +msgid "" +"\n" +"IPA server roles\n" +msgstr "Názov role servera" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#, fuzzy +#| msgid "Server Role" +msgid "server role" +msgstr "Server rola" + +#, fuzzy +#| msgid "Server Roles" +msgid "server roles" +msgstr "Serverové role" + +#, fuzzy +#| msgid "Server Roles" +msgid "IPA Server Roles" +msgstr "Serverové role" + +#, fuzzy +#| msgid "Server Role" +msgid "IPA Server Role" +msgstr "Server rola" + +msgid "IPA server role name" +msgstr "Názov role servera" + +#, fuzzy +#| msgid "Rule status" +msgid "Role status" +msgstr "Stav pravidla" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +#, fuzzy +#| msgid "IPA server role name" +msgid "Find a server role on a server(s)" +msgstr "Názov role servera" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "Included attributes" +msgid "Include IPA master entries" +msgstr "Zahrnuté atribúty" + +#, fuzzy +#| msgid "Roles" +msgid "roles" +msgstr "Role" + +msgid "IPA role name" +msgstr "Názov IPA role" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Manage YubiKey tokens.\n" +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" +"\n" +"Spravovať YubiKey tokeny.\n" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +#, fuzzy +#| msgid "Continue" +msgid "Vault Container" +msgstr "Pokračovať" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +#, fuzzy +#| msgid "Delete a user" +msgid "Deleted vault container" +msgstr "Odstrániť používateľa" + +#, fuzzy, python-format +#| msgid "Owner" +msgid "owner %s" +msgstr "Vlastník" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +#, fuzzy +#| msgid "Modify a vault." +msgid "Add a vault." +msgstr "Upraviť vault." + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy +#| msgid "Profile configuration" +msgid "Vault configuration" +msgstr "Configurácia profilu" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA KRA servers" +msgstr "IPA Server" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added automember rule \"%(value)s\"" +msgid "Archived data into vault \"%(value)s\"" +msgstr "Pridané automember pravidlo \"%(value)s\"" + +msgid "Retrieve data from a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "nevalídne ID profilu" + +msgid "Certificate Profile" +msgstr "Certifikačný profil" + +msgid "Certificate Profiles" +msgstr "Certifikačné profily" + +msgid "Profile configuration" +msgstr "Configurácia profilu" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +#| msgid "Deleted profile \"%(value)s\"" +msgid "Imported profile \"%(value)s\"" +msgstr "Odstránený profil \"%(value)s\"" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "Odstránený profil \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Certificate profiles cannot be renamed" +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "Certifikačné profily nemôžu byť premenované" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +msgid "Certificate profiles cannot be renamed" +msgstr "Certifikačné profily nemôžu byť premenované" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "groups" +msgid "host groups" +msgstr "skupiny" + +#, fuzzy +#| msgid "User Group" +msgid "Host Group" +msgstr "Používateľská skupina" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added hostgroup \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy +#| msgid "group" +msgid "hostgroup" +msgstr "skupina" + +#, fuzzy +#| msgid "No private group" +msgid "privileged hostgroup" +msgstr "Bez privátnej skupiny" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this hostgroup." +msgstr "Pridať používateľa, ktorý môže spravovať tento token." + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Remove users that can manage members of this hostgroup." +msgstr "Pridať používateľa, ktorý môže spravovať tento token." + +msgid "kerberos ticket policy settings" +msgstr "nastavenia kerberos ticket policy" + +#, fuzzy +#| msgid "kerberos ticket policy settings" +msgid "Kerberos Ticket Policy" +msgstr "nastavenia kerberos ticket policy" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +#, fuzzy +#| msgid "RADIUS proxy username" +msgid "RADIUS max renew" +msgstr "RADIUS proxy používateľské meno" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" +"\n" +"IPA lokality\n" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" +"\n" +"Narábanie s DNS lokalitami\n" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" +"\n" +" Nájdenie všetkých lokalít:\n" +" ipa location-find\n" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" +"\n" +" Zobrazenie špecifickej lokality:\n" +" ipa location-show lokalita\n" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" +"\n" +" Pridanie lokality:\n" +" ipa location-add lokalita --description 'Moja lokalita'\n" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" +"\n" +" Odstránenie lokality:\n" +" ipa location-del lokalita\n" + +msgid "location" +msgstr "lokalita" + +msgid "locations" +msgstr "lokality" + +msgid "IPA Locations" +msgstr "IPA lokality" + +msgid "IPA Location" +msgstr "IPA lokalita" + +msgid "Location name" +msgstr "Názov lokality" + +msgid "IPA location name" +msgstr "Názov IPA lokality" + +msgid "IPA Location description" +msgstr "Popis IPA lokality" + +msgid "Servers" +msgstr "Servery" + +msgid "Servers that belongs to the IPA location" +msgstr "Servery patriace do IPA lokality" + +msgid "Advertised by servers" +msgstr "Oznamované servermi" + +msgid "List of servers which advertise the given location" +msgstr "Zoznam serverov oznamujúcich danú lokalitu" + +msgid "Add a new IPA location." +msgstr "Pridať novú IPA lokalitu." + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "Pridaná IPA lokalita \"%(value)s\"" + +msgid "Delete an IPA location." +msgstr "Odstrániť IPA lokalitu." + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Odstránená IPA lokalita \"%(value)s\"" + +msgid "IPA Server" +msgstr "IPA Server" + +msgid "Modify information about an IPA location." +msgstr "Upraviť informácie o IPA lokalite." + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "Upravená IPA lokalita \"%(value)s\"" + +msgid "Search for IPA locations." +msgstr "Vyhľadať IPA lokalitu." + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +msgid "Display information about an IPA location." +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "Servers in location" +msgstr "Servery v lokalite." + +#, fuzzy +#| msgid "Roles" +msgid "Role" +msgstr "Role" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added role \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted profile \"%(value)s\"" +msgid "Deleted role \"%(value)s\"" +msgstr "Odstránený profil \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified role \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added user \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy +#| msgid "Default group for new users not found" +msgid "Default group for new users is not POSIX" +msgstr "Predvolená skupina pre nových používateľov nenájdená" + +#, fuzzy, python-format +#| msgid "Deleted record \"%(value)s\"" +msgid "Deleted user \"%(value)s\"" +msgstr "Odstránený záznam \"%(value)s\"" + +#, python-format +msgid "%s: user is already preserved" +msgstr "%s: používateľ je už uschovaný" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified user \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Undeleted user account \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%s: user is already preserved" +msgid "user \"%s\" is already active" +msgstr "%s: používateľ je už uschovaný" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Staged user account \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Enabled user account \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Unlocked account \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +#, fuzzy +#| msgid "Failed to add" +msgid "Failed logins" +msgstr "Zlyhalo pridanie" + +#, fuzzy +#| msgid "User authentication types" +msgid "Last successful authentication" +msgstr "Typy autentifikácie používateľa" + +#, fuzzy +#| msgid "User authentication types" +msgid "Last failed authentication" +msgstr "Typy autentifikácie používateľa" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, fuzzy, python-format +#| msgid "salt value: %(err)s" +msgid "%(host)s failed: %(error)s" +msgstr "salt hodnota: %(err)s" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "Účet deaktivovaný: %(disabled)s" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add new principal alias to the user entry" +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove principal alias from the user entry" +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" +"\n" +"OTP tokeny\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Manage YubiKey tokens.\n" +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"Spravovať YubiKey tokeny.\n" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "OTP token" + +msgid "OTP tokens" +msgstr "OTP tokeny" + +msgid "OTP Tokens" +msgstr "OTP tokeny" + +msgid "OTP Token" +msgstr "OTP token" + +msgid "URI" +msgstr "URI" + +#, fuzzy, python-format +#| msgid "Modified OTP token \"%(value)s\"" +msgid "Added OTP token \"%(value)s\"" +msgstr "Upravený OTP token \"%(value)s\"" + +#, fuzzy +#| msgid "IPA CA cannot be deleted" +msgid "cannot be empty" +msgstr "IPA CA nemôže byť odstránené" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Odstránený OTP token \"%(value)s\"" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Upravený OTP token \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d IPA location matched" +#| msgid_plural "%(count)d IPA locations matched" +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +#, fuzzy +#| msgid "Deleted ACI \"%(value)s\"" +msgid "A list of ACI values" +msgstr "Odstránené ACI \"%(value)s\"" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +#, fuzzy +#| msgid "is required" +msgid "ACI prefix is required" +msgstr "je povinné" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "Entry %s does not exist" +msgid "Group '%s' does not exist" +msgstr "Položka %s neexistuje" + +msgid "empty filter" +msgstr "" + +#, fuzzy, python-format +#| msgid "Certificate format error: %(error)s" +msgid "Syntax Error: %(error)s" +msgstr "Chyba formátu certifikátu: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "neplatné DN (%s)" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "ACI s názvom \"%s\" nenájdené" + +#, fuzzy +#| msgid "IPA object" +msgid "ACI object." +msgstr "IPA objekt" + +msgid "ACIs" +msgstr "ACI" + +msgid "ACI" +msgstr "ACI" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "Vytvorené ACI \"%(value)s\"" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "Odstránené ACI \"%(value)s\"" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "Upravené ACI \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +#| msgid "Created ACI \"%(value)s\"" +msgid "Renamed ACI to \"%(value)s\"" +msgstr "Vytvorené ACI \"%(value)s\"" + msgid "" "\n" "Domain Name System (DNS)\n" @@ -14883,9 +19443,6 @@ msgstr "Nameserver '%(host)s' nemá zodpovedajúci A/AAAA záznam" msgid "Managedby permission" msgstr "povolenie" -msgid "DNS is not configured" -msgstr "" - msgid "cannot be used when a zone is specified" msgstr "" @@ -15135,1571 +19692,609 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + #, fuzzy -#| msgid "RADIUS proxy configuration" +#| msgid "LDAP schema" msgid "" "\n" -"DNS server configuration\n" -msgstr "RADIUS proxy konfigurácia" +"API Schema\n" +msgstr "LDAP schéma" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" #, fuzzy #| msgid "" #| "\n" -#| "Manipulate DNS locations\n" +#| " Show specific location:\n" +#| " ipa location-show location\n" msgid "" "\n" -"Manipulate DNS server configuration\n" +" Show user-find details:\n" +" ipa command-show user-find\n" msgstr "" "\n" -"Narábanie s DNS lokalitami\n" +" Zobrazenie špecifickej lokality:\n" +" ipa location-show lokalita\n" msgid "" "\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "DNS server" - -#, fuzzy -#| msgid "DNS server" -msgid "DNS servers" -msgstr "DNS server" - -#, fuzzy -#| msgid "DNS server" -msgid "DNS Servers" -msgstr "DNS server" - -#, fuzzy -#| msgid "DNS server" -msgid "DNS Server" -msgstr "DNS server" - -#, fuzzy -#| msgid "Service name" -msgid "DNS Server name" -msgstr "Názov služby" - -msgid "SOA mname override" +" Find user-find parameters:\n" +" ipa param-find user-find\n" msgstr "" #, fuzzy -#| msgid "Authoritative nameserver domain name" -msgid "SOA mname (authoritative server) override" -msgstr "Doménové meno autoritatívneho nameservera" +#| msgid "Authentication" +msgid "Documentation" +msgstr "Autentifikácia" -msgid "Forwarders" -msgstr "Forwardery" - -#, fuzzy -#| msgid "" -#| "Global forwarders. A custom port can be specified for each forwarder " -#| "using a standard format \"IP_ADDRESS port PORT\"" -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Globálne forwardery. Vlastný port môže byť nastavený použítím štandardného " -"formátu \"IP_ADRESA port PORT\" pre každý forwarder " - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." +msgid "Exclude from" msgstr "" #, fuzzy -#| msgid "Modify CA configuration." -msgid "Modify DNS server configuration" -msgstr "Upraviť CA konfiguráciu." +#| msgid "Included attributes" +msgid "Include in" +msgstr "Zahrnuté atribúty" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Version" +msgstr "Povolenie" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "Record name" +msgid "Method name" +msgstr "Názov záznamu" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s: %(oname)s nenájdený" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about a command." +msgstr "Zobraziť informácie o IPA lokalite." + +#, fuzzy +#| msgid "Search for Sudo Commands." +msgid "Search for commands." +msgstr "Vyhľadať sudo príkazy." + +msgid "Return command defaults" +msgstr "" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about a class." +msgstr "Zobraziť informácie o IPA lokalite." + +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "Search for classes." +msgstr "Vyhľadať HBAC pravidlá." + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about a help topic." +msgstr "Zobraziť informácie o IPA lokalite." + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for help topics." +msgstr "Vyhľadávať skupiny." + +msgid "Required" +msgstr "Povinné" + +#, fuzzy +#| msgid "value" +msgid "Multi-value" +msgstr "hodnota" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "CLI name" +msgstr "ACI názov" + +#, fuzzy +#| msgid "Change password" +msgid "Confirm (password)" +msgstr "Zmeniť heslo" + +msgid "Default" +msgstr "" + +#, fuzzy +#| msgid "Default user group" +msgid "Default from" +msgstr "Predvolená používateľská skupina" + +msgid "Label" +msgstr "" + +#, fuzzy +#| msgid "Advertised by servers" +msgid "Convert on server" +msgstr "Oznamované servermi" + +#, fuzzy +#| msgid "Options" +msgid "Option group" +msgstr "Voľby" + +msgid "Sensitive" +msgstr "" + +#, fuzzy +#| msgid "Positional arguments" +msgid "Positional argument" +msgstr "Pozičný argument" #, fuzzy, python-format -#| msgid "Modified HBAC service \"%(value)s\"" -msgid "Modified DNS server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -msgid "Search for DNS servers." -msgstr "Vyhľadať DNS servery" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -#| msgid "IPA DNS version" -msgid "IPA DNS Server is not installed" -msgstr "Verzia IPA DNS" +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s nenájdený" #, fuzzy #| msgid "Display information about a DNS forward zone." -msgid "Display configuration of a DNS server." +msgid "Display information about a command parameter." +msgstr "Zobraziť informácie o DNS forward zóne" + +msgid "Search command parameters." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s nenájdený" + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Display information about a command output." msgstr "Zobraziť informácie o DNS forward zóne" #, fuzzy -#| msgid "Add a new HBAC service." -msgid "Add a new DNS server." -msgstr "Pridať novú HBAC službu." +#| msgid "Search for Sudo Commands." +msgid "Search for command outputs." +msgstr "Vyhľadať sudo príkazy." -#, fuzzy, python-format -#| msgid "Added HBAC service \"%(value)s\"" -msgid "Added new DNS server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola pridaná" +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" #, fuzzy -#| msgid "Delete a user" -msgid "Delete a DNS server" -msgstr "Odstrániť používateľa" - -#, fuzzy, python-format -#| msgid "Deleted DNS zone \"%(value)s\"" -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Odstránená DNS zóna \"%(value)s\"" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "HBAC služby" - -msgid "HBAC Services" -msgstr "HBAC služby" - -msgid "HBAC Service" -msgstr "HBAC služba" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola pridaná" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -#| msgid "HBAC service" -msgid "HBAC service group" -msgstr "HBAC služba" +#| msgid "Member groups" +msgid "Member service groups" +msgstr "Členské skupiny" #, fuzzy #| msgid "HBAC services" -msgid "HBAC service groups" +msgid "Member HBAC service groups" msgstr "HBAC služby" -#, fuzzy -#| msgid "HBAC Services" -msgid "HBAC Service Groups" -msgstr "HBAC služby" - -#, fuzzy -#| msgid "HBAC Service" -msgid "HBAC Service Group" -msgstr "HBAC služba" - -#, fuzzy, python-format -#| msgid "Added HBAC service \"%(value)s\"" -msgid "Added HBAC service group \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola pridaná" - -#, fuzzy, python-format -#| msgid "Deleted HBAC service \"%(value)s\"" -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -#, fuzzy, python-format -#| msgid "Modified HBAC service \"%(value)s\"" -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" +msgid "Member ID user overrides" msgstr "" #, fuzzy -#| msgid "Stage users" -msgid "Stage Users" -msgstr "Predpripravení používatelia" +#| msgid "Indirect Membership" +msgid "Indirect Member ID user overrides" +msgstr "Nepriame členstvo" #, fuzzy -#| msgid "Stage users" -msgid "Stage User" -msgstr "Predpripravení používatelia" +#| msgid "Indirect Membership" +msgid "Indirect Member permissions" +msgstr "Nepriame členstvo" #, fuzzy -#| msgid "Stage users" -msgid "stage user" -msgstr "Predpripravení používatelia" +#| msgid "Indirect Membership" +msgid "Indirect Member HBAC service" +msgstr "Nepriame členstvo" #, fuzzy -#| msgid "Stage users" -msgid "stage users" -msgstr "Predpripravení používatelia" +#| msgid "Indirect Membership" +msgid "Indirect Member HBAC service group" +msgstr "Nepriame členstvo" -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Added stage user \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -#| msgid "'%(name)s' is required" -msgid "givenname is required" -msgstr "'%(name)s' je požadované" - -#, fuzzy -#| msgid "is required" -msgid "sn is required" -msgstr "je povinné" - -#, fuzzy, python-format -#| msgid "can be at most %(maxvalue)d" -msgid "can be at most %(len)d characters" -msgstr "môže byť najviac %(maxvalue)d" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted stage user \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified stage user \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Activate a stage user \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -#| msgid "Entry %s not found" -msgid "Entry RDN is not 'uid'" -msgstr "Položka %s nenájdená" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, fuzzy, python-format -#| msgid "key %(key)s already exists" -msgid "active user with name \"%(user)s\" already exists" -msgstr "kľúč %(key)s už existuje" - -#, fuzzy, python-format -#| msgid "Stage users" -msgid "Stage user %s activated" -msgstr "Predpripravení používatelia" - -#, fuzzy -#| msgid "Add one or more certificates to the user entry" -msgid "Add one or more certificates to the stageuser entry" -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -#| msgid "Remove one or more certificates to the user entry" -msgid "Remove one or more certificates to the stageuser entry" -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -#, fuzzy, python-format -#| msgid "Removed certificates from user \"%(value)s\"" -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -#, fuzzy -#| msgid "Add one or more certificates to the user entry" -msgid "Add new principal alias to the stageuser entry" -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -#| msgid "Remove one or more certificates to the user entry" -msgid "Remove principal alias from the stageuser entry" -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -#, fuzzy, python-format -#| msgid "Removed certificates from user \"%(value)s\"" -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -#, fuzzy -#| msgid "Add one or more certificates to the user entry" -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy -#| msgid "Remove one or more certificates to the user entry" -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Find all locations:\n" -#| " ipa location-find\n" -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" -"\n" -" Nájdenie všetkých lokalít:\n" -" ipa location-find\n" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -#, fuzzy -#| msgid "Segment details" -msgid "segments" -msgstr "Detaily segmentu" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added segment \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted segment \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified segment \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "value" -msgid "%(value)s" -msgstr "hodnota" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -#| msgid "Deleted profile \"%(value)s\"" -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Odstránený profil \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added topology suffix \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -#| msgid "groups" -msgid "host groups" -msgstr "skupiny" - -#, fuzzy -#| msgid "User Group" -msgid "Host Group" -msgstr "Používateľská skupina" - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added hostgroup \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy -#| msgid "group" -msgid "hostgroup" -msgstr "skupina" - -#, fuzzy -#| msgid "No private group" -msgid "privileged hostgroup" -msgstr "Bez privátnej skupiny" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -#| msgid "Add users that can manage this token." -msgid "Add users that can manage members of this hostgroup." -msgstr "Pridať používateľa, ktorý môže spravovať tento token." - -#, fuzzy -#| msgid "Add users that can manage this token." -msgid "Remove users that can manage members of this hostgroup." -msgstr "Pridať používateľa, ktorý môže spravovať tento token." - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| "Manage YubiKey tokens.\n" -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" -"\n" -"Spravovať YubiKey tokeny.\n" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -#, fuzzy -#| msgid "Continue" -msgid "Vault Container" -msgstr "Pokračovať" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -#, fuzzy -#| msgid "Delete a user" -msgid "Deleted vault container" -msgstr "Odstrániť používateľa" - -#, fuzzy, python-format -#| msgid "Owner" -msgid "owner %s" -msgstr "Vlastník" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -#, fuzzy -#| msgid "Modify a vault." -msgid "Add a vault." -msgstr "Upraviť vault." - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added vault \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted vault \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified vault \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy -#| msgid "Profile configuration" -msgid "Vault configuration" -msgstr "Configurácia profilu" - -#, fuzzy -#| msgid "IPA Server" -msgid "IPA KRA servers" -msgstr "IPA Server" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added automember rule \"%(value)s\"" -msgid "Archived data into vault \"%(value)s\"" -msgstr "Pridané automember pravidlo \"%(value)s\"" - -msgid "Retrieve data from a vault." -msgstr "" - -#, fuzzy, python-format -#| msgid "Removed certificates from user \"%(value)s\"" -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -#, fuzzy -#| msgid "groups" -msgid "netgroups" -msgstr "skupiny" - -#, fuzzy -#| msgid "groups" -msgid "Netgroups" -msgstr "skupiny" - -#, fuzzy -#| msgid "group" -msgid "Netgroup" -msgstr "skupina" - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added netgroup \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified netgroup \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -#| msgid "One Time Password" -msgid "One time password commands" -msgstr "Jednorázové heslo (OTP)" - -msgid "OTP configuration options" -msgstr "OTP konfiguračné voľby" - -msgid "OTP Configuration" -msgstr "OTP konfigurácia" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Zmenené heslo pre \"%(value)s\"" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "pkinit" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" +msgid "Invalid format. Should be name=value" msgstr "" #, fuzzy #| msgid "This entry cannot be enabled or disabled" -msgid "Whether PKINIT is enabled or disabled" +msgid "An IPA master host cannot be deleted or disabled" msgstr "Táto položka nemôže byť aktivovaná alebo deaktivovaná" -msgid "Report PKINIT status on the IPA masters" +msgid "entry" +msgstr "" + +#, fuzzy +#| msgid "No entries." +msgid "entries" +msgstr "Žiadne položky." + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "kontajner (%(container)s) nenájdený" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s nenájdený" + +#, fuzzy, python-format +#| msgid "key %(key)s already exists" +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "kľúč %(key)s už existuje" + +#, fuzzy, python-format +#| msgid "options are not allowed" +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "voľby nie sú povolené" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" msgstr "" #, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" +#| msgid "Failed to add" +msgid "%s to add" +msgstr "Zlyhalo pridanie" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "added attribute value to entry %(value)s" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "removed attribute values from entry %(value)s" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "one or more values to remove" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "HBAC pravidlá" + +msgid "HBAC Rules" +msgstr "HBAC pravidlá" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo pridané" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "Odstránené HBAC pravidlo \"%(value)s\"" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo upravené" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" msgstr[0] "%(count)d HBAC pravidlo nájdené" msgstr[1] "%(count)d HBAC pravidiel nájdených" msgstr[2] "%(count)d HBAC pravidiel nájdených" -#, fuzzy -#| msgid "RADIUS Proxy Server Settings" -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "RADIUS Proxy serverové nastavenia" - -#, fuzzy -#| msgid "RADIUS Proxy Server Settings" -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "RADIUS Proxy serverové nastavenia" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Delete location:\n" -#| " ipa location-del location\n" -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" -"\n" -" Odstránenie lokality:\n" -" ipa location-del lokalita\n" - -#, fuzzy -#| msgid "invalid domain name" -msgid "invalid attribute name" -msgstr "neplatné doménové meno" - -#, fuzzy -#| msgid "invalid domain name" -msgid "invalid port number" -msgstr "neplatné doménové meno" - -#, fuzzy -#| msgid "RADIUS proxy username" -msgid "RADIUS proxy server" -msgstr "RADIUS proxy používateľské meno" - -#, fuzzy -#| msgid "RADIUS proxy username" -msgid "RADIUS proxy servers" -msgstr "RADIUS proxy používateľské meno" - -#, fuzzy -#| msgid "RADIUS Proxy Server Settings" -msgid "RADIUS Servers" -msgstr "RADIUS Proxy serverové nastavenia" - -#, fuzzy -#| msgid "IPA Server" -msgid "RADIUS Server" -msgstr "IPA Server" - -#, fuzzy, python-format -#| msgid "Added HBAC service \"%(value)s\"" -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola pridaná" - -#, fuzzy, python-format -#| msgid "Deleted HBAC service \"%(value)s\"" -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -#, fuzzy, python-format -#| msgid "Modified HBAC service \"%(value)s\"" -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -#| msgid "Deleted ACI \"%(value)s\"" -msgid "A list of ACI values" -msgstr "Odstránené ACI \"%(value)s\"" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -#, fuzzy -#| msgid "is required" -msgid "ACI prefix is required" -msgstr "je povinné" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, fuzzy, python-format -#| msgid "Entry %s does not exist" -msgid "Group '%s' does not exist" -msgstr "Položka %s neexistuje" - -msgid "empty filter" -msgstr "" - -#, fuzzy, python-format -#| msgid "Certificate format error: %(error)s" -msgid "Syntax Error: %(error)s" -msgstr "Chyba formátu certifikátu: %(error)s" +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo aktivované" #, python-format -msgid "invalid DN (%s)" -msgstr "neplatné DN (%s)" +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "Deaktivované HBAC pravidlo \"%(value)s\"" -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "ACI s názvom \"%s\" nenájdené" +msgid "Access time" +msgstr "Čas prístupu" #, fuzzy -#| msgid "IPA object" -msgid "ACI object." -msgstr "IPA objekt" - -msgid "ACIs" -msgstr "ACI" - -msgid "ACI" -msgstr "ACI" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "Vytvorené ACI \"%(value)s\"" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "Odstránené ACI \"%(value)s\"" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "Upravené ACI \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -#| msgid "Created ACI \"%(value)s\"" -msgid "Renamed ACI to \"%(value)s\"" -msgstr "Vytvorené ACI \"%(value)s\"" +#| msgid "Add users and groups to an HBAC rule." +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "Pridať používateľov a skupiny do HBAC pravidla." msgid "" "\n" -"Server configuration\n" +"Simulate use of Host-based access controls\n" "\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"NOTES:\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" "\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" "\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" +" --user, --host, and --service are mandatory, others are optional.\n" "\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" "\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "Prístup povolený: %s" + #, fuzzy -#| msgid "must be at least %(minvalue)d" -msgid "must be at least 10" -msgstr "musí byť najmenej %(minvalue)d" - -msgid "configuration options" -msgstr "konfiguračné voľby" - -msgid "Configuration" -msgstr "Konfigurácia" - -msgid "Maximum hostname length" -msgstr "" +#| msgid "ID Views" +msgid "ID View" +msgstr "ID Views" #, fuzzy -#| msgid "IPA trust" -msgid "IPA masters" -msgstr "IPA trust" +#| msgid "ID Views" +msgid "system ID View" +msgstr "ID Views" -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" +msgid "ID Views" +msgstr "ID Views" #, fuzzy -#| msgid "IPA Server" -msgid "IPA CA servers" -msgstr "IPA Server" +#| msgid "User categories" +msgid "User object overrides" +msgstr "Kategórie používateľov" -msgid "IPA servers configured as certificate authority" +msgid "Group object overrides" msgstr "" -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" +msgid "Hosts the view applies to" msgstr "" msgid "Domain resolution order" @@ -16708,249 +20303,225 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -msgid "IPA servers configured as domain name server" -msgstr "" - -#, fuzzy -#| msgid "IPA DNS version" -msgid "Hidden IPA DNS servers" -msgstr "Verzia IPA DNS" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -#, fuzzy -#| msgid "options are not allowed" -msgid "Empty domain is not allowed" -msgstr "voľby nie sú povolené" - -#, fuzzy, python-format -#| msgid "invalid domain-name: %s" -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "neplatné doménové meno: %s" +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "Pridané ID View \"%(value)s\"" #, python-format -msgid "Server has no information about domain '%(domain)s'" +msgid "Deleted ID View \"%(value)s\"" +msgstr "Odstránené ID View \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added ID View \"%(value)s\"" +msgid "Modified an ID View \"%(value)s\"" +msgstr "Pridané ID View \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "Nenašlo sa" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "hodnota" + +#, python-format +msgid "ID View applied to %i host." msgstr "" #, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -#, fuzzy -#| msgid "Entry %s does not exist" -msgid "The group doesn't exist" -msgstr "Položka %s neexistuje" - -#, fuzzy, python-format -#| msgid "options are not allowed" -msgid "attribute \"%s\" not allowed" -msgstr "voľby nie sú povolené" - -msgid "May not be empty" +msgid "ID View applied to %i hosts." msgstr "" #, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgid "ID View cleared from %i host." msgstr "" -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, fuzzy, python-format -#| msgid "error on server '%(server)s': %(error)s" -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "chyba na serveri '%(server)s': %(error)s" - -msgid "SELinux user map default user not in order list" +#, python-format +msgid "ID View cleared from %i hosts." msgstr "" msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" -msgid "groups" -msgstr "skupiny" +msgid "IPA object" +msgstr "IPA objekt" -msgid "User Group" -msgstr "Používateľská skupina" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -msgid "gid cannot be set for external group" +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" msgstr "" #, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" #, fuzzy -#| msgid "No private group" -msgid "privileged group" -msgstr "Bez privátnej skupiny" +#| msgid "Add a new ID View." +msgid "Add a new ID override." +msgstr "Pridať nové ID View" -#, python-format -msgid "Modified group \"%(value)s\"" +#, fuzzy, python-format +#| msgid "Added ID View \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" +msgstr "Pridané ID View \"%(value)s\"" + +#, fuzzy +#| msgid "Delete an ID View." +msgid "Delete an ID override." +msgstr "Odstrániť ID View." + +#, fuzzy, python-format +#| msgid "Deleted ID View \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" +msgstr "Odstránené ID View \"%(value)s\"" + +#, fuzzy +#| msgid "Modify an HBAC service." +msgid "Modify an ID override." +msgstr "Upraviť HBAC službu." + +#, fuzzy, python-format +#| msgid "Modified HBAC service \"%(value)s\"" +msgid "Modified an ID override \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +msgid "ID override" +msgstr "" + +#, fuzzy +#| msgid "Certificate profiles cannot be renamed" +msgid "ID overrides cannot be renamed" +msgstr "Certifikačné profily nemôžu byť premenované" + +#, fuzzy +#| msgid "Search for DNS servers." +msgid "Search for an ID override." +msgstr "Vyhľadať DNS servery" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Display information about an ID override." +msgstr "Zobraziť informácie o DNS forward zóne" + +#, fuzzy +#| msgid "User ID Number" +msgid "User ID override" +msgstr "ID používateľa" + +#, fuzzy +#| msgid "User ID Number" +msgid "User ID overrides" +msgstr "ID používateľa" + +#, fuzzy +#| msgid "Group ID Number" +msgid "Group ID override" +msgstr "ID skupiny" + +#, fuzzy +#| msgid "Group ID Number" +msgid "Group ID overrides" +msgstr "ID skupiny" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added ID View \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" +msgstr "Pridané ID View \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted ID View \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Odstránené ID View \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified HBAC service \"%(value)s\"" +msgid "Modified an User ID override \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +#| msgid "Added ID View \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" +msgstr "Pridané ID View \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted ID View \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Odstránené ID View \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified an Group ID override \"%(value)s\"" msgstr "Upravená skupina \"%(value)s\"" #, fuzzy, python-format #| msgid "%(count)d HBAC rule matched" #| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" msgstr[0] "%(count)d HBAC pravidlo nájdené" msgstr[1] "%(count)d HBAC pravidiel nájdených" msgstr[2] "%(count)d HBAC pravidiel nájdených" -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, fuzzy, python-format -#| msgid "Removed certificates from user \"%(value)s\"" -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -#, fuzzy -#| msgid "Create a new group." -msgid "Not a managed group" -msgstr "Vytvoriť novú skupinu." - -#, fuzzy -#| msgid "Add users that can manage this token." -msgid "Add users that can manage members of this group." -msgstr "Pridať používateľa, ktorý môže spravovať tento token." - -#, fuzzy -#| msgid "Add users that can manage this token." -msgid "Remove users that can manage members of this group." -msgstr "Pridať používateľa, ktorý môže spravovať tento token." - #, fuzzy #| msgid "Permissions" msgid "" @@ -17189,1406 +20760,50 @@ msgstr[0] "%(count)d IPA lokalita nájdená" msgstr[1] "%(count)d IPA lokalít nájdených" msgstr[2] "%(count)d IPA lokalít nájdených" -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"OTP tokeny\n" +#, fuzzy +#| msgid "location" +msgid "delegation" +msgstr "lokalita" #, fuzzy -#| msgid "" -#| "\n" -#| "Manage YubiKey tokens.\n" -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" -"\n" -"Spravovať YubiKey tokeny.\n" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "OTP token" - -msgid "OTP tokens" -msgstr "OTP tokeny" - -msgid "OTP Tokens" -msgstr "OTP tokeny" - -msgid "OTP Token" -msgstr "OTP token" - -msgid "URI" -msgstr "URI" - -#, fuzzy, python-format -#| msgid "Modified OTP token \"%(value)s\"" -msgid "Added OTP token \"%(value)s\"" -msgstr "Upravený OTP token \"%(value)s\"" +#| msgid "locations" +msgid "delegations" +msgstr "lokality" #, fuzzy -#| msgid "IPA CA cannot be deleted" -msgid "cannot be empty" -msgstr "IPA CA nemôže byť odstránené" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Odstránený OTP token \"%(value)s\"" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Upravený OTP token \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "%(count)d IPA location matched" -#| msgid_plural "%(count)d IPA locations matched" -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" +#| msgid "locations" +msgid "Delegations" +msgstr "lokality" #, fuzzy -#| msgid "Sudo Rules" -msgid "" -"\n" -"Sudo Rules\n" -msgstr "Sudo pravidlá" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -#, fuzzy -#| msgid "this option is deprecated" -msgid "this option has been deprecated." -msgstr "táto voľba je zastaraná" - -msgid "sudo rules" -msgstr "sudo pravidlá" - -msgid "Sudo Rules" -msgstr "Sudo pravidlá" - -#, fuzzy -#| msgid "Sudo Rules" -msgid "Sudo Rule" -msgstr "Sudo pravidlá" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added HBAC rule \"%(value)s\"" -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo pridané" - -#, fuzzy, python-format -#| msgid "Deleted HBAC rule \"%(value)s\"" -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Odstránené HBAC pravidlo \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Modified HBAC rule \"%(value)s\"" -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo upravené" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -#, fuzzy -#| msgid "Users" -msgid "users" -msgstr "Používatelia" - -#, fuzzy -#| msgid "Commands" -msgid "command" -msgstr "Príkazy" - -#, fuzzy -#| msgid "Commands" -msgid "commands" -msgstr "Príkazy" - -msgid "runAs user" -msgstr "" - -#, fuzzy -#| msgid "Preserved users" -msgid "runAs users" -msgstr "Uschovaní používatelia" - -#, fuzzy -#| msgid "groups" -msgid "group runAs" -msgstr "skupiny" - -#, fuzzy -#| msgid "groups" -msgid "runAs groups" -msgstr "skupiny" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, fuzzy -#| msgid "sudo commands" -msgid "sudo command" -msgstr "sudo príkazy" - -msgid "sudo commands" -msgstr "sudo príkazy" - -msgid "Sudo Commands" -msgstr "Sudo príkazy" +#| msgid "location" +msgid "Delegation" +msgstr "lokalita" #, fuzzy, python-format #| msgid "Added IPA location \"%(value)s\"" -msgid "Added Sudo Command \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" msgstr "Pridaná IPA lokalita \"%(value)s\"" #, fuzzy, python-format -#| msgid "Deleted DNS zone \"%(value)s\"" -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Odstránená DNS zóna \"%(value)s\"" +#| msgid "Deleted IPA location \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" +msgstr "Odstránená IPA lokalita \"%(value)s\"" #, fuzzy, python-format -#| msgid "Modified ACI \"%(value)s\"" -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Upravené ACI \"%(value)s\"" +#| msgid "Modified IPA location \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" +msgstr "Upravená IPA lokalita \"%(value)s\"" #, fuzzy, python-format #| msgid "%(count)d IPA location matched" #| msgid_plural "%(count)d IPA locations matched" -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "%(count)d IPA lokalita nájdená" msgstr[1] "%(count)d IPA lokalít nájdených" msgstr[2] "%(count)d IPA lokalít nájdených" -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -#, fuzzy -#| msgid "sudo commands" -msgid "sudo command group" -msgstr "sudo príkazy" - -#, fuzzy -#| msgid "sudo commands" -msgid "sudo command groups" -msgstr "sudo príkazy" - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -#, fuzzy -#| msgid "Realm Domains" -msgid "Realm domains" -msgstr "Realm domény" - -msgid "Realm Domains" -msgstr "Realm domény" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -#, fuzzy -#| msgid "IPA CA cannot be deleted" -msgid "IPA server domain cannot be omitted" -msgstr "IPA CA nemôže byť odstránené" - -#, fuzzy -#| msgid "IPA CA cannot be deleted" -msgid "IPA server domain cannot be deleted" -msgstr "IPA CA nemôže byť odstránené" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "nastavenia kerberos ticket policy" - -#, fuzzy -#| msgid "kerberos ticket policy settings" -msgid "Kerberos Ticket Policy" -msgstr "nastavenia kerberos ticket policy" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -#, fuzzy -#| msgid "RADIUS proxy username" -msgid "RADIUS max renew" -msgstr "RADIUS proxy používateľské meno" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" -"\n" -"IPA lokality\n" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" -"\n" -"Narábanie s DNS lokalitami\n" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" -"\n" -" Nájdenie všetkých lokalít:\n" -" ipa location-find\n" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" -"\n" -" Zobrazenie špecifickej lokality:\n" -" ipa location-show lokalita\n" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" -"\n" -" Pridanie lokality:\n" -" ipa location-add lokalita --description 'Moja lokalita'\n" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" -"\n" -" Odstránenie lokality:\n" -" ipa location-del lokalita\n" - -msgid "location" -msgstr "lokalita" - -msgid "locations" -msgstr "lokality" - -msgid "IPA Locations" -msgstr "IPA lokality" - -msgid "IPA Location" -msgstr "IPA lokalita" - -msgid "Location name" -msgstr "Názov lokality" - -msgid "IPA location name" -msgstr "Názov IPA lokality" - -msgid "IPA Location description" -msgstr "Popis IPA lokality" - -msgid "Servers" -msgstr "Servery" - -msgid "Servers that belongs to the IPA location" -msgstr "Servery patriace do IPA lokality" - -msgid "Advertised by servers" -msgstr "Oznamované servermi" - -msgid "List of servers which advertise the given location" -msgstr "Zoznam serverov oznamujúcich danú lokalitu" - -msgid "Add a new IPA location." -msgstr "Pridať novú IPA lokalitu." - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Pridaná IPA lokalita \"%(value)s\"" - -msgid "Delete an IPA location." -msgstr "Odstrániť IPA lokalitu." - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Odstránená IPA lokalita \"%(value)s\"" - -msgid "IPA Server" -msgstr "IPA Server" - -msgid "Modify information about an IPA location." -msgstr "Upraviť informácie o IPA lokalite." - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "Upravená IPA lokalita \"%(value)s\"" - -msgid "Search for IPA locations." -msgstr "Vyhľadať IPA lokalitu." - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -msgid "Display information about an IPA location." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "Servers in location" -msgstr "Servery v lokalite." - -#, fuzzy -#| msgid "LDAP schema" -msgid "" -"\n" -"API Schema\n" -msgstr "LDAP schéma" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Show specific location:\n" -#| " ipa location-show location\n" -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" -"\n" -" Zobrazenie špecifickej lokality:\n" -" ipa location-show lokalita\n" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "Názov" - -#, fuzzy -#| msgid "Authentication" -msgid "Documentation" -msgstr "Autentifikácia" - -msgid "Exclude from" -msgstr "" - -#, fuzzy -#| msgid "Included attributes" -msgid "Include in" -msgstr "Zahrnuté atribúty" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -#| msgid "Permission" -msgid "Version" -msgstr "Povolenie" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -#| msgid "Record name" -msgid "Method name" -msgstr "Názov záznamu" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s: %(oname)s nenájdený" - -#, fuzzy -#| msgid "Display information about an IPA location." -msgid "Display information about a command." -msgstr "Zobraziť informácie o IPA lokalite." - -#, fuzzy -#| msgid "Search for Sudo Commands." -msgid "Search for commands." -msgstr "Vyhľadať sudo príkazy." - -msgid "Return command defaults" -msgstr "" - -#, fuzzy -#| msgid "Display information about an IPA location." -msgid "Display information about a class." -msgstr "Zobraziť informácie o IPA lokalite." - -#, fuzzy -#| msgid "Search for HBAC rules." -msgid "Search for classes." -msgstr "Vyhľadať HBAC pravidlá." - -#, fuzzy -#| msgid "Display information about an IPA location." -msgid "Display information about a help topic." -msgstr "Zobraziť informácie o IPA lokalite." - -#, fuzzy -#| msgid "Search for groups." -msgid "Search for help topics." -msgstr "Vyhľadávať skupiny." - -msgid "Required" -msgstr "Povinné" - -#, fuzzy -#| msgid "value" -msgid "Multi-value" -msgstr "hodnota" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -#| msgid "ACI name" -msgid "CLI name" -msgstr "ACI názov" - -#, fuzzy -#| msgid "Change password" -msgid "Confirm (password)" -msgstr "Zmeniť heslo" - -msgid "Default" -msgstr "" - -#, fuzzy -#| msgid "Default user group" -msgid "Default from" -msgstr "Predvolená používateľská skupina" - -msgid "Label" -msgstr "" - -#, fuzzy -#| msgid "Advertised by servers" -msgid "Convert on server" -msgstr "Oznamované servermi" - -#, fuzzy -#| msgid "Options" -msgid "Option group" -msgstr "Voľby" - -msgid "Sensitive" -msgstr "" - -#, fuzzy -#| msgid "Positional arguments" -msgid "Positional argument" -msgstr "Pozičný argument" - -#, fuzzy, python-format -#| msgid "%(parent)s: %(oname)s not found" -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s nenájdený" - -#, fuzzy -#| msgid "Display information about a DNS forward zone." -msgid "Display information about a command parameter." -msgstr "Zobraziť informácie o DNS forward zóne" - -msgid "Search command parameters." -msgstr "" - -#, fuzzy, python-format -#| msgid "%(parent)s: %(oname)s not found" -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s nenájdený" - -#, fuzzy -#| msgid "Display information about a DNS forward zone." -msgid "Display information about a command output." -msgstr "Zobraziť informácie o DNS forward zóne" - -#, fuzzy -#| msgid "Search for Sudo Commands." -msgid "Search for command outputs." -msgstr "Vyhľadať sudo príkazy." - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "ID rozsahy" - -msgid "ID Range" -msgstr "ID rozsah" - -#, fuzzy -#| msgid "Local domain" -msgid "local domain range" -msgstr "Lokálna doména" - -#, fuzzy -#| msgid "Active Directory domain" -msgid "Active Directory domain range" -msgstr "Active Directory doména" - -#, fuzzy -#| msgid "Active Directory domain with POSIX attributes" -msgid "Active Directory trust range with POSIX attributes" -msgstr "Active Directory doména s POSIX attribútmy" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added ID View \"%(value)s\"" -msgid "Added ID range \"%(value)s\"" -msgstr "Pridané ID View \"%(value)s\"" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -#, fuzzy -#| msgid "trusted domain object not found" -msgid "Specified trusted domain name could not be found." -msgstr "trust doménový objekt nenájdený" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted ID View \"%(value)s\"" -msgid "Deleted ID range \"%(value)s\"" -msgstr "Odstránené ID View \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -#| msgid "Modify DNS forward zone." -msgid "" -"Modify ID range.\n" -"\n" -msgstr "Upraviť DNS forward zónu" - -#, fuzzy, python-format -#| msgid "Modified ACI \"%(value)s\"" -msgid "Modified ID range \"%(value)s\"" -msgstr "Upravené ACI \"%(value)s\"" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, fuzzy -#| msgid "Remove Permission" -msgid "self service permission" -msgstr "Odstrániť povolenie" - -#, fuzzy -#| msgid "Search for permissions." -msgid "self service permissions" -msgstr "Vyhľadať povolenia." - -#, fuzzy -#| msgid "Remove Permission" -msgid "Self Service Permissions" -msgstr "Odstrániť povolenie" - -#, fuzzy -#| msgid "Remove Permission" -msgid "Self Service Permission" -msgstr "Odstrániť povolenie" - -#, fuzzy, python-format -#| msgid "Added HBAC service \"%(value)s\"" -msgid "Added selfservice \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola pridaná" - -#, fuzzy, python-format -#| msgid "Deleted HBAC service \"%(value)s\"" -msgid "Deleted selfservice \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -#, fuzzy, python-format -#| msgid "Modified HBAC service \"%(value)s\"" -msgid "Modified selfservice \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -#| msgid "IPA server role name" -msgid "" -"\n" -"IPA server roles\n" -msgstr "Názov role servera" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#, fuzzy -#| msgid "Server Role" -msgid "server role" -msgstr "Server rola" - -#, fuzzy -#| msgid "Server Roles" -msgid "server roles" -msgstr "Serverové role" - -#, fuzzy -#| msgid "Server Roles" -msgid "IPA Server Roles" -msgstr "Serverové role" - -#, fuzzy -#| msgid "Server Role" -msgid "IPA Server Role" -msgstr "Server rola" - -msgid "IPA server role name" -msgstr "Názov role servera" - -#, fuzzy -#| msgid "Rule status" -msgid "Role status" -msgstr "Stav pravidla" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -#, fuzzy -#| msgid "IPA server role name" -msgid "Find a server role on a server(s)" -msgstr "Názov role servera" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -#| msgid "Included attributes" -msgid "Include IPA master entries" -msgstr "Zahrnuté atribúty" - -#, fuzzy -#| msgid "Roles" -msgid "roles" -msgstr "Role" - -msgid "IPA role name" -msgstr "Názov IPA role" - msgid "HBAC rule and local members cannot both be set" msgstr "" @@ -18668,845 +20883,16 @@ msgstr "Deaktivovaný používateľský účet \"%(value)s\"" msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "Deaktivovaný používateľský účet \"%(value)s\"" -#, python-brace-format -msgid "{role}: role not found" -msgstr "{role}: rola nenájdená" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - #, fuzzy -#| msgid "Certificate Authorities" +#| msgid "IPA Server" msgid "" "\n" -"IPA certificate operations\n" -msgstr "Certifikačné autority" +"IPA servers\n" +msgstr "IPA Server" msgid "" "\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -#, fuzzy -#| msgid "Retrieve an existing certificate." -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "Získať existujúci certifikát." - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -#, fuzzy -#| msgid "Unspecified" -msgid " * 0 - unspecified\n" -msgstr "Nešpecifikované" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -#, fuzzy -#| msgid "Certificate Hold" -msgid " * 6 - certificateHold\n" -msgstr "Držanie certifikátu" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "Base-64 zakódovaný certifikát." - -#, fuzzy -#| msgid "Certificate" -msgid "Certificate chain" -msgstr "Certifikát" - -#, fuzzy -#| msgid "CA certificate" -msgid "X.509 certificate chain" -msgstr "CA certifikát" - -msgid "Subject" -msgstr "" - -#, fuzzy -#| msgid "Email address" -msgid "Subject email address" -msgstr "E-mailová adresa" - -msgid "Subject DNS name" -msgstr "" - -#, fuzzy -#| msgid "Street address" -msgid "Subject X.400 address" -msgstr "Ulica" - -#, fuzzy -#| msgid "Home directory" -msgid "Subject directory name" -msgstr "Domovský priečinok" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -#, fuzzy -#| msgid "IP Address" -msgid "Subject IP Address" -msgstr "IP adresa" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -#, fuzzy -#| msgid "Issue" -msgid "Issuer" -msgstr "Vydať" - -#, fuzzy -#| msgid "Issue" -msgid "Issuer DN" -msgstr "Vydať" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Serial number (hex)" -msgstr "Sériové číslo (hexadecimálne)" - -#, fuzzy -#| msgid "Rule status" -msgid "Request status" -msgstr "Stav pravidla" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -#, fuzzy -#| msgid "Deprecated options" -msgid "'add' option" -msgstr "Zastarané voľby" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Status" -msgstr "Stav" - -msgid "Revoked" -msgstr "" - -#, fuzzy -#| msgid "Replication configuration" -msgid "Revocation reason" -msgstr "Konfigurácia repliky" - -#, fuzzy -#| msgid "Reason for revoking the certificate (0-10)" -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "Dôvod revokácie certifikátu (0-10)" - -#, fuzzy, python-format -#| msgid "Owner" -msgid "Owner %s" -msgstr "Vlastník" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" -"Certifikát so sériovým číslom %(serial)s vydaný CA '%(ca)s' sa nenašiel" - -#, fuzzy -#| msgid "\"%s\" is not a valid permission type" -msgid "7 is not a valid revocation reason" -msgstr "\"%s\" nie je platný typ povolenia" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -#| msgid "Add one or more certificates to the user entry" -msgid "Search for certificates with these owner %s." -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy, python-format -#| msgid "Add one or more certificates to the user entry" -msgid "Search for certificates without these owner %s." -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy -#| msgid "ID Views" -msgid "ID View" -msgstr "ID Views" - -#, fuzzy -#| msgid "ID Views" -msgid "system ID View" -msgstr "ID Views" - -msgid "ID Views" -msgstr "ID Views" - -#, fuzzy -#| msgid "User categories" -msgid "User object overrides" -msgstr "Kategórie používateľov" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Pridané ID View \"%(value)s\"" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "Odstránené ID View \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Added ID View \"%(value)s\"" -msgid "Modified an ID View \"%(value)s\"" -msgstr "Pridané ID View \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "Nenašlo sa" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "hodnota" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "IPA objekt" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -#, fuzzy -#| msgid "Add a new ID View." -msgid "Add a new ID override." -msgstr "Pridať nové ID View" - -#, fuzzy, python-format -#| msgid "Added ID View \"%(value)s\"" -msgid "Added ID override \"%(value)s\"" -msgstr "Pridané ID View \"%(value)s\"" - -#, fuzzy -#| msgid "Delete an ID View." -msgid "Delete an ID override." -msgstr "Odstrániť ID View." - -#, fuzzy, python-format -#| msgid "Deleted ID View \"%(value)s\"" -msgid "Deleted ID override \"%(value)s\"" -msgstr "Odstránené ID View \"%(value)s\"" - -#, fuzzy -#| msgid "Modify an HBAC service." -msgid "Modify an ID override." -msgstr "Upraviť HBAC službu." - -#, fuzzy, python-format -#| msgid "Modified HBAC service \"%(value)s\"" -msgid "Modified an ID override \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -msgid "ID override" -msgstr "" - -#, fuzzy -#| msgid "Certificate profiles cannot be renamed" -msgid "ID overrides cannot be renamed" -msgstr "Certifikačné profily nemôžu byť premenované" - -#, fuzzy -#| msgid "Search for DNS servers." -msgid "Search for an ID override." -msgstr "Vyhľadať DNS servery" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -#| msgid "Display information about a DNS forward zone." -msgid "Display information about an ID override." -msgstr "Zobraziť informácie o DNS forward zóne" - -#, fuzzy -#| msgid "User ID Number" -msgid "User ID override" -msgstr "ID používateľa" - -#, fuzzy -#| msgid "User ID Number" -msgid "User ID overrides" -msgstr "ID používateľa" - -msgid "Base-64 encoded user certificate" -msgstr "Base-64 zakódovaný používateľský certifikát" - -#, fuzzy -#| msgid "Group ID Number" -msgid "Group ID override" -msgstr "ID skupiny" - -#, fuzzy -#| msgid "Group ID Number" -msgid "Group ID overrides" -msgstr "ID skupiny" - -#, fuzzy -#| msgid "Add one or more certificates to the user entry" -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -#| msgid "Remove one or more certificates to the user entry" -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -#, fuzzy, python-format -#| msgid "Removed certificates from user \"%(value)s\"" -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Added ID View \"%(value)s\"" -msgid "Added User ID override \"%(value)s\"" -msgstr "Pridané ID View \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted ID View \"%(value)s\"" -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Odstránené ID View \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Modified HBAC service \"%(value)s\"" -msgid "Modified an User ID override \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -#| msgid "Added ID View \"%(value)s\"" -msgid "Added Group ID override \"%(value)s\"" -msgstr "Pridané ID View \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted ID View \"%(value)s\"" -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Odstránené ID View \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -#| msgid "Automember Rule" -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "Automember pravidlo" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" +"Get information about installed IPA servers.\n" msgstr "" #, fuzzy @@ -19516,247 +20902,220 @@ msgstr "" #| " ipa location-find\n" msgid "" "\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" +" Find all servers:\n" +" ipa server-find\n" msgstr "" "\n" " Nájdenie všetkých lokalít:\n" " ipa location-find\n" +#, fuzzy +#| msgid "" +#| "\n" +#| " Show specific location:\n" +#| " ipa location-show location\n" msgid "" "\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" msgstr "" - -msgid "" "\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" +" Zobrazenie špecifickej lokality:\n" +" ipa location-show lokalita\n" -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" +#, fuzzy +#| msgid "Servers" +msgid "server" +msgstr "Servery" -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" +#, fuzzy +#| msgid "Servers" +msgid "servers" +msgstr "Servery" -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" +#, fuzzy +#| msgid "IPA Server" +msgid "IPA Servers" +msgstr "IPA Server" -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" +#, fuzzy +#| msgid "Servers in location" +msgid "Server location" +msgstr "Servery v lokalite." -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" +#, fuzzy +#| msgid "Service Settings" +msgid "Service weight" +msgstr "Nastavenia služby" + +msgid "Weight for server services" +msgstr "Váha pre služby servera" + +#, fuzzy +#| msgid "Service Certificate" +msgid "Service relative weight" +msgstr "Certifikát služby" + +#, fuzzy +#| msgid "Weight for server services" +msgid "Relative weight for server services (counts per location)" +msgstr "Váha pre služby servera" + +#, fuzzy +#| msgid "Disabled service \"%(value)s\"" +msgid "Enabled server roles" +msgstr "Deaktivovaná služba \"%(value)s\"" + +msgid "List of enabled roles" msgstr "" #, fuzzy -#| msgid "Automember Rule" -msgid "Auto Membership Rule" -msgstr "Automember pravidlo" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(otype)s \"%(oname)s\" nenájdené" +#| msgid "Modify information about an IPA location." +msgid "Modify information about an IPA server." +msgstr "Upraviť informácie o IPA lokalite." #, fuzzy, python-format -#| msgid "%(port)s is not a valid port" -msgid "%s is not a valid attribute." -msgstr "%(port)s nie je platný port" - -#, fuzzy -#| msgid "Added automember rule \"%(value)s\"" -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "Pridané automember pravidlo \"%(value)s\"" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Pridané automember pravidlo \"%(value)s\"" - -#, fuzzy -#| msgid "Auto member rule: %s not found!" -msgid "Auto Membership is not configured" -msgstr "Automember pravidlo: %s nenájdené!" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Added IPA location \"%(value)s\"" -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Pridaná IPA lokalita \"%(value)s\"" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "Automember pravidlo: %s nenájdené!" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Removed certificates from user \"%(value)s\"" -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Added automember rule \"%(value)s\"" -msgid "Modified automember rule \"%(value)s\"" -msgstr "Pridané automember pravidlo \"%(value)s\"" - -#, fuzzy -#| msgid "Deleted automember rule \"%(value)s\"" -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "Odstránené automember pravidlo \"%(value)s\"" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Odstránené automember pravidlo \"%(value)s\"" - -#, fuzzy -#| msgid "Search for HBAC rules." -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "Vyhľadať HBAC pravidlá." +#| msgid "Modified HBAC service \"%(value)s\"" +msgid "Modified IPA server \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." #, fuzzy, python-format #| msgid "%(count)d HBAC rule matched" #| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" msgstr[0] "%(count)d HBAC pravidlo nájdené" msgstr[1] "%(count)d HBAC pravidiel nájdených" msgstr[2] "%(count)d HBAC pravidiel nájdených" -#, fuzzy -#| msgid "Display information about an IPA location." -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "Zobraziť informácie o IPA lokalite." +#, fuzzy, python-format +#| msgid "Deleted HBAC service \"%(value)s\"" +msgid "Deleted IPA server \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" msgstr "" #, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" msgstr "" #, fuzzy, python-format -#| msgid "Removed certificates from user \"%(value)s\"" -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "Úloha obnovenia automember členstva začala" - -msgid "Automember rebuild membership task completed" -msgstr "Úloha obnovenia automember členstva dokončená" +#| msgid "error on server '%(server)s': %(error)s" +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "chyba na serveri '%(server)s': %(error)s" #, python-format -msgid "Task DN = '%s'" +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" msgstr "" -msgid "Automember" -msgstr "Automember" +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +#, fuzzy +#| msgid "Some entries were not deleted" +msgid "Server has already been deleted" +msgstr "Niektoré položky neboli odstránené" + +msgid "Agreements deleted" +msgstr "" + +#, fuzzy +#| msgid "Some entries were not deleted" +msgid "Following segments were not deleted:" +msgstr "Niektoré položky neboli odstránené" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +#, fuzzy +#| msgid "Status" +msgid "State" +msgstr "Stav" + +#, fuzzy +#| msgid "Servers" +msgid "Server state" +msgstr "Servery" + +#, fuzzy, python-format +#| msgid "Changed password for \"%(value)s\"" +msgid "Changed server state of \"%(value)s\"." +msgstr "Zmenené heslo pre \"%(value)s\"" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" msgid "" "\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" +"Session Support for IPA\n" msgstr "" #, fuzzy @@ -19947,6 +21306,941 @@ msgstr "Deaktivovať CA ACL." msgid "Enabled CA \"%(value)s\"" msgstr "HBAC pravidlo \"%(value)s\" bolo aktivované" +#, fuzzy +#| msgid "Certificate Authority" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "Certifikačná autorita" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +#, fuzzy +#| msgid "Modify configuration options." +msgid "Certificate Identity Mapping configuration options" +msgstr "Upraviť konfiguračné voľby." + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +#, fuzzy +#| msgid "Modify CA configuration." +msgid "Modify Certificate Identity Mapping configuration." +msgstr "Upraviť CA konfiguráciu." + +#, fuzzy +#| msgid "Show the current configuration." +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "Zobraziť konfiguračné voľby" + +#, fuzzy +#| msgid "Certificate Authorities" +msgid "Certificate Identity Mapping Rules" +msgstr "Certifikačné autority" + +#, fuzzy +#| msgid "Certificate Type" +msgid "Certificate Identity Mapping Rule" +msgstr "Typ certifikátu" + +#, fuzzy +#| msgid "Certificate profiles cannot be renamed" +msgid "Certificate Identity Mapping Rule name" +msgstr "Certifikačné profily nemôžu byť premenované" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Rule used to map the certificate with a user entry" +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "Zobraziť informácie o DNS forward zóne" + +#, fuzzy +#| msgid "Delete a Certificate Profile." +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "Odstrániť certifikačný profil" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Delete a Certificate Profile." +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "Odstrániť certifikačný profil" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "User login" +msgid "User logins" +msgstr "Prihlasovacie meno" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 10" +msgstr "musí byť najmenej %(minvalue)d" + +msgid "configuration options" +msgstr "konfiguračné voľby" + +msgid "Configuration" +msgstr "Konfigurácia" + +msgid "Maximum hostname length" +msgstr "" + +#, fuzzy +#| msgid "IPA trust" +msgid "IPA masters" +msgstr "IPA trust" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA CA servers" +msgstr "IPA Server" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +#, fuzzy +#| msgid "IPA DNS version" +msgid "Hidden IPA DNS servers" +msgstr "Verzia IPA DNS" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +#, fuzzy +#| msgid "options are not allowed" +msgid "Empty domain is not allowed" +msgstr "voľby nie sú povolené" + +#, fuzzy, python-format +#| msgid "invalid domain-name: %s" +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "neplatné doménové meno: %s" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +#, fuzzy +#| msgid "Entry %s does not exist" +msgid "The group doesn't exist" +msgstr "Položka %s neexistuje" + +#, fuzzy, python-format +#| msgid "options are not allowed" +msgid "attribute \"%s\" not allowed" +msgstr "voľby nie sú povolené" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "chyba na serveri '%(server)s': %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Delete location:\n" +#| " ipa location-del location\n" +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" +"\n" +" Odstránenie lokality:\n" +" ipa location-del lokalita\n" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "Disable the Kerberos key and SSL certificate of a service." +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "Deaktivovať Kerberos kľúč a SSL certifikát služby." + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +#, fuzzy +#| msgid "Base-64 encoded user certificate" +msgid "Base-64 encoded host certificate" +msgstr "Base-64 zakódovaný používateľský certifikát" + +msgid "Serial Number" +msgstr "Sériové číslo" + +msgid "Serial Number (hex)" +msgstr "Sériové číslo (hexadecimálne)" + +#, fuzzy +#| msgid "Authentication" +msgid "Authentication Indicators" +msgstr "Autentifikácia" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added host \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted host \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy +#| msgid "No A, AAAA, SSHFP or PTR records found." +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "Nenašli sa žiadne A, AAAA, SSHFP, alebo PTR záznamy." + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "Nenašli sa žiadne A, AAAA, SSHFP, alebo PTR záznamy." + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified host \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "cn je nemeniteľné" + +#, fuzzy, python-format +#| msgid "%(count)d IPA location matched" +#| msgid_plural "%(count)d IPA locations matched" +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +#, fuzzy, python-format +#| msgid "Disabled service \"%(value)s\"" +msgid "Disabled host \"%(value)s\"" +msgstr "Deaktivovaná služba \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificates to host \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add new principal alias to host entry" +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove principal alias from a host entry" +msgstr "Odstrániť certifikáty zo služby" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "ID rozsahy" + +msgid "ID Range" +msgstr "ID rozsah" + +#, fuzzy +#| msgid "Local domain" +msgid "local domain range" +msgstr "Lokálna doména" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added ID View \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" +msgstr "Pridané ID View \"%(value)s\"" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +#, fuzzy +#| msgid "trusted domain object not found" +msgid "Specified trusted domain name could not be found." +msgstr "trust doménový objekt nenájdený" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted ID View \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" +msgstr "Odstránené ID View \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "Modify DNS forward zone." +msgid "" +"Modify ID range.\n" +"\n" +msgstr "Upraviť DNS forward zónu" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified ID range \"%(value)s\"" +msgstr "Upravené ACI \"%(value)s\"" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + msgid "Internationalization messages" msgstr "" @@ -21172,12 +23466,6 @@ msgstr "Certifikát revokovaný" msgid "REVOKED" msgstr "" -msgid "Serial Number" -msgstr "Sériové číslo" - -msgid "Serial Number (hex)" -msgstr "Sériové číslo (hexadecimálne)" - #, fuzzy #| msgid "SSH public key fingerprint" msgid "SHA1 Fingerprint" @@ -21248,11 +23536,6 @@ msgstr "Pridať nové certifikáty k službe" msgid "Add certificate mapping data" msgstr "CA certifikát" -#, fuzzy -#| msgid "Certificate Hold" -msgid "Certificate mapping data" -msgstr "Držanie certifikátu" - #, fuzzy #| msgid "Configuration" msgid "Configuration string" @@ -22116,9 +24399,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "" - msgid "Netgroup Settings" msgstr "Netgroup nastavenia" @@ -22257,9 +24537,6 @@ msgstr "" msgid "Add password policy" msgstr "Politky hesiel" -msgid "Password Policy" -msgstr "Politika hesiel" - #, fuzzy #| msgid "password policies" msgid "Remove password policies" @@ -22794,19 +25071,6 @@ msgstr "Odstrániť povolenie" msgid "Remove domains" msgstr "Realm domény" -#, fuzzy -#| msgid "Trust Settings" -msgid "Trust direction" -msgstr "Trust nastavenia" - -#, fuzzy -#| msgid "Rule status" -msgid "Trust status" -msgstr "Stav pravidla" - -msgid "Trust type" -msgstr "" - msgid "Alternative UPN suffixes" msgstr "" @@ -23359,11 +25623,6 @@ msgstr "" msgid "Topology" msgstr "" -#, fuzzy -#| msgid "Trust Settings" -msgid "Trusts" -msgstr "Trust nastavenia" - msgid "True" msgstr "" @@ -23478,1604 +25737,6 @@ msgstr "Povinné pole" msgid "Unsupported value" msgstr "Nepodporovaná hodnota" -#, fuzzy -#| msgid "Roles" -msgid "Role" -msgstr "Role" - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added role \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted profile \"%(value)s\"" -msgid "Deleted role \"%(value)s\"" -msgstr "Odstránený profil \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified role \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -#| msgid "IPA Server" -msgid "" -"\n" -"IPA servers\n" -msgstr "IPA Server" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Find all locations:\n" -#| " ipa location-find\n" -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -" Nájdenie všetkých lokalít:\n" -" ipa location-find\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Show specific location:\n" -#| " ipa location-show location\n" -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" -"\n" -" Zobrazenie špecifickej lokality:\n" -" ipa location-show lokalita\n" - -#, fuzzy -#| msgid "Servers" -msgid "server" -msgstr "Servery" - -#, fuzzy -#| msgid "Servers" -msgid "servers" -msgstr "Servery" - -#, fuzzy -#| msgid "IPA Server" -msgid "IPA Servers" -msgstr "IPA Server" - -#, fuzzy -#| msgid "Servers in location" -msgid "Server location" -msgstr "Servery v lokalite." - -#, fuzzy -#| msgid "Service Settings" -msgid "Service weight" -msgstr "Nastavenia služby" - -msgid "Weight for server services" -msgstr "Váha pre služby servera" - -#, fuzzy -#| msgid "Service Certificate" -msgid "Service relative weight" -msgstr "Certifikát služby" - -#, fuzzy -#| msgid "Weight for server services" -msgid "Relative weight for server services (counts per location)" -msgstr "Váha pre služby servera" - -#, fuzzy -#| msgid "Disabled service \"%(value)s\"" -msgid "Enabled server roles" -msgstr "Deaktivovaná služba \"%(value)s\"" - -msgid "List of enabled roles" -msgstr "" - -#, fuzzy -#| msgid "Modify information about an IPA location." -msgid "Modify information about an IPA server." -msgstr "Upraviť informácie o IPA lokalite." - -#, fuzzy, python-format -#| msgid "Modified HBAC service \"%(value)s\"" -msgid "Modified IPA server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -#| msgid "Deleted HBAC service \"%(value)s\"" -msgid "Deleted IPA server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "error on server '%(server)s': %(error)s" -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "chyba na serveri '%(server)s': %(error)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, fuzzy -#| msgid "Some entries were not deleted" -msgid "Server has already been deleted" -msgstr "Niektoré položky neboli odstránené" - -msgid "Agreements deleted" -msgstr "" - -#, fuzzy -#| msgid "Some entries were not deleted" -msgid "Following segments were not deleted:" -msgstr "Niektoré položky neboli odstránené" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -#, fuzzy -#| msgid "Status" -msgid "State" -msgstr "Stav" - -#, fuzzy -#| msgid "Servers" -msgid "Server state" -msgstr "Servery" - -#, fuzzy, python-format -#| msgid "Changed password for \"%(value)s\"" -msgid "Changed server state of \"%(value)s\"." -msgstr "Zmenené heslo pre \"%(value)s\"" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -#, fuzzy -#| msgid "Member groups" -msgid "Member principals" -msgstr "Členské skupiny" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, fuzzy, python-format -#| msgid "Member of" -msgid "member %s" -msgstr "Členom" - -#, fuzzy -#| msgid "Remove certificates from a service" -msgid "Remove member from a named service delegation." -msgstr "Odstrániť certifikáty zo služby" - -#, fuzzy -#| msgid "Add services to an HBAC rule." -msgid "service delegation rule" -msgstr "Pridať služby do HBAC pravidla." - -#, fuzzy -#| msgid "Service Options" -msgid "service delegation rules" -msgstr "Voľby služieb" - -#, fuzzy -#| msgid "Service Options" -msgid "Service delegation rules" -msgstr "Voľby služieb" - -#, fuzzy -#| msgid "Service Options" -msgid "Service delegation rule" -msgstr "Voľby služieb" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted HBAC service \"%(value)s\"" -msgid "Deleted service delegation \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -msgid "privileged service delegation rule" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d IPA location matched" -#| msgid_plural "%(count)d IPA locations matched" -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -msgid "service delegation target" -msgstr "" - -#, fuzzy -#| msgid "Service Settings" -msgid "service delegation targets" -msgstr "Nastavenia služby" - -#, fuzzy -#| msgid "Service Settings" -msgid "Service delegation targets" -msgstr "Nastavenia služby" - -#, fuzzy -#| msgid "Service Settings" -msgid "Service delegation target" -msgstr "Nastavenia služby" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Added service delegation target \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted HBAC service \"%(value)s\"" -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -msgid "privileged service delegation target" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d IPA location matched" -#| msgid_plural "%(count)d IPA locations matched" -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "Poškodené DN" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(user)s nie je POSIX užívateľ" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "Neplatná LDAP URI." - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "Predvolená skupina pre nových používateľov nenájdená" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Delete location:\n" -#| " ipa location-del location\n" -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" -"\n" -" Odstránenie lokality:\n" -" ipa location-del lokalita\n" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -#, fuzzy -#| msgid "Disable the Kerberos key and SSL certificate of a service." -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "Deaktivovať Kerberos kľúč a SSL certifikát služby." - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#, fuzzy -#| msgid "Base-64 encoded user certificate" -msgid "Base-64 encoded host certificate" -msgstr "Base-64 zakódovaný používateľský certifikát" - -msgid "Principal alias" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "Odtlačok verejného SSH kľúča (fingerprint)" - -#, fuzzy -#| msgid "Authentication" -msgid "Authentication Indicators" -msgstr "Autentifikácia" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added host \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted host \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy -#| msgid "No A, AAAA, SSHFP or PTR records found." -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "Nenašli sa žiadne A, AAAA, SSHFP, alebo PTR záznamy." - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "Nenašli sa žiadne A, AAAA, SSHFP, alebo PTR záznamy." - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified host \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "cn je nemeniteľné" - -#, fuzzy, python-format -#| msgid "%(count)d IPA location matched" -#| msgid_plural "%(count)d IPA locations matched" -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -#, fuzzy, python-format -#| msgid "Disabled service \"%(value)s\"" -msgid "Disabled host \"%(value)s\"" -msgstr "Deaktivovaná služba \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Added certificates to host \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Removed certificates from user \"%(value)s\"" -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -#, fuzzy -#| msgid "Add one or more certificates to the user entry" -msgid "Add new principal alias to host entry" -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -#| msgid "Remove certificates from a service" -msgid "Remove principal alias from a host entry" -msgstr "Odstrániť certifikáty zo služby" - -#, fuzzy, python-format -#| msgid "Removed certificates from user \"%(value)s\"" -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -#, fuzzy -#| msgid "Modify an HBAC service." -msgid "Modify Class of Service entry" -msgstr "Upraviť HBAC službu." - -msgid "Display Class of Service entry" -msgstr "" - -#, fuzzy -#| msgid "Search for HBAC services." -msgid "Search for Class of Service entry" -msgstr "Vyhľadať HBAC služby." - -#, fuzzy -#| msgid "password policies" -msgid "password policy" -msgstr "Politky hesiel" - -msgid "password policies" -msgstr "Politky hesiel" - -msgid "Password Policies" -msgstr "Politiky hesiel" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -#| msgid "User name" -msgid "User check" -msgstr "Používateľské meno" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -#, fuzzy -#| msgid "IPA trust" -msgid "trust" -msgstr "IPA trust" - -#, fuzzy -#| msgid "IPA trust" -msgid "trusts" -msgstr "IPA trust" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, fuzzy, python-brace-format -#| msgid "invalid Profile ID" -msgid "invalid SID: {SID}" -msgstr "nevalídne ID profilu" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Disabled user account \"%(value)s\"" -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -#, fuzzy -#| msgid "Domain" -msgid "domain" -msgstr "Doména" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -#, fuzzy -#| msgid "Realm Domains" -msgid "Realm-domain mismatch" -msgstr "Realm domény" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -#, fuzzy -#| msgid "ID Range" -msgid "id range" -msgstr "ID rozsah" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -#, fuzzy -#| msgid "Range Settings" -msgid "range exists" -msgstr "Nastavenie rozsahu" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted group \"%(value)s\"" -msgid "Deleted trust \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -#| msgid "Profile configuration" -msgid "trust configuration" -msgstr "Configurácia profilu" - -#, fuzzy -#| msgid "DNS Global Configuration" -msgid "Global Trust Configuration" -msgstr "DNS globálne nastavenia" - -#, fuzzy -#| msgid "IPA trust" -msgid "IPA AD trust agents" -msgstr "IPA trust" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -#, fuzzy -#| msgid "Unsupported value" -msgid "unsupported trust type" -msgstr "Nepodporovaná hodnota" - -#, fuzzy, python-format -#| msgid "Modified ACI \"%(value)s\"" -msgid "Modified \"%(value)s\" trust configuration" -msgstr "Upravené ACI \"%(value)s\"" - -msgid "SID" -msgstr "SID" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -#, fuzzy -#| msgid "trusted domain user not found" -msgid "trust domains" -msgstr "trust doménový užívateľ nenájdený" - -#, fuzzy -#| msgid "trusted domain user not found" -msgid "Trusted domains" -msgstr "trust doménový užívateľ nenájdený" - -#, fuzzy -#| msgid "trusted domain user not found" -msgid "Trusted domain" -msgstr "trust doménový užívateľ nenájdený" - -#, fuzzy -#| msgid "Domain name" -msgid "Domain enabled" -msgstr "Doménové meno" - -#, fuzzy, python-format -#| msgid "Removed certificates from user \"%(value)s\"" -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, fuzzy, python-format -#| msgid "Enabled HBAC rule \"%(value)s\"" -msgid "Enabled trust domain \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo aktivované" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -#| msgid "Disabled user account \"%(value)s\"" -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -#, fuzzy -#| msgid "Certificate Authority" -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "Certifikačná autorita" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -#, fuzzy -#| msgid "Modify configuration options." -msgid "Certificate Identity Mapping configuration options" -msgstr "Upraviť konfiguračné voľby." - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -#, fuzzy -#| msgid "Modify CA configuration." -msgid "Modify Certificate Identity Mapping configuration." -msgstr "Upraviť CA konfiguráciu." - -#, fuzzy -#| msgid "Show the current configuration." -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "Zobraziť konfiguračné voľby" - -#, fuzzy -#| msgid "Certificate Authorities" -msgid "Certificate Identity Mapping Rules" -msgstr "Certifikačné autority" - -#, fuzzy -#| msgid "Certificate Type" -msgid "Certificate Identity Mapping Rule" -msgstr "Typ certifikátu" - -#, fuzzy -#| msgid "Certificate profiles cannot be renamed" -msgid "Certificate Identity Mapping Rule name" -msgstr "Certifikačné profily nemôžu byť premenované" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -#, fuzzy -#| msgid "Remove one or more certificates to the user entry" -msgid "Rule used to map the certificate with a user entry" -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, fuzzy -#| msgid "Display information about a DNS forward zone." -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "Zobraziť informácie o DNS forward zóne" - -#, fuzzy -#| msgid "Delete a Certificate Profile." -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "Odstrániť certifikačný profil" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -#| msgid "Delete a Certificate Profile." -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "Odstrániť certifikačný profil" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#, fuzzy -#| msgid "User login" -msgid "User logins" -msgstr "Prihlasovacie meno" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -#, fuzzy -#| msgid "Privilege Settings" -msgid "Privilege" -msgstr "Nastavenia privilégia" - -#, fuzzy, python-format -#| msgid "Added HBAC rule \"%(value)s\"" -msgid "Added privilege \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo pridané" - -#, fuzzy, python-format -#| msgid "Deleted profile \"%(value)s\"" -msgid "Deleted privilege \"%(value)s\"" -msgstr "Odstránený profil \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Modified HBAC rule \"%(value)s\"" -msgid "Modified privilege \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo upravené" - -#, fuzzy, python-format -#| msgid "%(count)d HBAC rule matched" -#| msgid_plural "%(count)d HBAC rules matched" -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -25272,706 +25933,49 @@ msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" #, fuzzy -#| msgid "location" -msgid "delegation" -msgstr "lokalita" +#| msgid "Remove Permission" +msgid "self service permission" +msgstr "Odstrániť povolenie" #, fuzzy -#| msgid "locations" -msgid "delegations" -msgstr "lokality" +#| msgid "Search for permissions." +msgid "self service permissions" +msgstr "Vyhľadať povolenia." #, fuzzy -#| msgid "locations" -msgid "Delegations" -msgstr "lokality" +#| msgid "Remove Permission" +msgid "Self Service Permissions" +msgstr "Odstrániť povolenie" #, fuzzy -#| msgid "location" -msgid "Delegation" -msgstr "lokalita" +#| msgid "Remove Permission" +msgid "Self Service Permission" +msgstr "Odstrániť povolenie" #, fuzzy, python-format -#| msgid "Added IPA location \"%(value)s\"" -msgid "Added delegation \"%(value)s\"" -msgstr "Pridaná IPA lokalita \"%(value)s\"" +#| msgid "Added HBAC service \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola pridaná" #, fuzzy, python-format -#| msgid "Deleted IPA location \"%(value)s\"" -msgid "Deleted delegation \"%(value)s\"" -msgstr "Odstránená IPA lokalita \"%(value)s\"" +#| msgid "Deleted HBAC service \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" #, fuzzy, python-format -#| msgid "Modified IPA location \"%(value)s\"" -msgid "Modified delegation \"%(value)s\"" -msgstr "Upravená IPA lokalita \"%(value)s\"" +#| msgid "Modified HBAC service \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." #, fuzzy, python-format -#| msgid "%(count)d IPA location matched" -#| msgid_plural "%(count)d IPA locations matched" -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "HBAC pravidlá" - -msgid "HBAC Rules" -msgstr "HBAC pravidlá" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo pridané" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Odstránené HBAC pravidlo \"%(value)s\"" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo upravené" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" msgstr[0] "%(count)d HBAC pravidlo nájdené" msgstr[1] "%(count)d HBAC pravidiel nájdených" msgstr[2] "%(count)d HBAC pravidiel nájdených" -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo aktivované" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "Deaktivované HBAC pravidlo \"%(value)s\"" - -msgid "Access time" -msgstr "Čas prístupu" - -#, fuzzy -#| msgid "Add users and groups to an HBAC rule." -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "Pridať používateľov a skupiny do HBAC pravidla." - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "Prístup povolený: %s" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -#, fuzzy -#| msgid "Member groups" -msgid "Member service groups" -msgstr "Členské skupiny" - -#, fuzzy -#| msgid "HBAC services" -msgid "Member HBAC service groups" -msgstr "HBAC služby" - -msgid "Member ID user overrides" -msgstr "" - -#, fuzzy -#| msgid "Indirect Membership" -msgid "Indirect Member ID user overrides" -msgstr "Nepriame členstvo" - -#, fuzzy -#| msgid "Indirect Membership" -msgid "Indirect Member permissions" -msgstr "Nepriame členstvo" - -#, fuzzy -#| msgid "Indirect Membership" -msgid "Indirect Member HBAC service" -msgstr "Nepriame členstvo" - -#, fuzzy -#| msgid "Indirect Membership" -msgid "Indirect Member HBAC service group" -msgstr "Nepriame členstvo" - -msgid "Invalid format. Should be name=value" -msgstr "" - -#, fuzzy -#| msgid "This entry cannot be enabled or disabled" -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Táto položka nemôže byť aktivovaná alebo deaktivovaná" - -msgid "entry" -msgstr "" - -#, fuzzy -#| msgid "No entries." -msgid "entries" -msgstr "Žiadne položky." - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "kontajner (%(container)s) nenájdený" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s nenájdený" - -#, fuzzy, python-format -#| msgid "key %(key)s already exists" -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "kľúč %(key)s už existuje" - -#, fuzzy, python-format -#| msgid "options are not allowed" -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "voľby nie sú povolené" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, fuzzy, python-format -#| msgid "Failed to add" -msgid "%s to add" -msgstr "Zlyhalo pridanie" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "added attribute value to entry %(value)s" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Removed certificates from user \"%(value)s\"" -msgid "removed attribute values from entry %(value)s" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -#, fuzzy -#| msgid "must be True or False" -msgid "must be TRUE or FALSE" -msgstr "musí byť True alebo False" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#, fuzzy -#| msgid "Password expiration" -msgid "User password expiration" -msgstr "Vypršanie hesla" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -#, fuzzy -#| msgid "Home directory" -msgid "SMB Home Directory" -msgstr "Domovský priečinok" - -#, fuzzy -#| msgid "Home directory" -msgid "SMB Home Directory Drive" -msgstr "Domovský priečinok" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "neplatný formát e-mailovej adresy: %(email)s" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "manažér %(manager)s nenájdený" - -#, fuzzy -#| msgid "Revoke a certificate." -msgid "Issuer of the certificate" -msgstr "Revokácia certifikátu." - -#, fuzzy -#| msgid "Service Certificate" -msgid "Subject of the certificate" -msgstr "Certifikát služby" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#, fuzzy -#| msgid "Add one or more certificates to the user entry" -msgid "Add one or more certificate mappings to the user entry." -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -#| msgid "Remove one or more certificates to the user entry" -msgid "Remove one or more certificate mappings from the user entry." -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -#, fuzzy, python-format -#| msgid "Removed certificates from user \"%(value)s\"" -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added group \"%(value)s\"" -msgid "Added user \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy -#| msgid "Default group for new users not found" -msgid "Default group for new users is not POSIX" -msgstr "Predvolená skupina pre nových používateľov nenájdená" - -#, fuzzy, python-format -#| msgid "Deleted record \"%(value)s\"" -msgid "Deleted user \"%(value)s\"" -msgstr "Odstránený záznam \"%(value)s\"" - -#, python-format -msgid "%s: user is already preserved" -msgstr "%s: používateľ je už uschovaný" - -#, fuzzy, python-format -#| msgid "Modified group \"%(value)s\"" -msgid "Modified user \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Disabled user account \"%(value)s\"" -msgid "Undeleted user account \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "%s: user is already preserved" -msgid "user \"%s\" is already active" -msgstr "%s: používateľ je už uschovaný" - -#, fuzzy, python-format -#| msgid "Disabled user account \"%(value)s\"" -msgid "Staged user account \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Disabled user account \"%(value)s\"" -msgid "Enabled user account \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, fuzzy, python-format -#| msgid "Disabled user account \"%(value)s\"" -msgid "Unlocked account \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -#, fuzzy -#| msgid "Failed to add" -msgid "Failed logins" -msgstr "Zlyhalo pridanie" - -#, fuzzy -#| msgid "User authentication types" -msgid "Last successful authentication" -msgstr "Typy autentifikácie používateľa" - -#, fuzzy -#| msgid "User authentication types" -msgid "Last failed authentication" -msgstr "Typy autentifikácie používateľa" - -msgid "Time now" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, fuzzy, python-format -#| msgid "salt value: %(err)s" -msgid "%(host)s failed: %(error)s" -msgstr "salt hodnota: %(err)s" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Účet deaktivovaný: %(disabled)s" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -#, fuzzy -#| msgid "Add one or more certificates to the user entry" -msgid "Add new principal alias to the user entry" -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -#| msgid "Remove one or more certificates to the user entry" -msgid "Remove principal alias from the user entry" -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -#, fuzzy, python-format -#| msgid "Removed certificates from user \"%(value)s\"" -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - #, python-format msgid "all masters must have %(role)s role enabled" msgstr "" @@ -26177,25 +26181,6 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - #, fuzzy #| msgid "must be an integer" msgid "Request must be a dict" @@ -26221,6 +26206,25 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #, python-format msgid "must equal %r" msgstr "" diff --git a/po/tg.po b/po/tg.po index 4ce7d166d..729265106 100644 --- a/po/tg.po +++ b/po/tg.po @@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2019-11-11 10:26+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Tajik\n" @@ -18,6 +18,103 @@ msgstr "" "Plural-Forms: nplurals=1; plural=0\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "File %(file)s not found" +msgid "principal not found\n" +msgstr "Файли %(file)s пайдо нашуд." + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "File %(file)s not found" +msgid "realm not found\n" +msgstr "Файли %(file)s пайдо нашуд." + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Realm name" +msgstr "Азнавномгузорӣ" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + #, c-format msgid "Out of memory!\n" msgstr "Берун аз хотира!\n" @@ -274,103 +371,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, fuzzy, c-format -#| msgid "File %(file)s not found" -msgid "principal not found\n" -msgstr "Файли %(file)s пайдо нашуд." - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -#| msgid "File %(file)s not found" -msgid "realm not found\n" -msgstr "Файли %(file)s пайдо нашуд." - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -#, fuzzy -#| msgid "Rename" -msgid "Realm name" -msgstr "Азнавномгузорӣ" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - #, c-format msgid "cannot open configuration file %s\n" msgstr "" @@ -9234,6 +9234,103 @@ msgid "" "Establish bi-directional trust. By default trust is inbound one-way only." msgstr "" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +#| msgid "description" +msgid "Profile description" +msgstr "шарҳ" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "" "\n" "ID ranges\n" @@ -9446,103 +9543,6 @@ msgid "" " " msgstr "" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -#| msgid "description" -msgid "Profile description" -msgstr "шарҳ" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - msgid "Remove users that can manage this token." msgstr "" @@ -11773,161 +11773,20 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "Additional instructions:" +msgid "Results are truncated, try a more specific search" msgstr "" #, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" +msgid "Unknown option: %(option)s" msgstr "" -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." +msgid "Client version. Used to determine if server will accept request." msgstr "" -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" +msgid "any of the configured servers" msgstr "" -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." +msgid "Exceeded number of tries to forward a request." msgstr "" #, python-format @@ -11984,6 +11843,136 @@ msgstr "" msgid "No file to read" msgstr "" +msgid "incorrect type" +msgstr "" + +msgid "Only one value is allowed" +msgstr "" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +msgid "must be an integer" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +msgid "must be a certificate" +msgstr "" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, python-format +msgid "must be '%(value)s'" +msgstr "" + +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +msgid "must be datetime value" +msgstr "" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +msgid "must be DNS name" +msgstr "" + +msgid "must be absolute" +msgstr "" + +msgid "must be relative" +msgstr "" + +msgid "must be dictionary" +msgstr "" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + msgid "A dictionary representing an LDAP entry" msgstr "" @@ -11993,16 +11982,6 @@ msgstr "" msgid "All commands should at least have a result" msgstr "" -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" @@ -12362,149 +12341,161 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" -msgid "incorrect type" -msgstr "" - -msgid "Only one value is allowed" -msgstr "" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)s" +msgid "Additional instructions:" msgstr "" #, python-format msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." msgstr "" #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" msgstr "" #, python-format -msgid "must be at least %(minlength)d bytes" +msgid "'%(option)s' option is deprecated. %(additional_info)s" msgstr "" #, python-format -msgid "can be at most %(maxlength)d bytes" +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" msgstr "" #, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -msgid "must be a certificate" -msgstr "" - -msgid "must be a certificate signing request" +msgid "DNS server %(server)s: %(error)s." msgstr "" #, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "must be at least %(minlength)d characters" +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." msgstr "" #, python-format -msgid "can be at most %(maxlength)d characters" +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" #, python-format -msgid "must be exactly %(length)d characters" +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." msgstr "" #, python-format -msgid "The character %(char)r is not allowed." +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" msgstr "" #, python-format -msgid "must be '%(value)s'" +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." msgstr "" #, python-format -msgid "must be one of %(values)s" -msgstr "" - -msgid "must be datetime value" -msgstr "" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -msgid "must be relative" -msgstr "" - -msgid "must be dictionary" -msgstr "" - -msgid "must be Kerberos principal" +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." msgstr "" #, python-format -msgid "Malformed principal: '%(value)s'" +msgid "'%(command)s' is deprecated. %(additional_info)s" msgstr "" -msgid "Service principal is required" +#, python-format +msgid "%(line)s" msgstr "" -#, fuzzy, python-format -#| msgid "File %(file)s not found" -msgid "%(filename)s: file not found" -msgstr "Файли %(file)s пайдо нашуд." - -#, python-brace-format -msgid "Unable to parse option {item}" +#, python-format +msgid "Search result has been truncated: %(reason)s" msgstr "" -msgid "any of the configured servers" +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." msgstr "" -msgid "Exceeded number of tries to forward a request." +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." msgstr "" msgid "Filename is empty" @@ -12606,6 +12597,19 @@ msgstr "" msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "%(filename)s: file not found" +msgstr "Файли %(file)s пайдо нашуд." + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + #, python-format msgid "Retrieving CA cert chain failed: %s" msgstr "" @@ -12622,10 +12626,6 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" -#, python-format -msgid "objectclass %s not found" -msgstr "" - #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" @@ -12752,114 +12752,10 @@ msgid "%(count)d automount key matched" msgid_plural "%(count)d automount keys matched" msgstr[0] "" +#, python-format msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -#, fuzzy -#| msgid "Configuration" -msgid "Profile configuration" -msgstr "Ҷӯрсозӣ" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "" @@ -13082,20 +12978,4235 @@ msgstr "" msgid "%i CAs removed." msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "Файли %(file)s пайдо нашуд." + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +#| msgid "Groups" +msgid "groups" +msgstr "Гуруҳҳо" + +#, fuzzy +#| msgid "User group" +msgid "User Group" +msgstr "Гурӯҳи корбар" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "" +"\n" +"DNS server configuration\n" +msgstr "Ҷӯрсозӣ" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "DNS server" +msgstr "Сервери IPA" + +msgid "DNS servers" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "DNS Servers" +msgstr "Сервери IPA" + +#, fuzzy +#| msgid "IPA Server" +msgid "DNS Server" +msgstr "Сервери IPA" + +#, fuzzy +#| msgid "Server Name" +msgid "DNS Server name" +msgstr "Номи сервер" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Service" +msgid "HBAC services" +msgstr "Хидмат" + +#, fuzzy +#| msgid "Service" +msgid "HBAC Services" +msgstr "Хидмат" + +#, fuzzy +#| msgid "Service" +msgid "HBAC Service" +msgstr "Хидмат" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" + +#, fuzzy +#| msgid "User group" +msgid "HBAC service group" +msgstr "Гурӯҳи корбар" + +#, fuzzy +#| msgid "User group" +msgid "HBAC service groups" +msgstr "Гурӯҳи корбар" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +#, fuzzy +#| msgid "Principal" +msgid "Principal alias" +msgstr "Асосӣ" + +msgid "User password expiration" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "manager %(manager)s not found" +msgstr "Файли %(file)s пайдо нашуд." + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +msgid "Issuer" +msgstr "Диҳанда" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject" +msgstr "Мавзӯъ" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "File %(file)s not found" +msgid "{role}: role not found" +msgstr "Файли %(file)s пайдо нашуд." + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +#, fuzzy +#| msgid "Groups" +msgid "netgroups" +msgstr "Гуруҳҳо" + +#, fuzzy +#| msgid "Groups" +msgid "Netgroups" +msgstr "Гуруҳҳо" + +#, fuzzy +#| msgid "User group" +msgid "Netgroup" +msgstr "Гурӯҳи корбар" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" + +msgid "One time password commands" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "OTP configuration options" +msgstr "Ҷӯрсозӣ" + +#, fuzzy +#| msgid "Configuration" +msgid "OTP Configuration" +msgstr "Ҷӯрсозӣ" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "invalid port number" +msgstr "Рақами силсилавӣ" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "RADIUS Servers" +msgstr "Сервери IPA" + +#, fuzzy +#| msgid "IPA Server" +msgid "RADIUS Server" +msgstr "Сервери IPA" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "password policy" +msgstr "парол" + +#, fuzzy +#| msgid "password" +msgid "password policies" +msgstr "парол" + +#, fuzzy +#| msgid "Password" +msgid "Password Policies" +msgstr "Парол" + +#, fuzzy +#| msgid "Password" +msgid "Password Policy" +msgstr "Парол" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "Номи корбар" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +#| msgid "Principal" +msgid "Member principals" +msgstr "Асосӣ" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject email address" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject DNS name" +msgstr "Мавзӯъ" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject URI" +msgstr "Мавзӯъ" + +msgid "Subject IP Address" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject OID" +msgstr "Мавзӯъ" + +#, fuzzy +#| msgid "Subject" +msgid "Subject UPN" +msgstr "Мавзӯъ" + +msgid "Subject Kerberos principal name" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Subject Other Name" +msgstr "Номи сервер" + +#, fuzzy +#| msgid "Issuer" +msgid "Issuer DN" +msgstr "Диҳанда" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial number (hex)" +msgstr "Рақами силсилавӣ" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "Ҳолат" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +#, fuzzy +#| msgid "Commands" +msgid "sudo command" +msgstr "Фармонҳо" + +#, fuzzy +#| msgid "Commands" +msgid "sudo commands" +msgstr "Фармонҳо" + +#, fuzzy +#| msgid "Commands" +msgid "Sudo Commands" +msgstr "Фармонҳо" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +#, fuzzy +#| msgid "Sudo" +msgid "Sudo Rule" +msgstr "Sudo" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "" + +#, fuzzy +#| msgid "Commands" +msgid "command" +msgstr "Фармонҳо" + +#, fuzzy +#| msgid "Commands" +msgid "commands" +msgstr "Фармонҳо" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "runAs groups" +msgstr "Гурӯҳи корбар" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust type" +msgstr "" + +msgid "Trust status" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " msgstr "" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" + +#, fuzzy +#| msgid "Configuration" +msgid "trust configuration" +msgstr "Ҷӯрсозӣ" + +#, fuzzy +#| msgid "Configuration" +msgid "Global Trust Configuration" +msgstr "Ҷӯрсозӣ" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +#, fuzzy +#| msgid "Host Name" +msgid "Name" +msgstr "Номи мизбон" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "" +"\n" +"IPA server roles\n" +msgstr "Сервери IPA" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "server role" +msgstr "Номи сервер" + +#, fuzzy +#| msgid "Server Name" +msgid "server roles" +msgstr "Номи сервер" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA Server Roles" +msgstr "Сервери IPA" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA Server Role" +msgstr "Сервери IPA" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA server role name" +msgstr "Сервери IPA" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Vault configuration" +msgstr "Ҷӯрсозӣ" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA KRA servers" +msgstr "Сервери IPA" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Profile configuration" +msgstr "Ҷӯрсозӣ" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "host groups" +msgstr "Гурӯҳи корбар" + +#, fuzzy +#| msgid "Group" +msgid "Host Group" +msgstr "Гурӯҳ" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "hostgroup" +msgstr "Гурӯҳи корбар" + +msgid "privileged hostgroup" +msgstr "" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "" +"\n" +"IPA locations\n" +msgstr "Макон" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "location" +msgstr "Макон" + +#, fuzzy +#| msgid "Location" +msgid "locations" +msgstr "Макон" + +#, fuzzy +#| msgid "Location" +msgid "IPA Locations" +msgstr "Макон" + +#, fuzzy +#| msgid "Location" +msgid "IPA Location" +msgstr "Макон" + +#, fuzzy +#| msgid "Location" +msgid "Location name" +msgstr "Макон" + +msgid "IPA location name" +msgstr "" + +#, fuzzy +#| msgid "description" +msgid "IPA Location description" +msgstr "шарҳ" + +#, fuzzy +#| msgid "Service" +msgid "Servers" +msgstr "Хидмат" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +msgid "IPA Server" +msgstr "Сервери IPA" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" + +msgid "A list of ACI values" +msgstr "" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +#, fuzzy +#| msgid "ACI prefix" +msgid "ACI prefix is required" +msgstr "Префикси ACI" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Хатогии синтаксисӣ: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "ACIs" + +#, fuzzy +#| msgid "ACIs" +msgid "ACI" +msgstr "ACIs" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" msgstr "" msgid "" @@ -13645,9 +17756,6 @@ msgstr "" msgid "Managedby permission" msgstr "Иҷозат" -msgid "DNS is not configured" -msgstr "" - msgid "cannot be used when a zone is specified" msgstr "" @@ -13879,1383 +17987,544 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" -#, fuzzy -#| msgid "Configuration" +#, python-brace-format msgid "" -"\n" -"DNS server configuration\n" -msgstr "Ҷӯрсозӣ" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#, fuzzy -#| msgid "IPA Server" -msgid "DNS server" -msgstr "Сервери IPA" - -msgid "DNS servers" -msgstr "" - -#, fuzzy -#| msgid "IPA Server" -msgid "DNS Servers" -msgstr "Сервери IPA" - -#, fuzzy -#| msgid "IPA Server" -msgid "DNS Server" -msgstr "Сервери IPA" - -#, fuzzy -#| msgid "Server Name" -msgid "DNS Server name" -msgstr "Номи сервер" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#, fuzzy -#| msgid "Service" -msgid "HBAC services" -msgstr "Хидмат" - -#, fuzzy -#| msgid "Service" -msgid "HBAC Services" -msgstr "Хидмат" - -#, fuzzy -#| msgid "Service" -msgid "HBAC Service" -msgstr "Хидмат" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" - -#, fuzzy -#| msgid "User group" -msgid "HBAC service group" -msgstr "Гурӯҳи корбар" - -#, fuzzy -#| msgid "User group" -msgid "HBAC service groups" -msgstr "Гурӯҳи корбар" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." msgstr "" -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" +msgid "Server does not support domain level functionality" msgstr "" -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" +msgid "Domain Level cannot be lowered." msgstr "" #, python-brace-format -msgid "Topology management requires minimum domain level {0} " +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." msgstr "" -msgid "segment" +msgid "" +"\n" +"API Schema\n" msgstr "" -msgid "segments" +msgid "" +"\n" +"Provides API introspection capabilities.\n" msgstr "" -msgid "Topology Segments" +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" msgstr "" -msgid "Topology Segment" +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "Documentation" +msgstr "Макон" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" msgstr "" #, python-format -msgid "left node is not a topology node: %(leftnode)s" +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Version" +msgstr "Иҷозат" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "hostname" +msgid "Method name" +msgstr "номи мизбон" + +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "%(pkey)s: %(oname)s not found" +msgstr "Файли %(file)s пайдо нашуд." + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "CLI name" +msgstr "Номи ACI" + +#, fuzzy +#| msgid "password" +msgid "Confirm (password)" +msgstr "парол" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" msgstr "" #, python-format -msgid "right node is not a topology node: %(rightnode)s" +msgid "%(metaobject)s: %(oname)s not found" msgstr "" -msgid "left node and right node must not be the same" +msgid "Display information about a command parameter." msgstr "" -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" +msgid "Search command parameters." msgstr "" #, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +#, fuzzy +#| msgid "Entry" +msgid "entry" +msgstr "Вуруд" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "Вуруд" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "%(parent)s: %(oname)s not found" +msgstr "Файли %(file)s пайдо нашуд." + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" msgstr[0] "" #, python-format -msgid "Added segment \"%(value)s\"" +msgid "Enabled HBAC rule \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted segment \"%(value)s\"" +msgid "Disabled HBAC rule \"%(value)s\"" msgstr "" -#, python-format -msgid "Modified segment \"%(value)s\"" +msgid "Access time" msgstr "" -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" +msgid "Add source hosts and hostgroups to an HBAC rule." msgstr "" msgid "" "\n" -"Verify replication topology for suffix.\n" +"Simulate use of Host-based access controls\n" "\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"Groups of hosts.\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" "\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" "\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" "\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -#| msgid "User group" -msgid "host groups" -msgstr "Гурӯҳи корбар" - -#, fuzzy -#| msgid "Group" -msgid "Host Group" -msgstr "Гурӯҳ" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -#, fuzzy -#| msgid "User group" -msgid "hostgroup" -msgstr "Гурӯҳи корбар" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" +"HBACTEST AND TRUSTED DOMAINS\n" "\n" -"Vaults\n" -msgstr "" - -msgid "" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" "\n" -"Manage vaults.\n" -msgstr "" - -msgid "" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" "\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -#, fuzzy -#| msgid "Configuration" -msgid "Vault configuration" -msgstr "Ҷӯрсозӣ" - -#, fuzzy -#| msgid "IPA Server" -msgid "IPA KRA servers" -msgstr "Сервери IPA" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -#, fuzzy -#| msgid "Groups" -msgid "netgroups" -msgstr "Гуруҳҳо" - -#, fuzzy -#| msgid "Groups" -msgid "Netgroups" -msgstr "Гуруҳҳо" - -#, fuzzy -#| msgid "User group" -msgid "Netgroup" -msgstr "Гурӯҳи корбар" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" - -msgid "One time password commands" -msgstr "" - -#, fuzzy -#| msgid "Configuration" -msgid "OTP configuration options" -msgstr "Ҷӯрсозӣ" - -#, fuzzy -#| msgid "Configuration" -msgid "OTP Configuration" -msgstr "Ҷӯрсозӣ" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -#, fuzzy -#| msgid "Serial number" -msgid "invalid port number" -msgstr "Рақами силсилавӣ" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -#, fuzzy -#| msgid "IPA Server" -msgid "RADIUS Servers" -msgstr "Сервери IPA" - -#, fuzzy -#| msgid "IPA Server" -msgid "RADIUS Server" -msgstr "Сервери IPA" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -#, fuzzy -#| msgid "ACI prefix" -msgid "ACI prefix is required" -msgstr "Префикси ACI" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Хатогии синтаксисӣ: %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "ACIs" - -#, fuzzy -#| msgid "ACIs" -msgid "ACI" -msgstr "ACIs" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" -msgid "must be at least 10" +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" msgstr "" #, fuzzy -#| msgid "Configuration" -msgid "configuration options" -msgstr "Ҷӯрсозӣ" +#| msgid "View" +msgid "ID View" +msgstr "Намоиш" -msgid "Configuration" -msgstr "Ҷӯрсозӣ" - -msgid "Maximum hostname length" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" +msgid "system ID View" msgstr "" #, fuzzy -#| msgid "IPA Server" -msgid "IPA CA servers" -msgstr "Сервери IPA" +#| msgid "View" +msgid "ID Views" +msgstr "Намоиш" -msgid "IPA servers configured as certificate authority" +msgid "User object overrides" msgstr "" -msgid "Hidden IPA CA servers" +msgid "Group object overrides" msgstr "" -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" +msgid "Hosts the view applies to" msgstr "" msgid "Domain resolution order" @@ -15264,233 +18533,173 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -msgid "IPA servers configured as domain name server" -msgstr "" - -#, fuzzy -#| msgid "IPA Server" -msgid "Hidden IPA DNS servers" -msgstr "Сервери IPA" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Empty domain is not allowed" +#, python-format +msgid "Added ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" +msgid "Deleted ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Server has no information about domain '%(domain)s'" +msgid "Modified an ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -#| msgid "Groups" -msgid "groups" -msgstr "Гуруҳҳо" - -#, fuzzy -#| msgid "User group" -msgid "User Group" -msgstr "Гурӯҳи корбар" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" msgstr[0] "" -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgid "Default Trust View cannot be applied on hosts" msgstr "" -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" msgstr "" #, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "ID View applied to %i host." msgstr "" -msgid "not allowed to modify user entries" +#, python-format +msgid "ID View applied to %i hosts." msgstr "" -msgid "not allowed to modify group entries" +#, python-format +msgid "ID View cleared from %i host." msgstr "" -msgid "Not a managed group" +#, python-format +msgid "ID View cleared from %i hosts." msgstr "" -msgid "Add users that can manage members of this group." +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" -msgid "Remove users that can manage members of this group." +msgid "IPA object" msgstr "" +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" + #, fuzzy #| msgid "Permissions" msgid "" @@ -15714,1271 +18923,37 @@ msgid "%(count)d permission matched" msgid_plural "%(count)d permissions matched" msgstr[0] "" -msgid "" -"\n" -"OTP Tokens\n" +msgid "delegation" msgstr "" -msgid "" -"\n" -"Manage OTP tokens.\n" +msgid "delegations" msgstr "" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" +msgid "Delegations" msgstr "" -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" +#, fuzzy +#| msgid "Delete" +msgid "Delegation" +msgstr "Нест кардан" -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" +#, python-format +msgid "Added delegation \"%(value)s\"" msgstr "" #, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" +msgid "Deleted delegation \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted OTP token \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" msgstr "" #, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "" -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -#, fuzzy -#| msgid "Sudo" -msgid "Sudo Rule" -msgstr "Sudo" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -#, fuzzy -#| msgid "Commands" -msgid "command" -msgstr "Фармонҳо" - -#, fuzzy -#| msgid "Commands" -msgid "commands" -msgstr "Фармонҳо" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -#, fuzzy -#| msgid "User group" -msgid "runAs groups" -msgstr "Гурӯҳи корбар" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, fuzzy -#| msgid "Commands" -msgid "sudo command" -msgstr "Фармонҳо" - -#, fuzzy -#| msgid "Commands" -msgid "sudo commands" -msgstr "Фармонҳо" - -#, fuzzy -#| msgid "Commands" -msgid "Sudo Commands" -msgstr "Фармонҳо" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -#, fuzzy -#| msgid "Location" -msgid "" -"\n" -"IPA locations\n" -msgstr "Макон" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -#, fuzzy -#| msgid "Location" -msgid "location" -msgstr "Макон" - -#, fuzzy -#| msgid "Location" -msgid "locations" -msgstr "Макон" - -#, fuzzy -#| msgid "Location" -msgid "IPA Locations" -msgstr "Макон" - -#, fuzzy -#| msgid "Location" -msgid "IPA Location" -msgstr "Макон" - -#, fuzzy -#| msgid "Location" -msgid "Location name" -msgstr "Макон" - -msgid "IPA location name" -msgstr "" - -#, fuzzy -#| msgid "description" -msgid "IPA Location description" -msgstr "шарҳ" - -#, fuzzy -#| msgid "Service" -msgid "Servers" -msgstr "Хидмат" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -msgid "IPA Server" -msgstr "Сервери IPA" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -#, fuzzy -#| msgid "Host Name" -msgid "Name" -msgstr "Номи мизбон" - -#, fuzzy -#| msgid "Location" -msgid "Documentation" -msgstr "Макон" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -#| msgid "Permission" -msgid "Version" -msgstr "Иҷозат" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -#| msgid "hostname" -msgid "Method name" -msgstr "номи мизбон" - -#, fuzzy, python-format -#| msgid "File %(file)s not found" -msgid "%(pkey)s: %(oname)s not found" -msgstr "Файли %(file)s пайдо нашуд." - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -#| msgid "ACI name" -msgid "CLI name" -msgstr "Номи ACI" - -#, fuzzy -#| msgid "password" -msgid "Confirm (password)" -msgstr "парол" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -#, fuzzy -#| msgid "Permissions" -msgid "Self Service Permissions" -msgstr "Иҷозатҳо" - -#, fuzzy -#| msgid "Permission" -msgid "Self Service Permission" -msgstr "Иҷозат" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" - -#, fuzzy -#| msgid "IPA Server" -msgid "" -"\n" -"IPA server roles\n" -msgstr "Сервери IPA" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#, fuzzy -#| msgid "Server Name" -msgid "server role" -msgstr "Номи сервер" - -#, fuzzy -#| msgid "Server Name" -msgid "server roles" -msgstr "Номи сервер" - -#, fuzzy -#| msgid "IPA Server" -msgid "IPA Server Roles" -msgstr "Сервери IPA" - -#, fuzzy -#| msgid "IPA Server" -msgid "IPA Server Role" -msgstr "Сервери IPA" - -#, fuzzy -#| msgid "IPA Server" -msgid "IPA server role name" -msgstr "Сервери IPA" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "IPA role name" -msgstr "" - msgid "HBAC rule and local members cannot both be set" msgstr "" @@ -17042,984 +19017,201 @@ msgstr "" msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "" -#, fuzzy, python-brace-format -#| msgid "File %(file)s not found" -msgid "{role}: role not found" -msgstr "Файли %(file)s пайдо нашуд." +#, fuzzy +#| msgid "IPA Server" +msgid "" +"\n" +"IPA servers\n" +msgstr "Сервери IPA" -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "pyhbac is not installed." +msgid "" +"\n" +"Get information about installed IPA servers.\n" msgstr "" msgid "" "\n" -"IPA certificate operations\n" +" Find all servers:\n" +" ipa server-find\n" msgstr "" msgid "" "\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "Subject" -msgstr "Мавзӯъ" - -msgid "Subject email address" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" msgstr "" #, fuzzy -#| msgid "Subject" -msgid "Subject DNS name" -msgstr "Мавзӯъ" +#| msgid "IPA Server" +msgid "server" +msgstr "Сервери IPA" -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" +msgid "servers" msgstr "" #, fuzzy -#| msgid "Subject" -msgid "Subject URI" -msgstr "Мавзӯъ" - -msgid "Subject IP Address" -msgstr "" - -#, fuzzy -#| msgid "Subject" -msgid "Subject OID" -msgstr "Мавзӯъ" - -#, fuzzy -#| msgid "Subject" -msgid "Subject UPN" -msgstr "Мавзӯъ" - -msgid "Subject Kerberos principal name" -msgstr "" +#| msgid "IPA Server" +msgid "IPA Servers" +msgstr "Сервери IPA" #, fuzzy #| msgid "Server Name" -msgid "Subject Other Name" +msgid "Server location" msgstr "Номи сервер" -msgid "Issuer" -msgstr "Диҳанда" - #, fuzzy -#| msgid "Issuer" -msgid "Issuer DN" -msgstr "Диҳанда" +#| msgid "Service" +msgid "Service weight" +msgstr "Хидмат" -msgid "Not Before" +msgid "Weight for server services" msgstr "" -msgid "Not After" +msgid "Service relative weight" msgstr "" -msgid "Fingerprint (SHA1)" +msgid "Relative weight for server services (counts per location)" msgstr "" -msgid "Fingerprint (SHA256)" +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." msgstr "" #, fuzzy -#| msgid "Serial number" -msgid "Serial number (hex)" -msgstr "Рақами силсилавӣ" - -msgid "Request status" -msgstr "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Status" +#| msgid "Status" +msgid "State" msgstr "Ҳолат" -msgid "Revoked" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - #, fuzzy -#| msgid "View" -msgid "ID View" -msgstr "Намоиш" +#| msgid "Server Name" +msgid "Server state" +msgstr "Номи сервер" -msgid "system ID View" +#, python-format +msgid "Changed server state of \"%(value)s\"." msgstr "" -#, fuzzy -#| msgid "View" -msgid "ID Views" -msgstr "Намоиш" - -msgid "User object overrides" +msgid "Cannot hide CA renewal master." msgstr "" -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" +msgid "Cannot hide DNSSec key master." msgstr "" #, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" - -msgid "" -"\n" -"Auto Membership Rule.\n" +msgid "Cannot hide last enabled %(name)s server." msgstr "" msgid "" "\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, fuzzy, python-format -#| msgid "File %(file)s not found" -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "Файли %(file)s пайдо нашуд." - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" +"Session Support for IPA\n" msgstr "" msgid "" @@ -18195,6 +19387,858 @@ msgstr "Фаъолшуда" msgid "Enabled CA \"%(value)s\"" msgstr "" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User logins" +msgstr "Номи корбар" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "configuration options" +msgstr "Ҷӯрсозӣ" + +msgid "Configuration" +msgstr "Ҷӯрсозӣ" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA CA servers" +msgstr "Сервери IPA" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "Hidden IPA DNS servers" +msgstr "Сервери IPA" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "Hostname" +msgid "Host" +msgstr "Номи мизбон" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "Рақами силсилавӣ" + +#, fuzzy +#| msgid "Serial Number" +msgid "Serial Number (hex)" +msgstr "Рақами силсилавӣ" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + msgid "Internationalization messages" msgstr "" @@ -19315,14 +21359,6 @@ msgstr "" msgid "REVOKED" msgstr "" -msgid "Serial Number" -msgstr "Рақами силсилавӣ" - -#, fuzzy -#| msgid "Serial Number" -msgid "Serial Number (hex)" -msgstr "Рақами силсилавӣ" - msgid "SHA1 Fingerprint" msgstr "" @@ -19379,9 +21415,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -msgid "Certificate mapping data" -msgstr "" - #, fuzzy #| msgid "Configuration" msgid "Configuration string" @@ -20142,11 +22175,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -#, fuzzy -#| msgid "Hostname" -msgid "Host" -msgstr "Номи мизбон" - #, fuzzy #| msgid "Settings" msgid "Netgroup Settings" @@ -20282,11 +22310,6 @@ msgstr "" msgid "Add password policy" msgstr "Пароли LDAP" -#, fuzzy -#| msgid "Password" -msgid "Password Policy" -msgstr "Парол" - msgid "Remove password policies" msgstr "" @@ -20768,15 +22791,6 @@ msgstr "" msgid "Remove domains" msgstr "" -msgid "Trust direction" -msgstr "" - -msgid "Trust status" -msgstr "" - -msgid "Trust type" -msgstr "" - msgid "Alternative UPN suffixes" msgstr "" @@ -21333,9 +23347,6 @@ msgstr "Sudo" msgid "Topology" msgstr "" -msgid "Trusts" -msgstr "" - msgid "True" msgstr "" @@ -21446,1420 +23457,6 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" - -#, fuzzy -#| msgid "IPA Server" -msgid "" -"\n" -"IPA servers\n" -msgstr "Сервери IPA" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#, fuzzy -#| msgid "IPA Server" -msgid "server" -msgstr "Сервери IPA" - -msgid "servers" -msgstr "" - -#, fuzzy -#| msgid "IPA Server" -msgid "IPA Servers" -msgstr "Сервери IPA" - -#, fuzzy -#| msgid "Server Name" -msgid "Server location" -msgstr "Номи сервер" - -#, fuzzy -#| msgid "Service" -msgid "Service weight" -msgstr "Хидмат" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -#, fuzzy -#| msgid "Status" -msgid "State" -msgstr "Ҳолат" - -#, fuzzy -#| msgid "Server Name" -msgid "Server state" -msgstr "Номи сервер" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -#, fuzzy -#| msgid "Principal" -msgid "Member principals" -msgstr "Асосӣ" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -#, fuzzy -#| msgid "Principal" -msgid "Principal alias" -msgstr "Асосӣ" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -#, fuzzy -#| msgid "password" -msgid "password policy" -msgstr "парол" - -#, fuzzy -#| msgid "password" -msgid "password policies" -msgstr "парол" - -#, fuzzy -#| msgid "Password" -msgid "Password Policies" -msgstr "Парол" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -#| msgid "User name" -msgid "User check" -msgstr "Номи корбар" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" - -#, fuzzy -#| msgid "Configuration" -msgid "trust configuration" -msgstr "Ҷӯрсозӣ" - -#, fuzzy -#| msgid "Configuration" -msgid "Global Trust Configuration" -msgstr "Ҷӯрсозӣ" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#, fuzzy -#| msgid "User name" -msgid "User logins" -msgstr "Номи корбар" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -23028,631 +23625,38 @@ msgstr "" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "" -msgid "delegation" +msgid "self service permission" msgstr "" -msgid "delegations" -msgstr "" - -msgid "Delegations" +msgid "self service permissions" msgstr "" #, fuzzy -#| msgid "Delete" -msgid "Delegation" -msgstr "Нест кардан" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" +#| msgid "Permissions" +msgid "Self Service Permissions" +msgstr "Иҷозатҳо" #, fuzzy -#| msgid "Entry" -msgid "entry" -msgstr "Вуруд" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "Вуруд" +#| msgid "Permission" +msgid "Self Service Permission" +msgstr "Иҷозат" #, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, fuzzy, python-format -#| msgid "File %(file)s not found" -msgid "%(parent)s: %(oname)s not found" -msgstr "Файли %(file)s пайдо нашуд." - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgid "Added selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "attribute \"%(attribute)s\" not allowed" +msgid "Deleted selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" +msgid "Modified selfservice \"%(value)s\"" msgstr "" #, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "File %(file)s not found" -msgid "manager %(manager)s not found" -msgstr "Файли %(file)s пайдо нашуд." - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" #, python-format msgid "all masters must have %(role)s role enabled" @@ -23835,25 +23839,6 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - msgid "Request must be a dict" msgstr "" @@ -23875,6 +23860,25 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #, python-format msgid "must equal %r" msgstr "" diff --git a/po/tr.po b/po/tr.po index fe83011d1..d70426cec 100644 --- a/po/tr.po +++ b/po/tr.po @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev202006101925+gitba7974bfd\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2020-08-29 11:29+0000\n" "Last-Translator: Oğuz Ersen \n" "Language-Team: Turkish to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +#| msgid "Netgroups" +msgid "groups" +msgstr "Ağ grupları" + +msgid "User Group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added group \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +msgid "gid cannot be set for external group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted group \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "privileged group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified group \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy +#| msgid "Not allowed on non-leaf entry" +msgid "not allowed to modify user entries" +msgstr "Yaprak (leaf) olmayan girdilerde izin verilmiyor" + +#, fuzzy +#| msgid "Not allowed on non-leaf entry" +msgid "not allowed to modify group entries" +msgstr "Yaprak (leaf) olmayan girdilerde izin verilmiyor" + +#, fuzzy +#| msgid "search for managed groups" +msgid "Not a managed group" +msgstr "yönetilen grupları ara" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +#, fuzzy +#| msgid "Server" +msgid "DNS server" +msgstr "Sunucu" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "DNS servers" +msgstr "RADIUS Sunucuları" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "DNS Servers" +msgstr "RADIUS Sunucuları" + +#, fuzzy +#| msgid "RADIUS Server" +msgid "DNS Server" +msgstr "RADIUS Sunucusu" + +#, fuzzy +#| msgid "Server name" +msgid "DNS Server name" +msgstr "Sunucu adı" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified RADIUS proxy server \"%(value)s\"" +msgid "Modified DNS server \"%(value)s\"" +msgstr "RADIUS vekil sunucusu \"%(value)s\" değiştirildi" + +#, fuzzy +#| msgid "Search for RADIUS proxy servers." +msgid "Search for DNS servers." +msgstr "RADIUS vekil sunucularını ara." + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "%(count)s sunucu eşleşti" +msgstr[1] "%(count)s sunucu eşleşti" + +#, fuzzy +#| msgid "IPA server hostname" +msgid "IPA DNS Server is not installed" +msgstr "IPA sunucusu ana makine adı" + +#, fuzzy +#| msgid "Display information about a RADIUS proxy server." +msgid "Display configuration of a DNS server." +msgstr "Bir RADIUS vekil sunucusu hakkında bilgileri görüntüle." + +#, fuzzy +#| msgid "Add a new RADIUS proxy server." +msgid "Add a new DNS server." +msgstr "Yeni bir RADIUS vekil sunucusu ekle." + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, fuzzy +#| msgid "Delete a RADIUS proxy server." +msgid "Delete a DNS server" +msgstr "Bir RADIUS vekil sunucusunu sil." + +#, fuzzy, python-format +#| msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "RADIUS vekil sunucusu \"%(value)s\" silindi" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added HBAC service \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified selfservice \"%(value)s\"" +msgid "Modified HBAC service \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d selfservice matched" +#| msgid_plural "%(count)d selfservices matched" +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "%(count)d self-servis eşleşti" +msgstr[1] "%(count)d self-servis eşleşti" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be TRUE or FALSE" +msgstr "True veya False olmalı" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Base-64 encoded user certificate" +msgstr "bir sertifika olmalı" + +msgid "Certificate mapping data" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Replication agreement for %(hostname)s not found" +msgid "manager %(manager)s not found" +msgstr "%(hostname)s için çoğaltma anlaşması bulunamadı" + +#, fuzzy, python-format +#| msgid "can be at most %(maxlength)d characters" +msgid "can be at most %(len)d characters" +msgstr "en fazla %(maxlength)d olabilir" + +msgid "Issuer" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Issuer of the certificate" +msgstr "bir sertifika olmalı" + +msgid "Subject" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Subject of the certificate" +msgstr "bir sertifika olmalı" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "%(filename)s: file not found" +msgid "{role}: role not found" +msgstr "%(filename)s: dosya bulunamadı" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "%(count)s sunucu eşleşti" +msgstr[1] "%(count)s sunucu eşleşti" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added segment \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted segment \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified segment \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "must be '%(value)s'" +msgid "%(value)s" +msgstr "'%(value)s' olmalı" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(port)s is not a valid port" +msgid "%(user)s is not a POSIX user" +msgstr "%(port)s geçerli bir bağlantı noktası değil" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "netgroups" +msgstr "ağ grupları" + +msgid "Netgroups" +msgstr "Ağ grupları" + +msgid "Netgroup" +msgstr "Ağ grubu" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"\"%s\" adlı bir ana makine grubu zaten var. Ana makine grupları ve ağ " +"grupları ortak bir ad uzayını paylaşmaktadır" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" +"\n" +"Kerberos PKINIT özellik durumu bildirim araçları.\n" +"\n" +"Kerberos PKINIT etkinleştirilen veya devre dışı bırakılan IPA yöneticilerini " +"bildir\n" +"\n" +"ÖRNEKLER:\n" +" Tüm yöneticilerde PKINIT durumunu listele:\n" +" ipa pkinit-status\n" +"\n" +" `ipa.example.com` üzerinde PKINIT durumunu denetle:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" PKINIT devre dışı bırakılan tüm IPA yöneticilerini listele:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"PKINIT desteği hakkında daha fazla bilgi için:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" + +msgid "pkinit" +msgstr "pkinit" + +msgid "PKINIT" +msgstr "PKINIT" + +msgid "PKINIT status" +msgstr "PKINIT durumu" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "PKINIT etkin mi devre dışı mı olduğu" + +msgid "Report PKINIT status on the IPA masters" +msgstr "IPA yöneticilerinde PKINIT durumunu bildir" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)s sunucu eşleşti" +msgstr[1] "%(count)s sunucu eşleşti" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" +"\n" +"RADIUS Vekil Sunucuları\n" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" +"\n" +"RADIUS Vekil Sunucularını yönetin.\n" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" +"\n" +"IPA, krb5 OTP kimlik doğrulamaları için harici bir RADIUS vekil\n" +"sunucusunun kullanılmasını destekler. Bu, üçüncü taraf kimlik doğrulama\n" +"hizmetleriyle birleşme sırasında büyük bir esneklik sağlar.\n" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" +"\n" +" Yeni bir sunucu ekleyin:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" +"\n" +" Girdileri \"example.com\" dizgesini içeren tüm sunucuları bulun:\n" +" ipa radiusproxy-find example.com\n" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" +"\n" +" Yapılandırmayı inceleyin:\n" +" ipa radiusproxy-show MyRADIUS\n" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" +"\n" +" Parolayı değiştirin:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" +"\n" +" Bir yapılandırmayı silin:\n" +" ipa radiusproxy-del MyRADIUS\n" + +msgid "invalid attribute name" +msgstr "geçersiz nitelik adı" + +msgid "invalid port number" +msgstr "geçersiz bağlantı noktası numarası" + +msgid "RADIUS proxy server" +msgstr "RADIUS vekil sunucusu" + +msgid "RADIUS proxy servers" +msgstr "RADIUS vekil sunucuları" + +msgid "RADIUS Servers" +msgstr "RADIUS Sunucuları" + +msgid "RADIUS Server" +msgstr "RADIUS Sunucusu" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "RADIUS vekil sunucusu \"%(value)s\" eklendi" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "RADIUS vekil sunucusu \"%(value)s\" silindi" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "RADIUS vekil sunucusu \"%(value)s\" değiştirildi" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "%(count)d RADIUS vekil sunucusu eşleşti" +msgstr[1] "%(count)d RADIUS vekil sunucusu eşleşti" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added privilege \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Deleted privilege \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified selfservice \"%(value)s\"" +msgid "Modified privilege \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d selfservice matched" +#| msgid_plural "%(count)d selfservices matched" +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d self-servis eşleşti" +msgstr[1] "%(count)d self-servis eşleşti" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Delete a self-service permission." +msgid "Delete Class of Service entry" +msgstr "Bir self-servis iznini sil." + +#, fuzzy +#| msgid "Modify a self-service permission." +msgid "Modify Class of Service entry" +msgstr "Bir self-servis iznini değiştir." + +msgid "Display Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Search for a self-service permission." +msgid "Search for Class of Service entry" +msgstr "Bir self-servis izni ara." + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Password Policy" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +#| msgid "User category" +msgid "User check" +msgstr "Kullanıcı kategorisi" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +#, fuzzy +#| msgid "A managed group cannot have a password policy." +msgid "cannot delete global password policy" +msgstr "Yönetilen bir grubun parola politikası olamaz." + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "Member principals" +msgstr "Kerberos yetkilisi olmalı" + +#, fuzzy, python-format +#| msgid "Malformed principal: '%(value)s'" +msgid "Malformed principal: %(error)s" +msgstr "Hatalı biçimlendirilmiş yetkili: '%(value)s'" + +msgid "Add target to a named service delegation." +msgstr "" + +#, fuzzy, python-format +#| msgid "Member Host" +msgid "member %s" +msgstr "Üye Ana Makine" + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove member from a named service delegation." +msgstr "Bir ağ grubundan üye kaldır." + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +msgid "privileged service delegation rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d selfservice matched" +#| msgid_plural "%(count)d selfservices matched" +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "%(count)d self-servis eşleşti" +msgstr[1] "%(count)d self-servis eşleşti" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +msgid "privileged service delegation target" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d selfservice matched" +#| msgid_plural "%(count)d selfservices matched" +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "%(count)d self-servis eşleşti" +msgstr[1] "%(count)d self-servis eşleşti" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added stage user \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "givenname is required" +msgstr "'%(name)s' gereklidir" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "sn is required" +msgstr "'%(name)s' gereklidir" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Deleted stage user \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified selfservice \"%(value)s\"" +msgid "Modified stage user \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)s sunucu eşleşti" +msgstr[1] "%(count)s sunucu eşleşti" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Activate a stage user \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified selfservice \"%(value)s\"" +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "Kullanımdan kaldırılan seçenekler" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "'%(hostname)s' ana makinesinin karşılık gelen DNS A/AAAA kaydı yok" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Base-64 encoded certificate." +msgstr "bir sertifika olmalı" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject email address" +msgstr "" + +#, fuzzy +#| msgid "must be DNS name" +msgid "Subject DNS name" +msgstr "DNS adı olmalı" + +msgid "Subject X.400 address" +msgstr "" + +#, fuzzy +#| msgid "Server name" +msgid "Subject directory name" +msgstr "Sunucu adı" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +msgid "Subject IP Address" +msgstr "" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "Subject Kerberos principal name" +msgstr "Kerberos yetkilisi olmalı" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +msgid "Serial number (hex)" +msgstr "" + +msgid "Request status" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate signing request" +msgid "Include certificate chain in output" +msgstr "bir sertifika imzalama isteği olmalı" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "'add' option" +msgstr "Kullanımdan kaldırılan seçenekler" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +#, fuzzy +#| msgid "\"%s\" is not a valid permission type" +msgid "7 is not a valid revocation reason" +msgstr "\"%s\" geçerli bir izin türü değil" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d selfservice matched" +#| msgid_plural "%(count)d selfservices matched" +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "%(count)d self-servis eşleşti" +msgstr[1] "%(count)d self-servis eşleşti" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +#, fuzzy +#| msgid "Topic commands:" +msgid "sudo command" +msgstr "Konu komutları:" + +#, fuzzy +#| msgid "Topic commands:" +msgid "sudo commands" +msgstr "Konu komutları:" + +#, fuzzy +#| msgid "Topic commands:" +msgid "Sudo Commands" +msgstr "Konu komutları:" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +#, fuzzy +#| msgid "this option is deprecated" +msgid "this option has been deprecated." +msgstr "bu seçenek kullanımdan kaldırıldı" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "host category cannot be set to 'all' while there are allowed hosts" +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" +"izin verilen ana makineler varken ana makine kategorisi 'all' olarak " +"ayarlanamaz" + +msgid "users" +msgstr "" + +#, fuzzy +#| msgid "Topic commands:" +msgid "command" +msgstr "Konu komutları:" + +#, fuzzy +#| msgid "Topic commands:" +msgid "commands" +msgstr "Konu komutları:" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +#, fuzzy +#| msgid "Netgroups" +msgid "group runAs" +msgstr "Ağ grupları" + +#, fuzzy +#| msgid "netgroups" +msgid "runAs groups" +msgstr "ağ grupları" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +#, fuzzy +#| msgid "search for managed groups" +msgid "sudo command group" +msgstr "yönetilen grupları ara" + +#, fuzzy +#| msgid "search for managed groups" +msgid "sudo command groups" +msgstr "yönetilen grupları ara" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +#, fuzzy +#| msgid "must be dictionary" +msgid "Trust direction" +msgstr "sözlük olmalı" + +msgid "Trust type" +msgstr "" + +#, fuzzy +#| msgid "PKINIT status" +msgid "Trust status" +msgstr "PKINIT durumu" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added RADIUS proxy server \"%(value)s\"" +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "RADIUS vekil sunucusu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy +#| msgid "Permission name" +msgid "missing base_id" +msgstr "İzin adı" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " msgstr "" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." msgstr "" +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted trust \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "Domain enabled" +msgstr "NIS etki alanı adı" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, fuzzy, python-format +#| msgid "must be '%(value)s'" +msgid "must be \"%s\"" +msgstr "'%(value)s' olmalı" + +#, fuzzy +#| msgid "Not allowed on non-leaf entry" +msgid "not allowed to remotely add agent" +msgstr "Yaprak (leaf) olmayan girdilerde izin verilmiyor" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +#, fuzzy +#| msgid "IPA server hostname" +msgid "" +"\n" +"IPA server roles\n" +msgstr "IPA sunucusu ana makine adı" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#, fuzzy +#| msgid "Server name" +msgid "server role" +msgstr "Sunucu adı" + +#, fuzzy +#| msgid "Server name" +msgid "server roles" +msgstr "Sunucu adı" + +#, fuzzy +#| msgid "IPA server hostname" +msgid "IPA Server Roles" +msgstr "IPA sunucusu ana makine adı" + +#, fuzzy +#| msgid "IPA server hostname" +msgid "IPA Server Role" +msgstr "IPA sunucusu ana makine adı" + +#, fuzzy +#| msgid "IPA server hostname" +msgid "IPA server role name" +msgstr "IPA sunucusu ana makine adı" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "%(count)s sunucu eşleşti" +msgstr[1] "%(count)s sunucu eşleşti" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +#, fuzzy +#| msgid "IPA server hostname" +msgid "IPA role name" +msgstr "IPA sunucusu ana makine adı" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Examine the configuration:\n" +#| " ipa radiusproxy-show MyRADIUS\n" +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" +"\n" +" Yapılandırmayı inceleyin:\n" +" ipa radiusproxy-show MyRADIUS\n" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +#, fuzzy +#| msgid "single label {}s are not supported" +msgid "Host is not supported" +msgstr "tek etiketli {}s desteklenmiyor" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +msgid "Vault configuration" +msgstr "" + +#, fuzzy +#| msgid "IPA server hostname" +msgid "IPA KRA servers" +msgstr "IPA sunucusu ana makine adı" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Archived data into vault \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +msgid "Retrieve data from a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "invalid attribute name" +msgid "invalid Profile ID" +msgstr "geçersiz nitelik adı" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Imported profile \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted profile \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified selfservice \"%(value)s\"" +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +#, fuzzy +#| msgid "Certificate operation cannot be completed: %(error)s" +msgid "Certificate profiles cannot be renamed" +msgstr "Sertifika işlemi tamamlanamıyor: %(error)s" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "Netgroups" +msgid "host groups" +msgstr "Ağ grupları" + +msgid "Host Group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added hostgroup \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "" +#| "hostgroup with name \"%s\" already exists. Hostgroups and netgroups share " +#| "a common namespace" +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"\"%s\" adlı bir ana makine grubu zaten var. Ana makine grupları ve ağ " +"grupları ortak bir ad uzayını paylaşmaktadır" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy +#| msgid "Netgroup" +msgid "hostgroup" +msgstr "Ağ grubu" + +msgid "privileged hostgroup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +#, fuzzy +#| msgid "RADIUS proxy server name" +msgid "RADIUS max renew" +msgstr "RADIUS vekil sunucusu adı" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Delete a configuration:\n" +#| " ipa radiusproxy-del MyRADIUS\n" +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" +"\n" +" Bir yapılandırmayı silin:\n" +" ipa radiusproxy-del MyRADIUS\n" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "Location name" +msgstr "NIS etki alanı adı" + +#, fuzzy +#| msgid "NIS domain name" +msgid "IPA location name" +msgstr "NIS etki alanı adı" + +#, fuzzy +#| msgid "Netgroup description" +msgid "IPA Location description" +msgstr "Ağ grubu açıklaması" + +#, fuzzy +#| msgid "Server" +msgid "Servers" +msgstr "Sunucu" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +#, fuzzy +#| msgid "Add a new netgroup." +msgid "Add a new IPA location." +msgstr "Yeni bir ağ grubu ekle." + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added IPA location \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +msgid "Delete an IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy +#| msgid "Server" +msgid "IPA Server" +msgstr "Sunucu" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Modify information about an IPA location." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified IPA location \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for IPA locations." +msgstr "Bir ağ grubu ara." + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about an IPA location." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +#, fuzzy +#| msgid "Server name" +msgid "Servers in location" +msgstr "Sunucu adı" + +msgid "Role" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added role \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted role \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified role \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added user \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted user \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "This entry is already enabled" +msgid "%s: user is already preserved" +msgstr "Bu girdi zaten etkin" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified user \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Undeleted user account \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "This entry is already enabled" +msgid "user \"%s\" is already active" +msgstr "Bu girdi zaten etkin" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Staged user account \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Disabled user account \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Enabled user account \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Unlocked account \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +#, fuzzy +#| msgid "Timeout" +msgid "Time now" +msgstr "Zaman aşımı" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry is already disabled" +msgid "Account disabled: %(disabled)s" +msgstr "Bu girdi zaten devre dışı" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added certificates to user \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Modified selfservice \"%(value)s\"" +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy +#| msgid "Service principal is required" +msgid "Remove principal alias from the user entry" +msgstr "Hizmet yetkilisi gereklidir" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added OTP token \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +msgid "cannot be empty" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified OTP token \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +#, fuzzy +#| msgid "A list of LDAP entries" +msgid "A list of ACI values" +msgstr "LDAP girdilerinin bir listesi" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +#, fuzzy +#| msgid "Service principal is required" +msgid "ACI prefix is required" +msgstr "Hizmet yetkilisi gereklidir" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, fuzzy, python-format +#| msgid "Certificate format error: %(error)s" +msgid "Syntax Error: %(error)s" +msgstr "Sertifika biçim hatası: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "ACI" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Created ACI \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted ACI \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified ACI \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Renamed ACI to \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + msgid "" "\n" "Domain Name System (DNS)\n" @@ -14613,9 +18991,6 @@ msgstr "" "\n" "Yönetilen izinler\n" -msgid "DNS is not configured" -msgstr "" - msgid "cannot be used when a zone is specified" msgstr "" @@ -14853,1497 +19228,581 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, python-brace-format msgid "" -"\n" -"DNS server configuration\n" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." msgstr "" -msgid "" -"\n" -"Manipulate DNS server configuration\n" +msgid "Server does not support domain level functionality" msgstr "" -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#, fuzzy -#| msgid "Server" -msgid "DNS server" -msgstr "Sunucu" - -#, fuzzy -#| msgid "RADIUS Servers" -msgid "DNS servers" -msgstr "RADIUS Sunucuları" - -#, fuzzy -#| msgid "RADIUS Servers" -msgid "DNS Servers" -msgstr "RADIUS Sunucuları" - -#, fuzzy -#| msgid "RADIUS Server" -msgid "DNS Server" -msgstr "RADIUS Sunucusu" - -#, fuzzy -#| msgid "Server name" -msgid "DNS Server name" -msgstr "Sunucu adı" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified RADIUS proxy server \"%(value)s\"" -msgid "Modified DNS server \"%(value)s\"" -msgstr "RADIUS vekil sunucusu \"%(value)s\" değiştirildi" - -#, fuzzy -#| msgid "Search for RADIUS proxy servers." -msgid "Search for DNS servers." -msgstr "RADIUS vekil sunucularını ara." - -#, fuzzy, python-format -#| msgid "%(count)s server matched" -#| msgid_plural "%(count)s servers matched" -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "%(count)s sunucu eşleşti" -msgstr[1] "%(count)s sunucu eşleşti" - -#, fuzzy -#| msgid "IPA server hostname" -msgid "IPA DNS Server is not installed" -msgstr "IPA sunucusu ana makine adı" - -#, fuzzy -#| msgid "Display information about a RADIUS proxy server." -msgid "Display configuration of a DNS server." -msgstr "Bir RADIUS vekil sunucusu hakkında bilgileri görüntüle." - -#, fuzzy -#| msgid "Add a new RADIUS proxy server." -msgid "Add a new DNS server." -msgstr "Yeni bir RADIUS vekil sunucusu ekle." - -#, fuzzy, python-format -#| msgid "Added selfservice \"%(value)s\"" -msgid "Added new DNS server \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, fuzzy -#| msgid "Delete a RADIUS proxy server." -msgid "Delete a DNS server" -msgstr "Bir RADIUS vekil sunucusunu sil." - -#, fuzzy, python-format -#| msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgid "Deleted DNS server \"%(value)s\"" -msgstr "RADIUS vekil sunucusu \"%(value)s\" silindi" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -#, fuzzy -#| msgid "Unable to communicate with CMS (status %d)" -msgid "Unable to communicate with CMS" -msgstr "CMS ile iletişim kurulamadı (durum %d)" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added selfservice \"%(value)s\"" -msgid "Added HBAC service \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, fuzzy, python-format -#| msgid "Deleted selfservice \"%(value)s\"" -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "Modified selfservice \"%(value)s\"" -msgid "Modified HBAC service \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -#| msgid "%(count)d selfservice matched" -#| msgid_plural "%(count)d selfservices matched" -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "%(count)d self-servis eşleşti" -msgstr[1] "%(count)d self-servis eşleşti" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -#| msgid "%(count)d netgroup matched" -#| msgid_plural "%(count)d netgroups matched" -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added selfservice \"%(value)s\"" -msgid "Added stage user \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, fuzzy -#| msgid "'%(name)s' is required" -msgid "givenname is required" -msgstr "'%(name)s' gereklidir" - -#, fuzzy -#| msgid "'%(name)s' is required" -msgid "sn is required" -msgstr "'%(name)s' gereklidir" - -#, fuzzy, python-format -#| msgid "can be at most %(maxlength)d characters" -msgid "can be at most %(len)d characters" -msgstr "en fazla %(maxlength)d olabilir" - -#, fuzzy, python-format -#| msgid "Deleted selfservice \"%(value)s\"" -msgid "Deleted stage user \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "Modified selfservice \"%(value)s\"" -msgid "Modified stage user \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -#| msgid "%(count)s server matched" -#| msgid_plural "%(count)s servers matched" -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)s sunucu eşleşti" -msgstr[1] "%(count)s sunucu eşleşti" - -#, fuzzy, python-format -#| msgid "Added selfservice \"%(value)s\"" -msgid "Activate a stage user \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added selfservice \"%(value)s\"" -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified selfservice \"%(value)s\"" -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted selfservice \"%(value)s\"" -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" +msgid "Domain Level cannot be lowered." msgstr "" #, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)s server matched" -#| msgid_plural "%(count)s servers matched" -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "%(count)s sunucu eşleşti" -msgstr[1] "%(count)s sunucu eşleşti" - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added segment \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted segment \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified segment \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -#| msgid "must be '%(value)s'" -msgid "%(value)s" -msgstr "'%(value)s' olmalı" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d netgroup matched" -#| msgid_plural "%(count)d netgroups matched" -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added topology suffix \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -#| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." msgstr "" msgid "" "\n" -"Groups of hosts.\n" +"API Schema\n" +msgstr "" + +msgid "" "\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" "\n" -"EXAMPLES:\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" "\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" msgstr "" #, fuzzy -#| msgid "Netgroups" -msgid "host groups" -msgstr "Ağ grupları" +#| msgid "Permission" +msgid "Version" +msgstr "İzin" -msgid "Host Group" +msgid "Parameters" msgstr "" -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added hostgroup \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -#| msgid "" -#| "hostgroup with name \"%s\" already exists. Hostgroups and netgroups share " -#| "a common namespace" -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" +msgid "Method of" msgstr "" -"\"%s\" adlı bir ana makine grubu zaten var. Ana makine grupları ve ağ " -"grupları ortak bir ad uzayını paylaşmaktadır" + +#, fuzzy +#| msgid "Netgroup name" +msgid "Method name" +msgstr "Ağ grubu adı" #, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" +#| msgid "%(filename)s: file not found" +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(filename)s: dosya bulunamadı" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a command." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for commands." +msgstr "Bir ağ grubu ara." + +msgid "Return command defaults" +msgstr "" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a class." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for classes." +msgstr "Bir ağ grubu ara." + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a help topic." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for help topics." +msgstr "Bir ağ grubu ara." + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "CLI name" +msgstr "Komut adı" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" #, fuzzy #| msgid "Netgroup" -msgid "hostgroup" +msgid "Option group" msgstr "Ağ grubu" -msgid "privileged hostgroup" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -#| msgid "%(count)d netgroup matched" -#| msgid_plural "%(count)d netgroups matched" -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" +msgid "Sensitive" msgstr "" #, fuzzy -#| msgid "" -#| "\n" -#| " Examine the configuration:\n" -#| " ipa radiusproxy-show MyRADIUS\n" -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" -"\n" -" Yapılandırmayı inceleyin:\n" -" ipa radiusproxy-show MyRADIUS\n" +#| msgid "Positional arguments" +msgid "Positional argument" +msgstr "Konumsal argümanlar" -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" +#, fuzzy, python-format +#| msgid "objectclass %s not found" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%s nesne sınıfı bulunamadı" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a command parameter." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "Search command parameters." msgstr "" -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" +#, fuzzy, python-format +#| msgid "%(filename)s: file not found" +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(filename)s: dosya bulunamadı" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a command output." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +#, fuzzy +#| msgid "search for managed groups" +msgid "Search for command outputs." +msgstr "yönetilen grupları ara" + +msgid "Store and provide schema for commands and topics" msgstr "" -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" +msgid "Fingerprint of schema cached by client" msgstr "" -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" +msgid "Member service groups" msgstr "" -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" +msgid "Member HBAC service groups" msgstr "" -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" +msgid "Member ID user overrides" msgstr "" -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" +msgid "Indirect Member ID user overrides" msgstr "" #, fuzzy -#| msgid "single label {}s are not supported" -msgid "Host is not supported" -msgstr "tek etiketli {}s desteklenmiyor" +#| msgid "self service permissions" +msgid "Indirect Member permissions" +msgstr "self servis izinleri" -msgid "KRA service is not enabled" +msgid "Indirect Member HBAC service" msgstr "" -msgid "Deleted vault container" +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Bu girdi etkinleştirilemez veya devre dışı bırakılamaz" + +msgid "entry" +msgstr "" + +#, fuzzy +#| msgid "Retries" +msgid "entries" +msgstr "Yeniden denemeler" + +msgid "Entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Replication agreement for %(hostname)s not found" +msgid "container entry (%(container)s) not found" +msgstr "%(hostname)s için çoğaltma anlaşması bulunamadı" + +#, fuzzy, python-format +#| msgid "Replication agreement for %(hostname)s not found" +msgid "%(parent)s: %(oname)s not found" +msgstr "%(hostname)s için çoğaltma anlaşması bulunamadı" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, fuzzy, python-format +#| msgid "The character %(char)r is not allowed." +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "%(char)r karakterine izin verilmiyor." + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +#, fuzzy +#| msgid "The username attribute on the user object" +msgid "No such attribute on this entry" +msgstr "Kullanıcı nesnesindeki kullanıcı adı niteliği" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" msgstr "" #, python-format -msgid "owner %s" +msgid "%s" msgstr "" +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format msgid "" -"\n" -" Vault object.\n" -" " +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." msgstr "" -msgid "vault" +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." msgstr "" -msgid "vaults" +#, python-format +msgid "added attribute value to entry %(value)s" msgstr "" -msgid "Vaults" +#, python-format +msgid "removed attribute values from entry %(value)s" msgstr "" -msgid "Vault" +msgid "one or more values to remove" msgstr "" -msgid "Service, shared, and user options cannot be specified simultaneously" +#, fuzzy +#| msgid "Command '%(name)s' has been deprecated" +msgid "The deny type has been deprecated." +msgstr "'%(name)s' komutu kullanımdan kaldırıldı" + +msgid "HBAC rules" msgstr "" -msgid "Add a vault." +msgid "HBAC Rules" msgstr "" #, fuzzy, python-format #| msgid "Added netgroup \"%(value)s\"" -msgid "Added vault \"%(value)s\"" +msgid "Added HBAC rule \"%(value)s\"" msgstr "Ağ grubu \"%(value)s\" eklendi" #, fuzzy, python-format #| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted vault \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "%(count)d netgroup matched" -#| msgid_plural "%(count)d netgroups matched" -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified vault \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -msgid "Vault configuration" -msgstr "" - -#, fuzzy -#| msgid "IPA server hostname" -msgid "IPA KRA servers" -msgstr "IPA sunucusu ana makine adı" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Archived data into vault \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -msgid "Retrieve data from a vault." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "netgroups" -msgstr "ağ grupları" - -msgid "Netgroups" -msgstr "Ağ grupları" - -msgid "Netgroup" -msgstr "Ağ grubu" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"\"%s\" adlı bir ana makine grubu zaten var. Ana makine grupları ve ağ " -"grupları ortak bir ad uzayını paylaşmaktadır" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" -"\n" -"Kerberos PKINIT özellik durumu bildirim araçları.\n" -"\n" -"Kerberos PKINIT etkinleştirilen veya devre dışı bırakılan IPA yöneticilerini " -"bildir\n" -"\n" -"ÖRNEKLER:\n" -" Tüm yöneticilerde PKINIT durumunu listele:\n" -" ipa pkinit-status\n" -"\n" -" `ipa.example.com` üzerinde PKINIT durumunu denetle:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" PKINIT devre dışı bırakılan tüm IPA yöneticilerini listele:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"PKINIT desteği hakkında daha fazla bilgi için:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" - -msgid "pkinit" -msgstr "pkinit" - -msgid "PKINIT" -msgstr "PKINIT" - -msgid "PKINIT status" -msgstr "PKINIT durumu" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "PKINIT etkin mi devre dışı mı olduğu" - -msgid "Report PKINIT status on the IPA masters" -msgstr "IPA yöneticilerinde PKINIT durumunu bildir" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)s sunucu eşleşti" -msgstr[1] "%(count)s sunucu eşleşti" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" -"\n" -"RADIUS Vekil Sunucuları\n" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" -"\n" -"RADIUS Vekil Sunucularını yönetin.\n" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" -"\n" -"IPA, krb5 OTP kimlik doğrulamaları için harici bir RADIUS vekil\n" -"sunucusunun kullanılmasını destekler. Bu, üçüncü taraf kimlik doğrulama\n" -"hizmetleriyle birleşme sırasında büyük bir esneklik sağlar.\n" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" -"\n" -" Yeni bir sunucu ekleyin:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" -"\n" -" Girdileri \"example.com\" dizgesini içeren tüm sunucuları bulun:\n" -" ipa radiusproxy-find example.com\n" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" -"\n" -" Yapılandırmayı inceleyin:\n" -" ipa radiusproxy-show MyRADIUS\n" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" -"\n" -" Parolayı değiştirin:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" -"\n" -" Bir yapılandırmayı silin:\n" -" ipa radiusproxy-del MyRADIUS\n" - -msgid "invalid attribute name" -msgstr "geçersiz nitelik adı" - -msgid "invalid port number" -msgstr "geçersiz bağlantı noktası numarası" - -msgid "RADIUS proxy server" -msgstr "RADIUS vekil sunucusu" - -msgid "RADIUS proxy servers" -msgstr "RADIUS vekil sunucuları" - -msgid "RADIUS Servers" -msgstr "RADIUS Sunucuları" - -msgid "RADIUS Server" -msgstr "RADIUS Sunucusu" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "RADIUS vekil sunucusu \"%(value)s\" eklendi" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "RADIUS vekil sunucusu \"%(value)s\" silindi" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "RADIUS vekil sunucusu \"%(value)s\" değiştirildi" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "%(count)d RADIUS vekil sunucusu eşleşti" -msgstr[1] "%(count)d RADIUS vekil sunucusu eşleşti" - -#, fuzzy -#| msgid "A list of LDAP entries" -msgid "A list of ACI values" -msgstr "LDAP girdilerinin bir listesi" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -#, fuzzy -#| msgid "Service principal is required" -msgid "ACI prefix is required" -msgstr "Hizmet yetkilisi gereklidir" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, fuzzy, python-format -#| msgid "Certificate format error: %(error)s" -msgid "Syntax Error: %(error)s" -msgstr "Sertifika biçim hatası: %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -msgid "ACI" -msgstr "ACI" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Created ACI \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted HBAC rule \"%(value)s\"" msgstr "Ağ grubu \"%(value)s\" silindi" #, fuzzy, python-format #| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified ACI \"%(value)s\"" +msgid "Modified HBAC rule \"%(value)s\"" msgstr "Ağ grubu \"%(value)s\" değiştirildi" #, fuzzy, python-format #| msgid "%(count)d netgroup matched" #| msgid_plural "%(count)d netgroups matched" -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" msgstr[0] "%(count)d ağ grubu eşleşti" msgstr[1] "%(count)d ağ grubu eşleşti" #, fuzzy, python-format #| msgid "Deleted netgroup \"%(value)s\"" -msgid "Renamed ACI to \"%(value)s\"" +msgid "Enabled HBAC rule \"%(value)s\"" msgstr "Ağ grubu \"%(value)s\" silindi" +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + msgid "" "\n" -"Server configuration\n" +"Simulate use of Host-based access controls\n" "\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"NOTES:\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" "\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" "\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" +" --user, --host, and --service are mandatory, others are optional.\n" "\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" "\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" msgstr "" #, fuzzy -#| msgid "must be at least %(minvalue)d" -msgid "must be at least 10" -msgstr "en az %(minvalue)d olmalı" - -msgid "configuration options" -msgstr "" - -msgid "Configuration" -msgstr "" - -msgid "Maximum hostname length" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -#, fuzzy -#| msgid "IPA server hostname" -msgid "IPA CA servers" -msgstr "IPA sunucusu ana makine adı" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" +#| msgid "Host category the rule applies to" +msgid "Hosts the view applies to" +msgstr "Kuralın geçerli olduğu ana makine kategorisi" msgid "Domain resolution order" msgstr "" @@ -16351,246 +19810,207 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -#, fuzzy -#| msgid "options are not allowed" -msgid "Empty domain is not allowed" -msgstr "seçeneklere izin verilmiyor" - -#, fuzzy, python-format -#| msgid "invalid domain-name: %s" -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "geçersiz etki alanı adı: %s" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, fuzzy, python-format -#| msgid "options are not allowed" -msgid "attribute \"%s\" not allowed" -msgstr "seçeneklere izin verilmiyor" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, fuzzy, python-format -#| msgid "error on server '%(server)s': %(error)s" -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "'%(server)s' sunucusunda hata: %(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -#| msgid "Netgroups" -msgid "groups" -msgstr "Ağ grupları" - -msgid "User Group" -msgstr "" - #, fuzzy, python-format #| msgid "Added netgroup \"%(value)s\"" -msgid "Added group \"%(value)s\"" +msgid "Added ID View \"%(value)s\"" msgstr "Ağ grubu \"%(value)s\" eklendi" -msgid "gid cannot be set for external group" -msgstr "" - #, fuzzy, python-format #| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted group \"%(value)s\"" +msgid "Deleted ID View \"%(value)s\"" msgstr "Ağ grubu \"%(value)s\" silindi" -msgid "privileged group" -msgstr "" - #, fuzzy, python-format #| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified group \"%(value)s\"" +msgid "Modified an ID View \"%(value)s\"" msgstr "Ağ grubu \"%(value)s\" değiştirildi" #, fuzzy, python-format #| msgid "%(count)d netgroup matched" #| msgid_plural "%(count)d netgroups matched" -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" msgstr[0] "%(count)d ağ grubu eşleşti" msgstr[1] "%(count)d ağ grubu eşleşti" -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." msgstr "" msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +#, fuzzy +#| msgid "Add a new RADIUS proxy server." +msgid "Add a new ID override." +msgstr "Yeni bir RADIUS vekil sunucusu ekle." + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, fuzzy +#| msgid "Delete a RADIUS proxy server." +msgid "Delete an ID override." +msgstr "Bir RADIUS vekil sunucusunu sil." + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +#, fuzzy +#| msgid "Modify a RADIUS proxy server." +msgid "Modify an ID override." +msgstr "Bir RADIUS vekil sunucusunu değiştir." + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified an ID override \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for an ID override." +msgstr "Bir ağ grubu ara." + +#, fuzzy, python-format +#| msgid "%(count)d selfservice matched" +#| msgid_plural "%(count)d selfservices matched" +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d self-servis eşleşti" +msgstr[1] "%(count)d self-servis eşleşti" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about an ID override." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" msgstr "" +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified selfservice \"%(value)s\"" +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "%(count)s sunucu eşleşti" +msgstr[1] "%(count)s sunucu eşleşti" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + #, fuzzy, python-format #| msgid "Deleted netgroup \"%(value)s\"" -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" msgstr "Ağ grubu \"%(value)s\" silindi" -#, fuzzy -#| msgid "Not allowed on non-leaf entry" -msgid "not allowed to modify user entries" -msgstr "Yaprak (leaf) olmayan girdilerde izin verilmiyor" +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" -#, fuzzy -#| msgid "Not allowed on non-leaf entry" -msgid "not allowed to modify group entries" -msgstr "Yaprak (leaf) olmayan girdilerde izin verilmiyor" - -#, fuzzy -#| msgid "search for managed groups" -msgid "Not a managed group" -msgstr "yönetilen grupları ara" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" msgid "" "\n" @@ -16923,1354 +20343,43 @@ msgid_plural "%(count)d permissions matched" msgstr[0] "%(count)d ağ grubu eşleşti" msgstr[1] "%(count)d ağ grubu eşleşti" -msgid "" -"\n" -"OTP Tokens\n" +msgid "delegation" msgstr "" -msgid "" -"\n" -"Manage OTP tokens.\n" +msgid "delegations" msgstr "" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" +#, fuzzy +#| msgid "Deprecated options" +msgid "Delegations" +msgstr "Kullanımdan kaldırılan seçenekler" -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" +msgid "Delegation" msgstr "" #, fuzzy, python-format #| msgid "Added netgroup \"%(value)s\"" -msgid "Added OTP token \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" msgstr "Ağ grubu \"%(value)s\" eklendi" -msgid "cannot be empty" -msgstr "" - #, fuzzy, python-format #| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted OTP token \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" msgstr "Ağ grubu \"%(value)s\" silindi" #, fuzzy, python-format #| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified OTP token \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" msgstr "Ağ grubu \"%(value)s\" değiştirildi" #, fuzzy, python-format #| msgid "%(count)d netgroup matched" #| msgid_plural "%(count)d netgroups matched" -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "%(count)d ağ grubu eşleşti" msgstr[1] "%(count)d ağ grubu eşleşti" -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -#, fuzzy -#| msgid "this option is deprecated" -msgid "this option has been deprecated." -msgstr "bu seçenek kullanımdan kaldırıldı" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -#| msgid "host category cannot be set to 'all' while there are allowed hosts" -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" -"izin verilen ana makineler varken ana makine kategorisi 'all' olarak " -"ayarlanamaz" - -msgid "users" -msgstr "" - -#, fuzzy -#| msgid "Topic commands:" -msgid "command" -msgstr "Konu komutları:" - -#, fuzzy -#| msgid "Topic commands:" -msgid "commands" -msgstr "Konu komutları:" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -#, fuzzy -#| msgid "Netgroups" -msgid "group runAs" -msgstr "Ağ grupları" - -#, fuzzy -#| msgid "netgroups" -msgid "runAs groups" -msgstr "ağ grupları" - -#, fuzzy, python-format -#| msgid "%(count)d netgroup matched" -#| msgid_plural "%(count)d netgroups matched" -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, fuzzy -#| msgid "Topic commands:" -msgid "sudo command" -msgstr "Konu komutları:" - -#, fuzzy -#| msgid "Topic commands:" -msgid "sudo commands" -msgstr "Konu komutları:" - -#, fuzzy -#| msgid "Topic commands:" -msgid "Sudo Commands" -msgstr "Konu komutları:" - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -#| msgid "%(count)d netgroup matched" -#| msgid_plural "%(count)d netgroups matched" -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -#, fuzzy -#| msgid "search for managed groups" -msgid "sudo command group" -msgstr "yönetilen grupları ara" - -#, fuzzy -#| msgid "search for managed groups" -msgid "sudo command groups" -msgstr "yönetilen grupları ara" - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -#| msgid "%(count)d netgroup matched" -#| msgid_plural "%(count)d netgroups matched" -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -#, fuzzy -#| msgid "RADIUS proxy server name" -msgid "RADIUS max renew" -msgstr "RADIUS vekil sunucusu adı" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Delete a configuration:\n" -#| " ipa radiusproxy-del MyRADIUS\n" -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" -"\n" -" Bir yapılandırmayı silin:\n" -" ipa radiusproxy-del MyRADIUS\n" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -#, fuzzy -#| msgid "NIS domain name" -msgid "Location name" -msgstr "NIS etki alanı adı" - -#, fuzzy -#| msgid "NIS domain name" -msgid "IPA location name" -msgstr "NIS etki alanı adı" - -#, fuzzy -#| msgid "Netgroup description" -msgid "IPA Location description" -msgstr "Ağ grubu açıklaması" - -#, fuzzy -#| msgid "Server" -msgid "Servers" -msgstr "Sunucu" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -#, fuzzy -#| msgid "Add a new netgroup." -msgid "Add a new IPA location." -msgstr "Yeni bir ağ grubu ekle." - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added IPA location \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -msgid "Delete an IPA location." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy -#| msgid "Server" -msgid "IPA Server" -msgstr "Sunucu" - -#, fuzzy -#| msgid "Display information about a netgroup." -msgid "Modify information about an IPA location." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -#, fuzzy, python-format -#| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified IPA location \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy -#| msgid "Search for a netgroup." -msgid "Search for IPA locations." -msgstr "Bir ağ grubu ara." - -#, fuzzy, python-format -#| msgid "%(count)d netgroup matched" -#| msgid_plural "%(count)d netgroups matched" -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -#, fuzzy -#| msgid "Display information about a netgroup." -msgid "Display information about an IPA location." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -#, fuzzy -#| msgid "Server name" -msgid "Servers in location" -msgstr "Sunucu adı" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -#| msgid "Permission" -msgid "Version" -msgstr "İzin" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -#| msgid "Netgroup name" -msgid "Method name" -msgstr "Ağ grubu adı" - -#, fuzzy, python-format -#| msgid "%(filename)s: file not found" -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(filename)s: dosya bulunamadı" - -#, fuzzy -#| msgid "Display information about a netgroup." -msgid "Display information about a command." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -#, fuzzy -#| msgid "Search for a netgroup." -msgid "Search for commands." -msgstr "Bir ağ grubu ara." - -msgid "Return command defaults" -msgstr "" - -#, fuzzy -#| msgid "Display information about a netgroup." -msgid "Display information about a class." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -#, fuzzy -#| msgid "Search for a netgroup." -msgid "Search for classes." -msgstr "Bir ağ grubu ara." - -#, fuzzy -#| msgid "Display information about a netgroup." -msgid "Display information about a help topic." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -#, fuzzy -#| msgid "Search for a netgroup." -msgid "Search for help topics." -msgstr "Bir ağ grubu ara." - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -#| msgid "Command name" -msgid "CLI name" -msgstr "Komut adı" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -#, fuzzy -#| msgid "Netgroup" -msgid "Option group" -msgstr "Ağ grubu" - -msgid "Sensitive" -msgstr "" - -#, fuzzy -#| msgid "Positional arguments" -msgid "Positional argument" -msgstr "Konumsal argümanlar" - -#, fuzzy, python-format -#| msgid "objectclass %s not found" -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%s nesne sınıfı bulunamadı" - -#, fuzzy -#| msgid "Display information about a netgroup." -msgid "Display information about a command parameter." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "Search command parameters." -msgstr "" - -#, fuzzy, python-format -#| msgid "%(filename)s: file not found" -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(filename)s: dosya bulunamadı" - -#, fuzzy -#| msgid "Display information about a netgroup." -msgid "Display information about a command output." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -#, fuzzy -#| msgid "search for managed groups" -msgid "Search for command outputs." -msgstr "yönetilen grupları ara" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -#, fuzzy -#| msgid "invalid domain name" -msgid "local domain range" -msgstr "geçersiz etki alanı adı" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added ID range \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted ID range \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "%(count)d netgroup matched" -#| msgid_plural "%(count)d netgroups matched" -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -#, fuzzy -#| msgid "Modify a netgroup." -msgid "" -"Modify ID range.\n" -"\n" -msgstr "Bir ağ grubunu değiştir." - -#, fuzzy, python-format -#| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified ID range \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "self service permission" -msgstr "self servis izni" - -msgid "self service permissions" -msgstr "self servis izinleri" - -msgid "Self Service Permissions" -msgstr "Self Servis İzinleri" - -msgid "Self Service Permission" -msgstr "Self Servis İzni" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)d self-servis eşleşti" -msgstr[1] "%(count)d self-servis eşleşti" - -#, fuzzy -#| msgid "IPA server hostname" -msgid "" -"\n" -"IPA server roles\n" -msgstr "IPA sunucusu ana makine adı" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#, fuzzy -#| msgid "Server name" -msgid "server role" -msgstr "Sunucu adı" - -#, fuzzy -#| msgid "Server name" -msgid "server roles" -msgstr "Sunucu adı" - -#, fuzzy -#| msgid "IPA server hostname" -msgid "IPA Server Roles" -msgstr "IPA sunucusu ana makine adı" - -#, fuzzy -#| msgid "IPA server hostname" -msgid "IPA Server Role" -msgstr "IPA sunucusu ana makine adı" - -#, fuzzy -#| msgid "IPA server hostname" -msgid "IPA server role name" -msgstr "IPA sunucusu ana makine adı" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)s server matched" -#| msgid_plural "%(count)s servers matched" -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "%(count)s sunucu eşleşti" -msgstr[1] "%(count)s sunucu eşleşti" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -#, fuzzy -#| msgid "IPA server hostname" -msgid "IPA role name" -msgstr "IPA sunucusu ana makine adı" - msgid "HBAC rule and local members cannot both be set" msgstr "" @@ -18341,1039 +20450,212 @@ msgstr "Ağ grubu \"%(value)s\" silindi" msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "Ağ grubu \"%(value)s\" silindi" -#, fuzzy, python-brace-format -#| msgid "%(filename)s: file not found" -msgid "{role}: role not found" -msgstr "%(filename)s: dosya bulunamadı" +#, fuzzy +#| msgid "IPA server hostname" +msgid "" +"\n" +"IPA servers\n" +msgstr "IPA sunucusu ana makine adı" -#, python-brace-format -msgid "{attr}: no such attribute" +#, fuzzy +#| msgid "Display information about a RADIUS proxy server." +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "Bir RADIUS vekil sunucusu hakkında bilgileri görüntüle." + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" msgstr "" -msgid "pyhbac is not installed." +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" msgstr "" #, fuzzy -#| msgid "Deprecated options" -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "Kullanımdan kaldırılan seçenekler" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "'%(hostname)s' ana makinesinin karşılık gelen DNS A/AAAA kaydı yok" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" +#| msgid "Server" +msgid "server" +msgstr "Sunucu" #, fuzzy -#| msgid "must be a certificate" -msgid "Base-64 encoded certificate." -msgstr "bir sertifika olmalı" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "Subject" -msgstr "" - -msgid "Subject email address" -msgstr "" +#| msgid "Server" +msgid "servers" +msgstr "Sunucu" #, fuzzy -#| msgid "must be DNS name" -msgid "Subject DNS name" -msgstr "DNS adı olmalı" - -msgid "Subject X.400 address" -msgstr "" +#| msgid "RADIUS Servers" +msgid "IPA Servers" +msgstr "RADIUS Sunucuları" #, fuzzy #| msgid "Server name" -msgid "Subject directory name" +msgid "Server location" msgstr "Sunucu adı" -msgid "Subject EDI Party name" +msgid "Service weight" msgstr "" -msgid "Subject URI" +msgid "Weight for server services" msgstr "" -msgid "Subject IP Address" +msgid "Service relative weight" msgstr "" -msgid "Subject OID" +msgid "Relative weight for server services (counts per location)" msgstr "" -msgid "Subject UPN" +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" msgstr "" #, fuzzy -#| msgid "must be Kerberos principal" -msgid "Subject Kerberos principal name" -msgstr "Kerberos yetkilisi olmalı" - -msgid "Subject Other Name" -msgstr "" - -msgid "Issuer" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Serial number (hex)" -msgstr "" - -msgid "Request status" -msgstr "" - -#, fuzzy -#| msgid "must be a certificate signing request" -msgid "Include certificate chain in output" -msgstr "bir sertifika imzalama isteği olmalı" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -#, fuzzy -#| msgid "Deprecated options" -msgid "'add' option" -msgstr "Kullanımdan kaldırılan seçenekler" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -#, fuzzy -#| msgid "\"%s\" is not a valid permission type" -msgid "7 is not a valid revocation reason" -msgstr "\"%s\" geçerli bir izin türü değil" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d selfservice matched" -#| msgid_plural "%(count)d selfservices matched" -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "%(count)d self-servis eşleşti" -msgstr[1] "%(count)d self-servis eşleşti" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -#, fuzzy -#| msgid "Host category the rule applies to" -msgid "Hosts the view applies to" -msgstr "Kuralın geçerli olduğu ana makine kategorisi" - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added ID View \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted ID View \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified an ID View \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -#| msgid "%(count)d netgroup matched" -#| msgid_plural "%(count)d netgroups matched" -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -#, fuzzy -#| msgid "Add a new RADIUS proxy server." -msgid "Add a new ID override." -msgstr "Yeni bir RADIUS vekil sunucusu ekle." - -#, fuzzy, python-format -#| msgid "Added selfservice \"%(value)s\"" -msgid "Added ID override \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, fuzzy -#| msgid "Delete a RADIUS proxy server." -msgid "Delete an ID override." -msgstr "Bir RADIUS vekil sunucusunu sil." - -#, fuzzy, python-format -#| msgid "Deleted selfservice \"%(value)s\"" -msgid "Deleted ID override \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -#, fuzzy -#| msgid "Modify a RADIUS proxy server." -msgid "Modify an ID override." -msgstr "Bir RADIUS vekil sunucusunu değiştir." - -#, fuzzy, python-format -#| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified an ID override \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -#, fuzzy -#| msgid "Search for a netgroup." -msgid "Search for an ID override." -msgstr "Bir ağ grubu ara." - -#, fuzzy, python-format -#| msgid "%(count)d selfservice matched" -#| msgid_plural "%(count)d selfservices matched" -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d self-servis eşleşti" -msgstr[1] "%(count)d self-servis eşleşti" - -#, fuzzy -#| msgid "Display information about a netgroup." -msgid "Display information about an ID override." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -#, fuzzy -#| msgid "must be a certificate" -msgid "Base-64 encoded user certificate" -msgstr "bir sertifika olmalı" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added selfservice \"%(value)s\"" -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added selfservice \"%(value)s\"" -msgid "Added User ID override \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, fuzzy, python-format -#| msgid "Deleted selfservice \"%(value)s\"" -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" +#| msgid "Display information about a RADIUS proxy server." +msgid "Modify information about an IPA server." +msgstr "Bir RADIUS vekil sunucusu hakkında bilgileri görüntüle." #, fuzzy, python-format #| msgid "Modified selfservice \"%(value)s\"" -msgid "Modified an User ID override \"%(value)s\"" +msgid "Modified IPA server \"%(value)s\"" msgstr "Self-servis \"%(value)s\" değiştirildi" #, fuzzy, python-format #| msgid "%(count)s server matched" #| msgid_plural "%(count)s servers matched" -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" msgstr[0] "%(count)s sunucu eşleşti" msgstr[1] "%(count)s sunucu eşleşti" #, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added Group ID override \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" +msgid "Ignore topology errors" +msgstr "" -#, fuzzy, python-format -#| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" +msgid "Ignore topology connectivity problems after removal" +msgstr "" -#, fuzzy, python-format -#| msgid "%(count)d netgroup matched" -#| msgid_plural "%(count)d netgroups matched" -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" -msgid "" -"\n" -"Auto Membership Rule.\n" +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" msgstr "" msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." msgstr "" msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." msgstr "" msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." msgstr "" -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(filename)s: file not found" -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(filename)s: dosya bulunamadı" - -#, fuzzy, python-format -#| msgid "%(port)s is not a valid port" -msgid "%s is not a valid attribute." -msgstr "%(port)s geçerli bir bağlantı noktası değil" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added automember rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -#| msgid "objectclass %s not found" -msgid "Auto member rule: %s not found!" -msgstr "%s nesne sınıfı bulunamadı" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified automember rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d netgroup matched" -#| msgid_plural "%(count)d netgroups matched" -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -#, fuzzy -#| msgid "Display information about a netgroup." -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " +msgid "Ignoring these warnings and proceeding with removal" msgstr "" #, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" #, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" msgstr "" -msgid "No default (fallback) group set" +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "'%(server)s' sunucusunda hata: %(error)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." msgstr "" #, fuzzy -#| msgid "Display information about a netgroup." -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." +#| msgid "This entry is already enabled" +msgid "Server has already been deleted" +msgstr "Bu girdi zaten etkin" -msgid "Task DN" +msgid "Agreements deleted" msgstr "" -msgid "DN of the started task" +msgid "Following segments were not deleted:" msgstr "" -msgid "at least one of options: type, users, hosts must be specified" +msgid "not allowed to perform server connection check" msgstr "" -msgid "users and hosts cannot both be set" +msgid "Set enabled/hidden state of a server." msgstr "" -msgid "hosts cannot be set when type is 'group'" +msgid "State" msgstr "" -msgid "users cannot be set when type is 'hostgroup'" +#, fuzzy +#| msgid "Server name" +msgid "Server state" +msgstr "Sunucu adı" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Changed server state of \"%(value)s\"." +msgstr "Self-servis \"%(value)s\" eklendi" + +msgid "Cannot hide CA renewal master." msgstr "" -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" +msgid "Cannot hide DNSSec key master." msgstr "" #, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" +msgid "Cannot hide last enabled %(name)s server." msgstr "" msgid "" "\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" +"Session Support for IPA\n" msgstr "" msgid "" @@ -19557,6 +20839,885 @@ msgstr "" msgid "Enabled CA \"%(value)s\"" msgstr "Ağ grubu \"%(value)s\" silindi" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified selfservice \"%(value)s\"" +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Display information about a self-service permission." +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "Bir self-servis izni hakkında bilgileri görüntüle." + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "%(count)s sunucu eşleşti" +msgstr[1] "%(count)s sunucu eşleşti" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 10" +msgstr "en az %(minvalue)d olmalı" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#, fuzzy +#| msgid "IPA server hostname" +msgid "IPA CA servers" +msgstr "IPA sunucusu ana makine adı" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +#, fuzzy +#| msgid "options are not allowed" +msgid "Empty domain is not allowed" +msgstr "seçeneklere izin verilmiyor" + +#, fuzzy, python-format +#| msgid "invalid domain-name: %s" +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "geçersiz etki alanı adı: %s" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, fuzzy, python-format +#| msgid "options are not allowed" +msgid "attribute \"%s\" not allowed" +msgstr "seçeneklere izin verilmiyor" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "'%(server)s' sunucusunda hata: %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +#, fuzzy +#| msgid "Unable to communicate with CMS (status %d)" +msgid "Unable to communicate with CMS" +msgstr "CMS ile iletişim kurulamadı (durum %d)" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Base-64 encoded host certificate" +msgstr "bir sertifika olmalı" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added host \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted host \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified host \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Disabled host \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added certificates to host \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +#, fuzzy +#| msgid "invalid domain name" +msgid "local domain range" +msgstr "geçersiz etki alanı adı" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "" +"Modify ID range.\n" +"\n" +msgstr "Bir ağ grubunu değiştir." + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified ID range \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + msgid "Internationalization messages" msgstr "" @@ -20682,12 +22843,6 @@ msgstr "" msgid "REVOKED" msgstr "" -msgid "Serial Number" -msgstr "" - -msgid "Serial Number (hex)" -msgstr "" - msgid "SHA1 Fingerprint" msgstr "" @@ -20742,9 +22897,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -msgid "Certificate mapping data" -msgstr "" - msgid "Configuration string" msgstr "" @@ -21507,9 +23659,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "" - #, fuzzy #| msgid "Netgroup description" msgid "Netgroup Settings" @@ -21641,9 +23790,6 @@ msgstr "" msgid "Add password policy" msgstr "" -msgid "Password Policy" -msgstr "" - msgid "Remove password policies" msgstr "" @@ -22129,19 +24275,6 @@ msgstr "" msgid "Remove domains" msgstr "" -#, fuzzy -#| msgid "must be dictionary" -msgid "Trust direction" -msgstr "sözlük olmalı" - -#, fuzzy -#| msgid "PKINIT status" -msgid "Trust status" -msgstr "PKINIT durumu" - -msgid "Trust type" -msgstr "" - msgid "Alternative UPN suffixes" msgstr "" @@ -22685,9 +24818,6 @@ msgstr "" msgid "Topology" msgstr "" -msgid "Trusts" -msgstr "" - msgid "True" msgstr "" @@ -22803,1485 +24933,6 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "Role" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added role \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted role \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified role \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -#| msgid "%(count)d netgroup matched" -#| msgid_plural "%(count)d netgroups matched" -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -#, fuzzy -#| msgid "IPA server hostname" -msgid "" -"\n" -"IPA servers\n" -msgstr "IPA sunucusu ana makine adı" - -#, fuzzy -#| msgid "Display information about a RADIUS proxy server." -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "Bir RADIUS vekil sunucusu hakkında bilgileri görüntüle." - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#, fuzzy -#| msgid "Server" -msgid "server" -msgstr "Sunucu" - -#, fuzzy -#| msgid "Server" -msgid "servers" -msgstr "Sunucu" - -#, fuzzy -#| msgid "RADIUS Servers" -msgid "IPA Servers" -msgstr "RADIUS Sunucuları" - -#, fuzzy -#| msgid "Server name" -msgid "Server location" -msgstr "Sunucu adı" - -msgid "Service weight" -msgstr "" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -#, fuzzy -#| msgid "Display information about a RADIUS proxy server." -msgid "Modify information about an IPA server." -msgstr "Bir RADIUS vekil sunucusu hakkında bilgileri görüntüle." - -#, fuzzy, python-format -#| msgid "Modified selfservice \"%(value)s\"" -msgid "Modified IPA server \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -#| msgid "%(count)s server matched" -#| msgid_plural "%(count)s servers matched" -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "%(count)s sunucu eşleşti" -msgstr[1] "%(count)s sunucu eşleşti" - -#, fuzzy, python-format -#| msgid "Deleted selfservice \"%(value)s\"" -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "error on server '%(server)s': %(error)s" -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "'%(server)s' sunucusunda hata: %(error)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, fuzzy -#| msgid "This entry is already enabled" -msgid "Server has already been deleted" -msgstr "Bu girdi zaten etkin" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, fuzzy, python-format -#| msgid "must be '%(value)s'" -msgid "must be \"%s\"" -msgstr "'%(value)s' olmalı" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -#, fuzzy -#| msgid "Server name" -msgid "Server state" -msgstr "Sunucu adı" - -#, fuzzy, python-format -#| msgid "Added selfservice \"%(value)s\"" -msgid "Changed server state of \"%(value)s\"." -msgstr "Self-servis \"%(value)s\" eklendi" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -#, fuzzy -#| msgid "must be Kerberos principal" -msgid "Member principals" -msgstr "Kerberos yetkilisi olmalı" - -#, fuzzy, python-format -#| msgid "Malformed principal: '%(value)s'" -msgid "Malformed principal: %(error)s" -msgstr "Hatalı biçimlendirilmiş yetkili: '%(value)s'" - -msgid "Add target to a named service delegation." -msgstr "" - -#, fuzzy, python-format -#| msgid "Member Host" -msgid "member %s" -msgstr "Üye Ana Makine" - -#, fuzzy -#| msgid "Remove members from a netgroup." -msgid "Remove member from a named service delegation." -msgstr "Bir ağ grubundan üye kaldır." - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added selfservice \"%(value)s\"" -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, fuzzy, python-format -#| msgid "Deleted selfservice \"%(value)s\"" -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -msgid "privileged service delegation rule" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d selfservice matched" -#| msgid_plural "%(count)d selfservices matched" -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "%(count)d self-servis eşleşti" -msgstr[1] "%(count)d self-servis eşleşti" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added selfservice \"%(value)s\"" -msgid "Added service delegation target \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, fuzzy, python-format -#| msgid "Deleted selfservice \"%(value)s\"" -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -msgid "privileged service delegation target" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d selfservice matched" -#| msgid_plural "%(count)d selfservices matched" -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "%(count)d self-servis eşleşti" -msgstr[1] "%(count)d self-servis eşleşti" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(port)s is not a valid port" -msgid "%(user)s is not a POSIX user" -msgstr "%(port)s geçerli bir bağlantı noktası değil" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#, fuzzy -#| msgid "must be a certificate" -msgid "Base-64 encoded host certificate" -msgstr "bir sertifika olmalı" - -msgid "Principal alias" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added host \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted host \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified host \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d netgroup matched" -#| msgid_plural "%(count)d netgroups matched" -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Disabled host \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "Added selfservice \"%(value)s\"" -msgid "Added certificates to host \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -#, fuzzy -#| msgid "Delete a self-service permission." -msgid "Delete Class of Service entry" -msgstr "Bir self-servis iznini sil." - -#, fuzzy -#| msgid "Modify a self-service permission." -msgid "Modify Class of Service entry" -msgstr "Bir self-servis iznini değiştir." - -msgid "Display Class of Service entry" -msgstr "" - -#, fuzzy -#| msgid "Search for a self-service permission." -msgid "Search for Class of Service entry" -msgstr "Bir self-servis izni ara." - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -msgid "Password Policies" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -#| msgid "User category" -msgid "User check" -msgstr "Kullanıcı kategorisi" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -#, fuzzy -#| msgid "A managed group cannot have a password policy." -msgid "cannot delete global password policy" -msgstr "Yönetilen bir grubun parola politikası olamaz." - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added RADIUS proxy server \"%(value)s\"" -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "RADIUS vekil sunucusu \"%(value)s\" eklendi" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy -#| msgid "Permission name" -msgid "missing base_id" -msgstr "İzin adı" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted trust \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d netgroup matched" -#| msgid_plural "%(count)d netgroups matched" -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -#, fuzzy -#| msgid "NIS domain name" -msgid "Domain enabled" -msgstr "NIS etki alanı adı" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, fuzzy -#| msgid "Not allowed on non-leaf entry" -msgid "not allowed to remotely add agent" -msgstr "Yaprak (leaf) olmayan girdilerde izin verilmiyor" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified selfservice \"%(value)s\"" -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -#| msgid "Display information about a self-service permission." -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "Bir self-servis izni hakkında bilgileri görüntüle." - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)s server matched" -#| msgid_plural "%(count)s servers matched" -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "%(count)s sunucu eşleşti" -msgstr[1] "%(count)s sunucu eşleşti" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added selfservice \"%(value)s\"" -msgid "Added privilege \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, fuzzy, python-format -#| msgid "Deleted selfservice \"%(value)s\"" -msgid "Deleted privilege \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "Modified selfservice \"%(value)s\"" -msgid "Modified privilege \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -#| msgid "%(count)d selfservice matched" -#| msgid_plural "%(count)d selfservices matched" -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d self-servis eşleşti" -msgstr[1] "%(count)d self-servis eşleşti" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -24469,682 +25120,35 @@ msgstr "Hizmet yetkilisi gereklidir" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "Self-servis \"%(value)s\" silindi" -msgid "delegation" -msgstr "" +msgid "self service permission" +msgstr "self servis izni" -msgid "delegations" -msgstr "" - -#, fuzzy -#| msgid "Deprecated options" -msgid "Delegations" -msgstr "Kullanımdan kaldırılan seçenekler" - -msgid "Delegation" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added delegation \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted delegation \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified delegation \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -#| msgid "%(count)d netgroup matched" -#| msgid_plural "%(count)d netgroups matched" -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -#, fuzzy -#| msgid "Command '%(name)s' has been deprecated" -msgid "The deny type has been deprecated." -msgstr "'%(name)s' komutu kullanımdan kaldırıldı" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added HBAC rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -#| msgid "%(count)d netgroup matched" -#| msgid_plural "%(count)d netgroups matched" -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -#, fuzzy -#| msgid "self service permissions" -msgid "Indirect Member permissions" +msgid "self service permissions" msgstr "self servis izinleri" -msgid "Indirect Member HBAC service" -msgstr "" +msgid "Self Service Permissions" +msgstr "Self Servis İzinleri" -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -#, fuzzy -#| msgid "This entry cannot be enabled or disabled" -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Bu girdi etkinleştirilemez veya devre dışı bırakılamaz" - -msgid "entry" -msgstr "" - -#, fuzzy -#| msgid "Retries" -msgid "entries" -msgstr "Yeniden denemeler" - -msgid "Entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Replication agreement for %(hostname)s not found" -msgid "container entry (%(container)s) not found" -msgstr "%(hostname)s için çoğaltma anlaşması bulunamadı" - -#, fuzzy, python-format -#| msgid "Replication agreement for %(hostname)s not found" -msgid "%(parent)s: %(oname)s not found" -msgstr "%(hostname)s için çoğaltma anlaşması bulunamadı" +msgid "Self Service Permission" +msgstr "Self Servis İzni" #, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, fuzzy, python-format -#| msgid "The character %(char)r is not allowed." -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "%(char)r karakterine izin verilmiyor." +msgid "Added selfservice \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" #, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -#, fuzzy -#| msgid "The username attribute on the user object" -msgid "No such attribute on this entry" -msgstr "Kullanıcı nesnesindeki kullanıcı adı niteliği" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" #, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -#, fuzzy -#| msgid "must be True or False" -msgid "must be TRUE or FALSE" -msgstr "True veya False olmalı" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "Replication agreement for %(hostname)s not found" -msgid "manager %(manager)s not found" -msgstr "%(hostname)s için çoğaltma anlaşması bulunamadı" - -#, fuzzy -#| msgid "must be a certificate" -msgid "Issuer of the certificate" -msgstr "bir sertifika olmalı" - -#, fuzzy -#| msgid "must be a certificate" -msgid "Subject of the certificate" -msgstr "bir sertifika olmalı" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified netgroup \"%(value)s\"" -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added user \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Deleted user \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "This entry is already enabled" -msgid "%s: user is already preserved" -msgstr "Bu girdi zaten etkin" - -#, fuzzy, python-format -#| msgid "Modified netgroup \"%(value)s\"" -msgid "Modified user \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Undeleted user account \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "This entry is already enabled" -msgid "user \"%s\" is already active" -msgstr "Bu girdi zaten etkin" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Staged user account \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Disabled user account \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Enabled user account \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted netgroup \"%(value)s\"" -msgid "Unlocked account \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -#, fuzzy -#| msgid "Timeout" -msgid "Time now" -msgstr "Zaman aşımı" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, fuzzy, python-format -#| msgid "This entry is already disabled" -msgid "Account disabled: %(disabled)s" -msgstr "Bu girdi zaten devre dışı" - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added certificates to user \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -#| msgid "Modified selfservice \"%(value)s\"" -msgid "Removed certificates from user \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" msgstr "Self-servis \"%(value)s\" değiştirildi" -msgid "Add new principal alias to the user entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Added netgroup \"%(value)s\"" -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy -#| msgid "Service principal is required" -msgid "Remove principal alias from the user entry" -msgstr "Hizmet yetkilisi gereklidir" - -#, fuzzy, python-format -#| msgid "Deleted selfservice \"%(value)s\"" -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "%(count)d self-servis eşleşti" +msgstr[1] "%(count)d self-servis eşleşti" #, python-format msgid "all masters must have %(role)s role enabled" @@ -25331,25 +25335,6 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - #, fuzzy #| msgid "must be a certificate" msgid "Request must be a dict" @@ -25375,6 +25360,25 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #, python-format msgid "must equal %r" msgstr "" diff --git a/po/uk.po b/po/uk.po index 1949c45c9..9cbb809f9 100644 --- a/po/uk.po +++ b/po/uk.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2021-01-28 11:40+0000\n" "Last-Translator: Yuri Chornoivan \n" "Language-Team: Ukrainian =20) ? 1 : 2;\n" "X-Generator: Weblate 4.4.2\n" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "Не вдалося обробити назву реєстраційного запису\n" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "krb5_parse_name %1$d: %2$s\n" + +#, c-format +msgid "Removing principal %s\n" +msgstr "Вилучення реєстраційного запису %s\n" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "Не вдалося відкрити таблицю ключів\n" + +#, c-format +msgid "principal not found\n" +msgstr "реєстраційного запису не знайдено\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "krb5_kt_get_entry %1$d: %2$s\n" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "Не вдалося вилучити запис\n" + +#, c-format +msgid "kvno %d\n" +msgstr "kvno %d\n" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "krb5_kt_remove_entry %1$d: %2$s\n" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "Не вдалося встановити курсор, «%1$s»\n" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "Не вдалося обробити реєстраційний запис\n" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "krb5_unparse_name %1$d: %2$s\n" + +#, c-format +msgid "realm not found\n" +msgstr "область не знайдено\n" + +msgid "Print debugging information" +msgstr "Вивести діагностичні дані" + +msgid "Debugging output" +msgstr "Діагностична інформація" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"Реєстраційні записи, які слід вилучити із таблиці ключів (приклад: ftp/ftp." +"example.com@EXAMPLE.COM)" + +msgid "Kerberos Service Principal Name" +msgstr "Назва реєстраційного запису служби Kerberos" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "Файл таблиці ключів, звідки слід вилучити реєстраційні записи" + +msgid "Keytab File Name" +msgstr "Назва файла таблиці ключів" + +msgid "Remove all principals in this realm" +msgstr "Вилучити всі реєстраційні записи у цій області" + +msgid "Realm name" +msgstr "Назва області" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "Невдала спроба ініціалізації контексту Kerberos\n" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "Не вдалося відкрити таблицю ключів «%1$s»: %2$s\n" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "Спроба закриття таблиці ключів зазнала невдачі\n" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "krb5_kt_close %1$d: %2$s\n" + #, c-format msgid "Out of memory!\n" msgstr "Не вистачає пам'яті!\n" @@ -289,101 +384,6 @@ msgstr "Назву вузла слід вказувати повністю: %s\n msgid "The hostname must not be: %s\n" msgstr "Назва вузла не повинна бути такою: %s\n" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "Не вдалося обробити назву реєстраційного запису\n" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "krb5_parse_name %1$d: %2$s\n" - -#, c-format -msgid "Removing principal %s\n" -msgstr "Вилучення реєстраційного запису %s\n" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "Не вдалося відкрити таблицю ключів\n" - -#, c-format -msgid "principal not found\n" -msgstr "реєстраційного запису не знайдено\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "krb5_kt_get_entry %1$d: %2$s\n" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "Не вдалося вилучити запис\n" - -#, c-format -msgid "kvno %d\n" -msgstr "kvno %d\n" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "krb5_kt_remove_entry %1$d: %2$s\n" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "Не вдалося встановити курсор, «%1$s»\n" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "Не вдалося обробити реєстраційний запис\n" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "krb5_unparse_name %1$d: %2$s\n" - -#, c-format -msgid "realm not found\n" -msgstr "область не знайдено\n" - -msgid "Print debugging information" -msgstr "Вивести діагностичні дані" - -msgid "Debugging output" -msgstr "Діагностична інформація" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Реєстраційні записи, які слід вилучити із таблиці ключів (приклад: ftp/ftp." -"example.com@EXAMPLE.COM)" - -msgid "Kerberos Service Principal Name" -msgstr "Назва реєстраційного запису служби Kerberos" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "Файл таблиці ключів, звідки слід вилучити реєстраційні записи" - -msgid "Keytab File Name" -msgstr "Назва файла таблиці ключів" - -msgid "Remove all principals in this realm" -msgstr "Вилучити всі реєстраційні записи у цій області" - -msgid "Realm name" -msgstr "Назва області" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Невдала спроба ініціалізації контексту Kerberos\n" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "Не вдалося відкрити таблицю ключів «%1$s»: %2$s\n" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "Спроба закриття таблиці ключів зазнала невдачі\n" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "krb5_kt_close %1$d: %2$s\n" - #, c-format msgid "cannot open configuration file %s\n" msgstr "не вдалося відкрити файл налаштувань %s\n" @@ -12559,6 +12559,158 @@ msgid "" "Establish bi-directional trust. By default trust is inbound one-way only." msgstr "Встановлено двобічну довіру. Типово, довіра є лише однобічною вхідною." +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" +"\n" +"Керування профілями сертифікатів\n" +"\n" +"Профілі сертифікатів використовуються службами сертифікації (CA) під час\n" +"підписування сертифікатів для визначення того, чи є прийнятним запит на\n" +"підписування сертифіката (CSR), і, якщо це так, визначення можливостей\n" +"і розширень, які буде надано сертифікатом.\n" +"\n" +"Форматом профілю сертифікатів є список значень, які може обробляти\n" +"Dogtag або система сертифікації служби сертифікації Red Hat.\n" +"\n" +"СИНТАКСИС ІДЕНТИФІКАТОРА ПРОФІЛЮ:\n" +"\n" +"Ідентифікатор профілю — рядок без пробілів і символів пунктуації,\n" +"що починається з літери і складається з послідовності літер, цифр, та " +"символів підкреслювання («_»).\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Імпортувати профіль, у якому не зберігатимуться видані сертифікати:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --summary \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Вилучити профіль сертифікатів:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Показати дані щодо профілю:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Зберегти налаштування профілю до файла:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Шукати профілі, у яких не зберігаються сертифікати:\n" +" ipa certprofile-find --store=false\n" +"\n" +"ФОРМАТ НАЛАШТУВАНЬ ПРОФІЛЮ:\n" +"\n" +"Налаштування профілю зберігаються у вигляді простого списку\n" +"властивостей, що використовується системою сертифікації Dogtag.\n" +"Підтримки формату XML не передбачено.\n" +"\n" +"Профілів, які керуються IPA, стосуються такі обмеження:\n" +"\n" +"- Під час імпортування профілю поле «profileId», якщо таке є, має\n" +" містити значення, що збігається з ідентифікатором, вказаним у рядку " +"команди.\n" +"\n" +"- Значенням поля «classId» має бути «caEnrollImpl»\n" +"\n" +"- Значенням поля «auth.instance_id» має бути «raCertAuth»\n" +"\n" +"- Має бути використано вхідний клас «certReqInputImpl» і вихідний\n" +" клас «certOutputImpl».\n" + +msgid "Profile ID for referring to this profile" +msgstr "Ідентифікатор профілю для посилання на цей профіль" + +msgid "Profile description" +msgstr "Опис профілю" + +msgid "Brief description of this profile" +msgstr "Короткий опис профілю" + +msgid "Store issued certificates" +msgstr "Зберігати видані сертифікати" + +msgid "Whether to store certs issued using this profile" +msgstr "" +"Визначає, чи слід зберігати сертифікати, видані за допомогою цього профілю" + +msgid "Delete a Certificate Profile." +msgstr "Вилучити профіль сертифікатів." + +msgid "Search for Certificate Profiles." +msgstr "Шукати профілі сертифікатів." + +msgid "Import a Certificate Profile." +msgstr "Імпортувати профіль сертифікатів." + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" +"Назва файла профілю з необробленими даними. Підтримки формату XML не " +"передбачено." + +msgid "Modify Certificate Profile configuration." +msgstr "Змінити налаштування профілю сертифікатів." + +msgid "File containing profile configuration" +msgstr "Файл, який містить налаштування профілів" + +msgid "Display the properties of a Certificate Profile." +msgstr "Показати властивості профілю сертифікатів." + +msgid "Write profile configuration to file" +msgstr "Записати налаштування профілів до файла" + msgid "" "\n" "ID ranges\n" @@ -12973,158 +13125,6 @@ msgstr "" "=======\n" " " -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" -"\n" -"Керування профілями сертифікатів\n" -"\n" -"Профілі сертифікатів використовуються службами сертифікації (CA) під час\n" -"підписування сертифікатів для визначення того, чи є прийнятним запит на\n" -"підписування сертифіката (CSR), і, якщо це так, визначення можливостей\n" -"і розширень, які буде надано сертифікатом.\n" -"\n" -"Форматом профілю сертифікатів є список значень, які може обробляти\n" -"Dogtag або система сертифікації служби сертифікації Red Hat.\n" -"\n" -"СИНТАКСИС ІДЕНТИФІКАТОРА ПРОФІЛЮ:\n" -"\n" -"Ідентифікатор профілю — рядок без пробілів і символів пунктуації,\n" -"що починається з літери і складається з послідовності літер, цифр, та " -"символів підкреслювання («_»).\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Імпортувати профіль, у якому не зберігатимуться видані сертифікати:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --summary \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Вилучити профіль сертифікатів:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Показати дані щодо профілю:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Зберегти налаштування профілю до файла:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Шукати профілі, у яких не зберігаються сертифікати:\n" -" ipa certprofile-find --store=false\n" -"\n" -"ФОРМАТ НАЛАШТУВАНЬ ПРОФІЛЮ:\n" -"\n" -"Налаштування профілю зберігаються у вигляді простого списку\n" -"властивостей, що використовується системою сертифікації Dogtag.\n" -"Підтримки формату XML не передбачено.\n" -"\n" -"Профілів, які керуються IPA, стосуються такі обмеження:\n" -"\n" -"- Під час імпортування профілю поле «profileId», якщо таке є, має\n" -" містити значення, що збігається з ідентифікатором, вказаним у рядку " -"команди.\n" -"\n" -"- Значенням поля «classId» має бути «caEnrollImpl»\n" -"\n" -"- Значенням поля «auth.instance_id» має бути «raCertAuth»\n" -"\n" -"- Має бути використано вхідний клас «certReqInputImpl» і вихідний\n" -" клас «certOutputImpl».\n" - -msgid "Profile ID for referring to this profile" -msgstr "Ідентифікатор профілю для посилання на цей профіль" - -msgid "Profile description" -msgstr "Опис профілю" - -msgid "Brief description of this profile" -msgstr "Короткий опис профілю" - -msgid "Store issued certificates" -msgstr "Зберігати видані сертифікати" - -msgid "Whether to store certs issued using this profile" -msgstr "" -"Визначає, чи слід зберігати сертифікати, видані за допомогою цього профілю" - -msgid "Delete a Certificate Profile." -msgstr "Вилучити профіль сертифікатів." - -msgid "Search for Certificate Profiles." -msgstr "Шукати профілі сертифікатів." - -msgid "Import a Certificate Profile." -msgstr "Імпортувати профіль сертифікатів." - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" -"Назва файла профілю з необробленими даними. Підтримки формату XML не " -"передбачено." - -msgid "Modify Certificate Profile configuration." -msgstr "Змінити налаштування профілю сертифікатів." - -msgid "File containing profile configuration" -msgstr "Файл, який містить налаштування профілів" - -msgid "Display the properties of a Certificate Profile." -msgstr "Показати властивості профілю сертифікатів." - -msgid "Write profile configuration to file" -msgstr "Записати налаштування профілів до файла" - msgid "Remove users that can manage this token." msgstr "Вилучити записи користувачів, які можуть керувати цим жетоном." @@ -17077,212 +17077,23 @@ msgstr "список груп команд sudo, які слід додати, msgid "comma-separated list of sudo command groups to remove" msgstr "список груп команд sudo, які слід вилучити, відокремлених комами" -msgid "Additional instructions:" -msgstr "Додаткові настанови:" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" +msgid "Results are truncated, try a more specific search" msgstr "" -"Не було надіслано номера версії програмного інтерфейсу (API), сумісність з " -"найновішими версіями не можна гарантувати. Припускаємо таку версію API " -"сервера: %(server_version)s" +"Список результатів обрізано. Спробуйте точніше визначити критерії пошуку." -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." +#, python-format +msgid "Unknown option: %(option)s" +msgstr "Невідомий параметр: %(option)s" + +msgid "Client version. Used to determine if server will accept request." msgstr "" -"З виходом версії IPA 4.0 змінилася семантика засобу переспрямовування DNS.\n" -"Вам варто перейти на використання зон переспрямовування (dnsforwardzone-*).\n" -"Докладніше про це у документації." +"Версія клієнта. Використовується для визначення, якщо сервер приймає запит." -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" -"Підтримка DNSSEC є експериментальною.\n" -"%(additional_info)s" +msgid "any of the configured servers" +msgstr "будь-який з налаштованих серверів" -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "Параметр «%(option)s» є застарілим. %(additional_info)s" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" -"Семантику %(label)s було змінено. %(current_behavior)s\n" -"%(hint)s" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "Сервер DNS %(server)s: %(error)s." - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"На сервері DNS %(server)s не передбачено підтримки DNSSEC: %(error)s.\n" -"Якщо на серверах IPA увімкнено перевірку DNSSEC, будь ласка, вимкніть її." - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" -"зона переспрямовування «%(fwzone)s» не є ефективною, оскільки не вказано " -"належного делегування NS у основній зоні «%(authzone)s». Будь ласка, додайте " -"запис NS «%(ns_rec)s» до батьківської зони «%(authzone)s»." - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"На сервері DNS %(server)s не передбачено підтримки EDNS0 (RFC 6891): " -"%(error)s.\n" -"Якщо на серверах IPA увімкнено перевірку DNSSEC, будь ласка, вимкніть її." - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" -"Не пройдено перевірку DNSSEC: %(error)s.\n" -"Будь ласка, перевірте, чи правильно вказано налаштування DNSSEC, або " -"вимкніть перевірку DNSSEC на усіх серверах IPA." - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" -"Не вдалося створити запис TXT _kerberos з домену %(domain)s (%(error)s).\n" -"Причиною може бути те, що зона не є керованою IPA. Будь ласка, створіть " -"запис вручну так, щоб він містив таке значення: «%(realm)s»" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" -"Не вдалося вилучити запис TXT _kerberos з домену %(domain)s (%(error)s).\n" -"Причиною може бути те, що зона не є керованою IPA. Будь ласка, вилучіть " -"запис вручну." - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" -"Не встановлено основного ключа DNSSEC. Підписування у зоні DNSSEC не " -"працюватиме, доки не буде встановлено основний ключ DNSSEC." - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" -"Назва відносного запису «%(record)s» містить як суфікс назву зони " -"«%(zone)s», що дає повну назву домену «%(fqdn)s». Зазвичай, такі назви є " -"помилковими, спричиненими пропущеною крапкою наприкінці специфікації назви." - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "«%(command)s» вважається застарілою. %(additional_info)s" - -#, python-format -msgid "%(line)s" -msgstr "%(line)s" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "Результат пошуку обрізано: %(reason)s" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" -"Довіру до %(domain)s втрачено. Будь ласка, відновіть її за допомогою команди " -"«ipa trust-add»." - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "Записи DNS вузла %(host)s не вдалося вилучити. (%(reason)s)" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" -"Правила переспрямовування конфліктують із деякими автоматично порожніми " -"зонами. Запити для зон, вказаних на основі RFC 6303, ігноруватимуть " -"переспрямовування і завжди призводитимуть до відповідей NXDOMAIN. Щоб " -"перевизначити цю поведінку, скористайтеся правилами переспрямовування «only»." - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" -"Спроба оновлення запису системи «%(record)s» зазнала невдачі. Повідомлення " -"про помилку: %(error)s" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" -"IPA не керує зоною %(zone)s. Будь ласка, додайте запис на вашому сервері DNS " -"вручну" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" -"Спроба автоматичного оновлення записів системи DNS зазнала невдачі. Будь " -"ласка, повторно запустіть оновлення записів системи вручну, щоб отримати " -"список пропущених записів." - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" -"Для застосування змін у налаштуваннях службу %(service)s на сервері IPA " -"%(server)s слід перезапустити." - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" -"Немає серверів DNS на місці IPA %(location)s. Без серверів DNS місце не " -"працюватиме як слід." - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "%(subject)s: помилкове форматування сертифіката. %(reason)s" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" -"Запис вузла було додано, але спроба оновлення DNS зазнала невдачі: %(reason)s" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "Сертифікат %(ca)s на цьому сервері не доступний." +msgid "Exceeded number of tries to forward a request." +msgstr "Перевищено кількість спроб переспрямовування запиту." #, python-format msgid "%(count)d variables" @@ -17336,6 +17147,139 @@ msgstr "Застарілі параметри" msgid "No file to read" msgstr "Немає файла для читання" +msgid "incorrect type" +msgstr "помилковий тип" + +msgid "Only one value is allowed" +msgstr "Можна використовувати лише одне значення" + +msgid "this option is deprecated" +msgstr "цей параметр вважається застарілим" + +msgid "must be True or False" +msgstr "має дорівнювати True або False" + +msgid "must be an integer" +msgstr "має бути цілим числом" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "має бути числом, не меншим за %(minvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "не може перевищувати %(maxvalue)d" + +msgid "must be a decimal number" +msgstr "має бути десятковим числом" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "має бути принаймні %(minvalue)s" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "не може перевищувати %(maxvalue)s" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" +"числовий клас «%(cls)s» не включено до списку дозволених числових класів: " +"%(allowed)s" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "має відповідати шаблону «%(pattern)s»" + +msgid "must be binary data" +msgstr "має бути бінарними даними" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "має бути розміром, не менше за %(minlength)d байтів" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "не повинне перевищувати за розміром %(maxlength)d байтів" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "має бути розміром точно у %(length)d байтів" + +msgid "must be a certificate" +msgstr "має бути сертифікатом" + +msgid "must be a certificate signing request" +msgstr "має бути запитом щодо підписування сертифіката" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" +"Помилка під час декодування запиту на підписування сертифіката (CSR): %s" + +msgid "must be Unicode text" +msgstr "має бути текстом у Unicode" + +msgid "Leading and trailing spaces are not allowed" +msgstr "Використання пробілів на початку і у кінці заборонено" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "має бути не меншим за %(minlength)d символів довжиною" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "не повинне перевищувати %(maxlength)d символів у довжину" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "має бути точно %(length)d символів у довжину" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "Не можна використовувати символ %(char)r." + +#, python-format +msgid "must be '%(value)s'" +msgstr "має бути «%(value)s»" + +#, python-format +msgid "must be one of %(values)s" +msgstr "має бути одним з таких значень: %(values)s" + +msgid "must be datetime value" +msgstr "має бути значенням дати і часу" + +msgid "does not match any of accepted formats: " +msgstr "не відповідає жодному з прийнятних форматів: " + +msgid "incomplete time value" +msgstr "неповне часове значення" + +msgid "must be DNS name" +msgstr "має бути назвою DNS" + +msgid "must be absolute" +msgstr "має бути абсолютною" + +msgid "must be relative" +msgstr "має бути відносною" + +msgid "must be dictionary" +msgstr "має бути словником" + +msgid "must be Kerberos principal" +msgstr "має бути реєстраційним записом Kerberos" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "Помилкове форматування реєстраційного запису: «%(value)s»" + +msgid "Service principal is required" +msgstr "Слід вказати реєстраційний запис служби" + msgid "A dictionary representing an LDAP entry" msgstr "Словник, що відповідає запису LDAP" @@ -17345,18 +17289,6 @@ msgstr "Список записів LDAP" msgid "All commands should at least have a result" msgstr "Виконання всіх команд має призводити до якогось результату" -msgid "Results are truncated, try a more specific search" -msgstr "" -"Список результатів обрізано. Спробуйте точніше визначити критерії пошуку." - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "Невідомий параметр: %(option)s" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" -"Версія клієнта. Використовується для визначення, якщо сервер приймає запит." - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "Клієнт %(cver)s є несумісним з сервером %(sver)s на «%(server)s»" @@ -17743,152 +17675,212 @@ msgstr "" "У лісу «%(forest)s» наявні відносини довіри з лісами %(domains)s, що не дає " "змоги встановити довіру до «%(conflict)s»" -msgid "incorrect type" -msgstr "помилковий тип" - -msgid "Only one value is allowed" -msgstr "Можна використовувати лише одне значення" - -msgid "this option is deprecated" -msgstr "цей параметр вважається застарілим" - -msgid "must be True or False" -msgstr "має дорівнювати True або False" - -msgid "must be an integer" -msgstr "має бути цілим числом" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "має бути числом, не меншим за %(minvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "не може перевищувати %(maxvalue)d" - -msgid "must be a decimal number" -msgstr "має бути десятковим числом" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "має бути принаймні %(minvalue)s" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "не може перевищувати %(maxvalue)s" +msgid "Additional instructions:" +msgstr "Додаткові настанови:" #, python-format msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" msgstr "" -"числовий клас «%(cls)s» не включено до списку дозволених числових класів: " -"%(allowed)s" +"Не було надіслано номера версії програмного інтерфейсу (API), сумісність з " +"найновішими версіями не можна гарантувати. Припускаємо таку версію API " +"сервера: %(server_version)s" -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "має відповідати шаблону «%(pattern)s»" - -msgid "must be binary data" -msgstr "має бути бінарними даними" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "має бути розміром, не менше за %(minlength)d байтів" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "не повинне перевищувати за розміром %(maxlength)d байтів" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "має бути розміром точно у %(length)d байтів" - -msgid "must be a certificate" -msgstr "має бути сертифікатом" - -msgid "must be a certificate signing request" -msgstr "має бути запитом щодо підписування сертифіката" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." msgstr "" -"Помилка під час декодування запиту на підписування сертифіката (CSR): %s" - -msgid "must be Unicode text" -msgstr "має бути текстом у Unicode" - -msgid "Leading and trailing spaces are not allowed" -msgstr "Використання пробілів на початку і у кінці заборонено" +"З виходом версії IPA 4.0 змінилася семантика засобу переспрямовування DNS.\n" +"Вам варто перейти на використання зон переспрямовування (dnsforwardzone-*).\n" +"Докладніше про це у документації." #, python-format -msgid "must be at least %(minlength)d characters" -msgstr "має бути не меншим за %(minlength)d символів довжиною" +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" +"Підтримка DNSSEC є експериментальною.\n" +"%(additional_info)s" #, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "не повинне перевищувати %(maxlength)d символів у довжину" +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "Параметр «%(option)s» є застарілим. %(additional_info)s" #, python-format -msgid "must be exactly %(length)d characters" -msgstr "має бути точно %(length)d символів у довжину" +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" +"Семантику %(label)s було змінено. %(current_behavior)s\n" +"%(hint)s" #, python-format -msgid "The character %(char)r is not allowed." -msgstr "Не можна використовувати символ %(char)r." +msgid "DNS server %(server)s: %(error)s." +msgstr "Сервер DNS %(server)s: %(error)s." #, python-format -msgid "must be '%(value)s'" -msgstr "має бути «%(value)s»" +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"На сервері DNS %(server)s не передбачено підтримки DNSSEC: %(error)s.\n" +"Якщо на серверах IPA увімкнено перевірку DNSSEC, будь ласка, вимкніть її." #, python-format -msgid "must be one of %(values)s" -msgstr "має бути одним з таких значень: %(values)s" - -msgid "must be datetime value" -msgstr "має бути значенням дати і часу" - -msgid "does not match any of accepted formats: " -msgstr "не відповідає жодному з прийнятних форматів: " - -msgid "incomplete time value" -msgstr "неповне часове значення" - -msgid "must be DNS name" -msgstr "має бути назвою DNS" - -msgid "must be absolute" -msgstr "має бути абсолютною" - -msgid "must be relative" -msgstr "має бути відносною" - -msgid "must be dictionary" -msgstr "має бути словником" - -msgid "must be Kerberos principal" -msgstr "має бути реєстраційним записом Kerberos" +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" +"зона переспрямовування «%(fwzone)s» не є ефективною, оскільки не вказано " +"належного делегування NS у основній зоні «%(authzone)s». Будь ласка, додайте " +"запис NS «%(ns_rec)s» до батьківської зони «%(authzone)s»." #, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "Помилкове форматування реєстраційного запису: «%(value)s»" - -msgid "Service principal is required" -msgstr "Слід вказати реєстраційний запис служби" +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"На сервері DNS %(server)s не передбачено підтримки EDNS0 (RFC 6891): " +"%(error)s.\n" +"Якщо на серверах IPA увімкнено перевірку DNSSEC, будь ласка, вимкніть її." #, python-format -msgid "%(filename)s: file not found" -msgstr "%(filename)s: файл не знайдено" +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" +"Не пройдено перевірку DNSSEC: %(error)s.\n" +"Будь ласка, перевірте, чи правильно вказано налаштування DNSSEC, або " +"вимкніть перевірку DNSSEC на усіх серверах IPA." -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "Не вдалося обробити параметр {item}" +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" +"Не вдалося створити запис TXT _kerberos з домену %(domain)s (%(error)s).\n" +"Причиною може бути те, що зона не є керованою IPA. Будь ласка, створіть " +"запис вручну так, щоб він містив таке значення: «%(realm)s»" -msgid "any of the configured servers" -msgstr "будь-який з налаштованих серверів" +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" +"Не вдалося вилучити запис TXT _kerberos з домену %(domain)s (%(error)s).\n" +"Причиною може бути те, що зона не є керованою IPA. Будь ласка, вилучіть " +"запис вручну." -msgid "Exceeded number of tries to forward a request." -msgstr "Перевищено кількість спроб переспрямовування запиту." +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" +"Не встановлено основного ключа DNSSEC. Підписування у зоні DNSSEC не " +"працюватиме, доки не буде встановлено основний ключ DNSSEC." + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" +"Назва відносного запису «%(record)s» містить як суфікс назву зони " +"«%(zone)s», що дає повну назву домену «%(fqdn)s». Зазвичай, такі назви є " +"помилковими, спричиненими пропущеною крапкою наприкінці специфікації назви." + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "«%(command)s» вважається застарілою. %(additional_info)s" + +#, python-format +msgid "%(line)s" +msgstr "%(line)s" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "Результат пошуку обрізано: %(reason)s" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" +"Довіру до %(domain)s втрачено. Будь ласка, відновіть її за допомогою команди " +"«ipa trust-add»." + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "Записи DNS вузла %(host)s не вдалося вилучити. (%(reason)s)" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" +"Правила переспрямовування конфліктують із деякими автоматично порожніми " +"зонами. Запити для зон, вказаних на основі RFC 6303, ігноруватимуть " +"переспрямовування і завжди призводитимуть до відповідей NXDOMAIN. Щоб " +"перевизначити цю поведінку, скористайтеся правилами переспрямовування «only»." + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" +"Спроба оновлення запису системи «%(record)s» зазнала невдачі. Повідомлення " +"про помилку: %(error)s" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" +"IPA не керує зоною %(zone)s. Будь ласка, додайте запис на вашому сервері DNS " +"вручну" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" +"Спроба автоматичного оновлення записів системи DNS зазнала невдачі. Будь " +"ласка, повторно запустіть оновлення записів системи вручну, щоб отримати " +"список пропущених записів." + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" +"Для застосування змін у налаштуваннях службу %(service)s на сервері IPA " +"%(server)s слід перезапустити." + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" +"Немає серверів DNS на місці IPA %(location)s. Без серверів DNS місце не " +"працюватиме як слід." + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "%(subject)s: помилкове форматування сертифіката. %(reason)s" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" +"Запис вузла було додано, але спроба оновлення DNS зазнала невдачі: %(reason)s" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "Сертифікат %(ca)s на цьому сервері не доступний." msgid "Filename is empty" msgstr "Порожня назва файла" @@ -17998,6 +17990,18 @@ msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" "область або суфікс UPN перекриваються із простором назв довіреного домену" +#, python-format +msgid "%(filename)s: file not found" +msgstr "%(filename)s: файл не знайдено" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "Не вдалося обробити параметр {item}" + +#, python-format +msgid "objectclass %s not found" +msgstr "клас об’єктів %s не знайдено" + #, python-format msgid "Retrieving CA cert chain failed: %s" msgstr "Спроба отримання ланцюжка сертифікації CA зазнала невдачі: %s" @@ -18015,10 +18019,6 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "Спроба отримання стану CA зазнала невдачі, стан %d" -#, python-format -msgid "objectclass %s not found" -msgstr "клас об’єктів %s не знайдено" - #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "Не вдалося обмінятися даними з CMS (стан %d)" @@ -18156,172 +18156,12 @@ msgstr[0] "встановлено відповідність %(count)d ключ msgstr[1] "встановлено відповідність %(count)d ключі автоматичного монтування" msgstr[2] "встановлено відповідність %(count)d ключів автоматичного монтування" +#, python-format msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" -"\n" -"Керування профілями сертифікатів\n" -"\n" -"Профілі сертифікатів використовуються службами сертифікації (CA) під час\n" -"підписування сертифікатів для визначення того, чи є прийнятним запит на\n" -"підписування сертифіката (CSR), і, якщо це так, визначення можливостей\n" -"і розширень, які буде надано сертифікатом.\n" -"\n" -"Форматом профілю сертифікатів є список значень, які може обробляти\n" -"Dogtag або система сертифікації служби сертифікації Red Hat.\n" -"\n" -"СИНТАКСИС ІДЕНТИФІКАТОРА ПРОФІЛЮ:\n" -"\n" -"Ідентифікатор профілю — рядок без пробілів і символів пунктуації,\n" -"що починається з літери і складається з послідовності літер, цифр, та " -"символів підкреслювання («_»).\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Імпортувати профіль, у якому не зберігатимуться видані сертифікати:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --summary \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Вилучити профіль сертифікатів:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Показати дані щодо профілю:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Зберегти налаштування профілю до файла:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Шукати профілі, у яких не зберігаються сертифікати:\n" -" ipa certprofile-find --store=false\n" -"\n" -"ФОРМАТ НАЛАШТУВАНЬ ПРОФІЛЮ:\n" -"\n" -"Налаштування профілю зберігаються у вигляді простого списку\n" -"властивостей, що використовується системою сертифікації Dogtag.\n" -"Підтримки формату XML не передбачено.\n" -"\n" -"Профілів, які керуються IPA, стосуються такі обмеження:\n" -"\n" -"- Під час імпортування профілю поле «profileId», якщо таке є, має\n" -" містити значення, що збігається з ідентифікатором, вказаним у рядку " -"команди.\n" -"\n" -"- Значенням поля «classId» має бути «caEnrollImpl»\n" -"\n" -"- Значенням поля «auth.instance_id» має бути «raCertAuth»\n" -"\n" -"- Має бути використано вхідний клас «certReqInputImpl» і вихідний\n" -" клас «certOutputImpl».\n" -"\n" - -msgid "CA is not configured" -msgstr "CA не налаштовано" - -msgid "invalid Profile ID" -msgstr "некоректний ідентифікатор профілю" - -msgid "Certificate Profile" -msgstr "Профіль сертифікатів" - -msgid "Certificate Profiles" -msgstr "Профілі сертифікатів" - -msgid "Profile configuration" -msgstr "Налаштування профілю" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "встановлено відповідність %(count)d профілю" -msgstr[1] "встановлено відповідність %(count)d профілів" -msgstr[2] "встановлено відповідність %(count)d профілів" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "Імпортовано профіль «%(value)s»" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "У даних профілю profileId вказано декілька разів: %(values)s" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" -"Ідентифікатор профілю, «%(cli_value)s», не збігається із вказаним у даних " -"профілю, «%(file_value)s»" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Вилучено профіль «%(value)s»" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "Стандартний профіль «%(profile_id)s» не може бути вилучено" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "Змінено профіль сертифікатів «%(value)s»" - -msgid "Certificate profiles cannot be renamed" -msgstr "Профілі сертифікатів не можна перейменовувати" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "Недостатні права доступу для внесення змін до профілю сертифікації." +"Недостатні привілеї «write» до атрибута «krbLastPwdChange» запису «%s»." msgid "" "\n" @@ -18617,26 +18457,5739 @@ msgstr "Вилучено %i." msgid "%i CAs removed." msgstr "Вилучено %i CA." +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" +"\n" +"Правило автоматичної участі.\n" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" +"\n" +"Внесіть ясність у правила участі вузлів та користувачів налаштовуванням\n" +"формальних виразів шаблонів включення або виключення. Ви можете автоматично\n" +"пов’язувати нові записи з групою або групою вузлів на основі даних щодо " +"атрибутів.\n" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" +"\n" +"Правило безпосередньо пов’язується з групою за назвою, отже ви не можете\n" +"створити правило без визначення групи або групи вузлів.\n" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" +"\n" +"Умова є формальним виразом, використовується 389-ds для встановлення\n" +"відповідності нового вхідного запису з правилом автоматичної участі.\n" +"Якщо умові відповідає правило включення, запис додається до відповідної\n" +"групи або групи вузлів.\n" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" +"\n" +"Можна визначити типову групу або групу вузлів, яку буде використано для\n" +"записів, які не відповідають жодному правилу. У випадку записів " +"користувачів\n" +"ця група буде резервною групою, оскільки усіх користувачі типово є " +"учасниками\n" +"групи, вказаної у налаштуваннях IPA.\n" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" +"\n" +"За допомогою програми automember-rebuild ви можете повторно застосувати " +"правила\n" +"автоматичної участі до вже створених записів, тобто перебудувати схему " +"участі.\n" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" +"\n" +" Додати початкову групу або групу вузлів:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" +"\n" +" Додати початкове правило:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" +"\n" +" Додати умову до правила:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" +"\n" +" Додати умову виключення до правила для запобігання автоматичному " +"пов’язуванню:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" +"\n" +" Додати вузол:\n" +" ipa host-add web1.example.com\n" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" +"\n" +" Додати запис користувача:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" +"\n" +" Перевірити правила автоматичної участі:\n" +" ipa hostgroup-show webservers\n" +" Група вузлів: webservers\n" +" Опис: Web Servers\n" +" Вузли-учасники: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Назва групи: devel\n" +" Опис: Developers\n" +" GID: 1004200000\n" +" Користувачі-учасники: tuser\n" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" +"\n" +" Вилучити умову з правила:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" +"\n" +" Змінити правило автоматичної участі:\n" +" ipa automember-mod\n" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" +"\n" +" Встановити типову (резервну) групу призначення:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" +"\n" +" Вилучити типову (резервну) групу призначення:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" +"\n" +" Показати типову (резервну) групу призначення:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" +"\n" +" Знайти усіх правила автоматичної участі:\n" +" ipa automember-find\n" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" +"\n" +" Знайти усі осиротілі правила автоматичної участі:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Знайти усі осиротілі правила автоматичної участі і вилучити їх:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" +"\n" +" Показати правило автоматичної участі:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" +"\n" +" Вилучити правило автоматичної участі:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" +"\n" +" Перебудувати записи участі для усіх користувачів:\n" +" ipa automember-rebuild --type=group\n" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" +"\n" +" Перебудувати записи участі для усіх вузлів:\n" +" ipa automember-rebuild --type=hostgroup\n" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" +"\n" +" Перебудувати записи участі для вказаних користувачів:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" +"\n" +" Перебудувати записи участі для вказаних вузлів:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" + +msgid "Auto Membership Rule" +msgstr "Правило автоматичної участі" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(otype)s «%(oname)s» не знайдено" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "%s не є коректним атрибутом." + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" +"\n" +" Додати правило автоматичної участі.\n" +" " + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "Додано правило автоматичної участі «%(value)s»" + +msgid "Auto Membership is not configured" +msgstr "Автоматичну участь не налаштовано" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" +"\n" +" Додати умови до правила автоматичної участі.\n" +" " + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Додано умови до «%(value)s»" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "Правило автоматичної участі: %s не знайдено!" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" +"\n" +" Перевизначення з метою додавання у повернуте повідомлення даних щодо " +"успіху чи невдачі.\n" +" " + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" +"\n" +" Вилучити умови з правила автоматичної участі.\n" +" " + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Вилучено умови з «%(value)s»" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" +"\n" +" Перевизначення з метою встановлення станів успіху та невдачі.\n" +" " + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" +"\n" +" Змінити правило автоматичної участі.\n" +" " + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "Змінено правило автоматичної участі «%(value)s»" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" +"\n" +" Вилучити правило автоматичної участі.\n" +" " + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Вилучено правило автоматичної участі «%(value)s»" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" +"\n" +" Шукати правила автоматичної участі.\n" +" " + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "встановлено відповідність %(count)d правила" +msgstr[1] "встановлено відповідність %(count)d правил" +msgstr[2] "встановлено відповідність %(count)d правил" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" +"\n" +" Показати дані щодо правила автоматичної участі.\n" +" " + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" +"\n" +" Встановити типову (резервну) групу для невідповідних записів.\n" +" " + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "Встановити типову (резервну) групу для автоматичної участі «%(value)s»" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" +"\n" +" Вилучити типову (резервну) групу для невідповідних записів.\n" +" " + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "Вилучити типову (резервну) групу для автоматичної участі «%(value)s»" + +msgid "No default (fallback) group set" +msgstr "Не встановлено типової (резервної) групи" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" +"\n" +" Показати дані щодо типових (резервних) груп автоматичної участі.\n" +" " + +msgid "Task DN" +msgstr "DN завдання" + +msgid "DN of the started task" +msgstr "DN запущеного завдання" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "має бути вказано принаймні один з варіантів: тип, користувачі чи вузли" + +msgid "users and hosts cannot both be set" +msgstr "не можна одночасно вказувати користувачів і вузли" + +msgid "hosts cannot be set when type is 'group'" +msgstr "не можна вказувати вузли, якщо типом є «group»" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "не можна вказувати користувачів, якщо типом є «hostgroup»" + +msgid "Automember rebuild membership task started" +msgstr "Виконується завдання з перебудови записів автоматичної участі" + +msgid "Automember rebuild membership task completed" +msgstr "Завдання з перезбирання правил автоматичної участі виконано" + +#, python-format +msgid "Task DN = '%s'" +msgstr "DN завдання = «%s»" + +msgid "Automember" +msgstr "Автоматична участь" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" +"\n" +" Виконати пошук осиротілих правил автоматичної участі. Можливо, команду\n" +" слід запускати від імені привілейованого користувача, щоб отримати усі " +"правила.\n" +" " + +msgid "Remove orphan automember rules" +msgstr "Вилучити осиротілі правила автоматичної участі" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" +"\n" +"Групи користувачів\n" +"\n" +"Керування групами користувачів, групами або службами. Типово нові групи є " +"групами POSIX. Ви можете\n" +"додати параметр --nonposix до команди group-add з метою позначення нової\n" +"групи як групи не-POSIX. Ви можете скористатися аргументом --posix команди " +"group-mod\n" +"для перетворення групи не-POSIX на групу POSIX. Групи POSIX не можна\n" +"перетворювати на групи не-POSIX.\n" +"\n" +"Кожна група повинна мати опис.\n" +"\n" +"Групи POSIX повинні мати номер ідентифікатора групи (GID). Передбачено " +"підтримку\n" +"зміни GID, але ця зміна може вплинути на права доступу до ваших файлів. Для\n" +"створення групи слід вказати GID. IPA створить одну групу автоматично, якщо\n" +"таку не вказано.\n" +"\n" +"\n" +"Учасниками груп можуть бути користувачі, інші групи і служби Kerberos. У\n" +"середовищах POSIX як учасників груп можна бути бачити лише користувачів, " +"але\n" +"для керування у межах IPA може бути використано вкладені групи і групи\n" +"служб.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додавання нової групи:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Додавання нової групи не-POSIX:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Перетворити групу не-POSIX на групу posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Додати нову групу POSIX з вказаним ідентифікатором групи:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Додати нову групу POSIX і надати IPA змогу призначити ідентифікатор:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Вилучення групи:\n" +" ipa group-del unixadmins\n" +"\n" +" Додати групу \"remoteadmins\" до групи \"localadmins\":\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Додати список користувачів до групи \"localadmins\":\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Додавання служб Kerberos до групи «printer admins»:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Вилучення користувача з групи \"localadmins\":\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Показати інформацію щодо іменованої групи.\n" +" ipa group-show localadmins\n" +"\n" +"Керівниками учасників груп є користувачі або групи, які можуть додавати " +"учасників\n" +"до групи або вилучати учасників з групи.\n" +"\n" +" Дозволити користувачу «test2» додавати або вилучати учасників з групи " +"«localadmins»:\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Відкликати права керування учасниками для користувача «test2» з " +"«localadmins»:\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"Участь із зовнішніх груп створено для того, щоб уможливити прив’язку\n" +"користувачів з довірених доменів до локальних груп POSIX з метою\n" +"використання ресурсів IPA. Зовнішніх користувачів слід додавати до груп\n" +"які спеціально створено як зовнішні або групи не-POSIX. Таку групу\n" +"слід пізніше включити до одної з груп POSIX.\n" +"\n" +"У поточній версії учасник зовнішньої групи є ідентифікатором безпеки\n" +"(Security Identifier або SID) визначеним довіреним доменом. Додавання\n" +"учасників зовнішньої групи можна виконати у форматі SID, DOM\\ім’я або\n" +"ім’я@домен. IPA намагатиметься визначити за переданим іменем SID за\n" +"допомогою використання Загального каталогу довіреного домену.\n" +"\n" +"Приклад:\n" +"\n" +"1. Створити групу для прив’язки адміністраторів довіреного домену до\n" +"відповідної локальної групи POSIX:\n" +"\n" +" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc='<домен.ad> admins' ad_admins\n" +"\n" +"2. Додати ідентифікатор Domain Admins домену <домен.ad> до\n" +"групи ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Дозволити прив’язку групи ad_admins_external до групи POSIX ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Показати список зовнішніх учасників групи ad_admins_external, щоб " +"визначити\n" +"їхні SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" + +msgid "groups" +msgstr "групи" + +msgid "User Group" +msgstr "Група користувачів" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Додано групу «%(value)s»" + +msgid "gid cannot be set for external group" +msgstr "Не можна встановлювати gid для зовнішньої групи" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Вилучено групу «%(value)s»" + +msgid "privileged group" +msgstr "привілейована група" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Змінено групу «%(value)s»" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "встановлено відповідність %(count)d групи" +msgstr[1] "встановлено відповідність %(count)d груп" +msgstr[2] "встановлено відповідність %(count)d груп" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Виконати дію з перевірки зовнішніх учасників без встановленої підтримки " +"Samba 4 неможливо. Переконайтеся, що вами встановлено на сервері підпакунок " +"IPA server-trust-ad." + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Без налаштовування власного домену не можна виконувати дію з приєднання. " +"Спочатку запустіть ipa-adtrust-install на сервері IPA." + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Від’єднати групу «%(value)s» від користувача «%(value)s»" + +msgid "not allowed to modify user entries" +msgstr "заборонено змінювати записи користувачів" + +msgid "not allowed to modify group entries" +msgstr "заборонено змінювати записи груп" + +msgid "Not a managed group" +msgstr "Не є керованою групою" + +msgid "Add users that can manage members of this group." +msgstr "Додати записи користувачів, які можуть керувати учасниками цієї групи." + +msgid "Remove users that can manage members of this group." +msgstr "" +"Вилучити записи користувачів, які можуть керувати учасниками цієї групи." + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" +"\n" +"Налаштування сервера DNS\n" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" +"\n" +"Керування налаштуваннями сервера DNS\n" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" +"\n" +" Показати налаштування певного сервера DNS:\n" +" ipa dnsserver-show\n" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" +"\n" +" Оновити налаштування для вказаного сервера DNS:\n" +" ipa dnsserver-mod\n" + +msgid "DNS server" +msgstr "Сервер DNS" + +msgid "DNS servers" +msgstr "Сервери DNS" + +msgid "DNS Servers" +msgstr "Сервери DNS" + +msgid "DNS Server" +msgstr "Сервер DNS" + +msgid "DNS Server name" +msgstr "Назва сервера DNS" + +msgid "SOA mname override" +msgstr "Перевизначення mname SOA" + +msgid "SOA mname (authoritative server) override" +msgstr "Перевизначити mname SOA (довірений сервер)" + +msgid "Forwarders" +msgstr "Переспрямовувачі" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Окремі переспрямовувачі для серверів. Нетиповий порт можна вказати для " +"кожного переспрямовувача за допомогою стандартної конструкції «IP_АДРЕСА " +"port ПОРТ»" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" +"Умовні правила переспрямування для окремого сервера. Встановіть значення " +"«none» для вимикання переспрямовувача загального рівня для цієї зони. Якщо " +"ви встановите це значення, умовні переспрямовувачі зони не братимуться до " +"уваги." + +msgid "DNS is not configured" +msgstr "DNS не налаштовано" + +msgid "Modify DNS server configuration" +msgstr "Змінити налаштування сервера DNS" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "Змінено запис сервера DNS «%(value)s»" + +msgid "Search for DNS servers." +msgstr "Шукати сервери DNS." + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "встановлено відповідність %(count)d сервера DNS" +msgstr[1] "встановлено відповідність %(count)d серверів DNS" +msgstr[2] "встановлено відповідність %(count)d серверів DNS" + +msgid "IPA DNS Server is not installed" +msgstr "Сервер DNS IPA не встановлено" + +msgid "Display configuration of a DNS server." +msgstr "Показати налаштування сервера DNS." + +msgid "Add a new DNS server." +msgstr "Додати новий запис сервера DNS." + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "Додано новий запис сервера DNS «%(value)s»" + +msgid "Delete a DNS server" +msgstr "Вилучити запис сервера DNS" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Вилучено сервер DNS «%(value)s»" + +msgid "Host-based access control commands" +msgstr "Команди керування доступом на основі вузлів" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" +"\n" +"Служби HBAC\n" +"\n" +"Служби PAM, якими може керувати HBAC. Назва, використана тут, має\n" +"відповідати назві служби, з якою працює PAM.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нову службу HBAC:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Змінити вже створену службу HBAC:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Шукати служби HBAC. У нашому прикладі буде повернуто два результати\n" +" службу FTP і щойно додану службу tftp:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Вилучення служби HBAC:\n" +" ipa hbacsvc-del tftp\n" +"\n" + +msgid "HBAC services" +msgstr "Служби HBAC" + +msgid "HBAC Services" +msgstr "Служби HBAC" + +msgid "HBAC Service" +msgstr "Служба HBAC" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "Додано службу HBAC «%(value)s»" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Вилучено службу HBAC «%(value)s»" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "Змінено службу HBAC «%(value)s»" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "встановлено відповідність %(count)d служби HBAC" +msgstr[1] "встановлено відповідність %(count)d служб HBAC" +msgstr[2] "встановлено відповідність %(count)d служб HBAC" + +msgid "HBAC service group" +msgstr "група служб HBAC" + +msgid "HBAC service groups" +msgstr "Група служб HBAC" + +msgid "HBAC Service Groups" +msgstr "Група служб HBAC" + +msgid "HBAC Service Group" +msgstr "Група служб HBAC" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Додано групу служб HBAC «%(value)s»" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "Вилучено групу служб HBAC «%(value)s»" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "Змінено групу служб HBAC «%(value)s»" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "встановлено відповідність %(count)d групи служб HBAC" +msgstr[1] "встановлено відповідність %(count)d груп служб HBAC" +msgstr[2] "встановлено відповідність %(count)d груп служб HBAC" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" +"\n" +"Основний користувач\n" +"\n" +"Містить загальні визначення щодо користувача або користувача етапу.\n" + +msgid "must be TRUE or FALSE" +msgstr "має дорівнювати TRUE або FALSE" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" +"Немає класу об'єктів ipaNTUserAttrs. Через це запис користувача не може " +"містити атрибутів SMB." + +msgid "Principal alias" +msgstr "Псевдонім реєстраційного запису" + +msgid "User password expiration" +msgstr "Вичерпання строку дії пароля користувача" + +msgid "SSH public key fingerprint" +msgstr "Відбиток відкритого ключа SSH" + +msgid "Base-64 encoded user certificate" +msgstr "Сертифікат користувача у кодуванні Base-64" + +msgid "Certificate mapping data" +msgstr "Дані прив’язки сертифіката" + +msgid "SMB logon script path" +msgstr "Шлях до скрипту входу до SMB" + +msgid "SMB profile path" +msgstr "Шлях до профілю SMB" + +msgid "SMB Home Directory" +msgstr "Домашній каталог SMB" + +msgid "SMB Home Directory Drive" +msgstr "Диск домашнього каталогу SMB" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "некоректний формат адреси електронної пошти: %(email)s" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "керування %(manager)s не знайдено" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "не повинне перевищувати %(len)d символів у довжину" + +msgid "Issuer" +msgstr "Видавець" + +msgid "Issuer of the certificate" +msgstr "Видавець сертифіката" + +msgid "Subject" +msgstr "Об’єкт" + +msgid "Subject of the certificate" +msgstr "Призначення сертифіката" + +msgid "cannot have an empty subject" +msgstr "поле призначення не може бути порожнім" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "не можна вказувати одночасно subject/issuer і certificate" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "не можна вказувати одночасно subject/issuer і ipacertmapdata" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "Додати одну або декілька прив’язок сертифікатів до запису користувача." + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "Додано прив’язки сертифікатів до запису користувача «%(value)s»" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" +"Вилучити одну або декілька прив’язок сертифікатів із запису користувача." + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "Вилучено прив’язки сертифікатів до запису користувача «%(value)s»" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" +"\n" +"Додаток для виконання декількох викликів ipa за допомогою одного віддаленого " +"виклику процедури\n" +"\n" +"Щоб запустити цей код на легкому сервері, віддайте такі команди:\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"де у файлі batch_request.json міститься десь такий код:\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"Формат відповіді має бути розподілений за рівнями вкладеності у подібний же " +"спосіб. На початку ви побачите таке:\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"а далі буде вкладена відповідь для кожного методу команди IPA, який було " +"надіслано у запиті\n" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" +"Виконати декілька викликів ipa за допомогою одного віддаленого виклику " +"процедури" + +msgid "must contain a tuple (list, dict)" +msgstr "має містити кортеж (список, словник)" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "{role}: такої ролі не знайдено" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "{attr}: немає такого атрибута" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" +"\n" +"Топологія\n" +"\n" +"Керування топологією реплікації на домені рівня 1.\n" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" +"\n" +"Дані сервера IPA зберігаються на сервері LDAP у двох суфіксах:\n" +"* суфіксі домену, наприклад «dc=example,dc=com», тут містяться усі пов’язані " +"із доменом дані\n" +"* суфіксі ca, «o=ipaca», наявні лише на серверах із встановленим CA. Тут\n" +" містяться дані для компонента сервера сертифікатів.\n" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" +"\n" +"Дані, що зберігаються на серверах IPA, відтворюються на інших серверах IPA. " +"Спосіб\n" +"відтворення (реплікації) визначається угодами. Угоди реплікації потрібно\n" +"встановлювати для обох суфіксів окремо. На рівні домену 0 угодами керують\n" +"програми ipa-replica-manage та ipa-csreplica-manage. На рівні доменів 1\n" +"керування виконується централізовано за допомогою команд «ipa topology*».\n" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" +"\n" +"Угоди представляються сегментами топології. Типово, сегмент топології\n" +"представляється 2 угодами реплікації — по одній для кожного напрямку, " +"наприклад\n" +"від A до B і від B до A. Створення односпрямованих сегментів заборонене.\n" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" +"\n" +"Щоб перевірити, що жоден сервер не від’єднано у топології вказаного " +"суфікса,\n" +"скористайтеся такою командою:\n" +" ipa topologysuffix-verify $suffix\n" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +"\n" +"Приклади:\n" +" Знайти усі сервери IPA:\n" +" ipa server-find\n" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" +"\n" +" Знайти усі суфікси:\n" +" ipa topologysuffix-find\n" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" +"\n" +" Додати сегмент топології до суфікса «domain»:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" +"\n" +" Додати сегмент топології до суфікса «ca»:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" +"\n" +" Вивести список усіх сегментів топології у суфіксі «domain»:\n" +" ipa topologysegment-find domain\n" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" +"\n" +" Вивести список усіх сегментів топології у суфіксі «ca»:\n" +" ipa topologysegment-find ca\n" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" +"\n" +" Вилучити сегмент топології у суфіксі «domain»:\n" +" ipa topologysegment-del domain segment_name\n" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" +"\n" +" Вилучити сегмент топології у суфіксі «ca»:\n" +" ipa topologysegment-del ca segment_name\n" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" +"\n" +" Перевірити топологію суфікса «domain»:\n" +" ipa topologysuffix-verify domain\n" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" +"\n" +" Перевірити топологію суфікса «ca»:\n" +" ipa topologysuffix-verify ca\n" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "Керування топологією потребує мінімального рівня домену {0} " + +msgid "segment" +msgstr "сегмент" + +msgid "segments" +msgstr "сегменти" + +msgid "Topology Segments" +msgstr "Сегменти топології" + +msgid "Topology Segment" +msgstr "Сегмент топології" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "лівий вузол не є вузлом топології: %(leftnode)s" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "правий вузол не є вузлом топології: %(rightnode)s" + +msgid "left node and right node must not be the same" +msgstr "лівий і правий вузли повинні бути різними вузлами" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "у лівому вузлі ({host}) не передбачено підтримки суфіксів «{suff}»" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "у правому вузлі ({host}) не передбачено підтримки суфіксів «{suff}»" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "встановлено відповідність %(count)d сегмента" +msgstr[1] "встановлено відповідність %(count)d сегментів" +msgstr[2] "встановлено відповідність %(count)d сегментів" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "Додано сегмент «%(value)s»" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "Вилучено сегмент «%(value)s»" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "Змінено сегмент «%(value)s»" + +#, python-format +msgid "%(value)s" +msgstr "%(value)s" + +msgid "left or right node has to be specified" +msgstr "слід вказати лівий або правий вузол" + +msgid "only one node can be specified" +msgstr "можна вказувати лише один вузол" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "Оновлення реплікації для сегмента: надіслано запит щодо «%(pkey)s»." + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "Зупиняємо реплікацію для сегмента: надіслано запит щодо «%(pkey)s»." + +msgid "suffixes" +msgstr "суфікси" + +msgid "Topology suffixes" +msgstr "Суфікси топології" + +msgid "Topology suffix" +msgstr "Суфікс топології" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "встановлено відповідність %(count)d суфікса топології" +msgstr[1] "встановлено відповідність %(count)d суфіксів топології" +msgstr[2] "встановлено відповідність %(count)d суфіксів топології" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Вилучено суфікс топології «%(value)s»" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "Додано суфікс топології «%(value)s»" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Змінено суфікс топології «%(value)s»" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" +"\n" +"Перевірити топологію реплікації для вказаного суфікса.\n" +"\n" +"Перевірки, які виконуються:\n" +" 1. перевірка того, чи не є топологія від’єднаною. Іншими словами, чи є\n" +" шляхи реплікації між усіма серверами.\n" +" 2. перевірка того, чи немає у сервера перевищення рекомендованої\n" +" кількості узгоджень реплікації.\n" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" +"\n" +"Перехід на IPA\n" +"\n" +"Перенесення користувачів і груп з сервера LDAP на IPA.\n" +"\n" +"Надсилає запит LDAP до віддаленого сервера з метою пошуку користувачів\n" +"і груп у контейнері. З метою перенесення паролів вам слід прив’язатися\n" +"до сервера від імені користувача, який може читати атрибут userPassword\n" +"на сервері. Перелік таких користувачів зазвичай обмежено адміністраторами\n" +"вищого рівня, зокрема cn=Directory Manager на 389-ds (типовий користувач\n" +"bind).\n" +"\n" +"Типовим контейнером користувачів є ou=People.\n" +"\n" +"Типовим контейнером груп є ou=Groups.\n" +"\n" +"Записи користувачів і груп, які вже створено на сервері IPA буде\n" +"пропущено.\n" +"\n" +"Дві схеми LDAP визначають спосіб зберігання записів учасників групи:\n" +"RFC2307 і RFC2307bis. RFC2307bis використовує атрибути member і\n" +"uniquemember для визначення учасників групи, RFC2307 використовує\n" +"memberUid. Типовою є схема RFC2307bis.\n" +"\n" +"За допомогою додатка compat IPA може повторно форматувати дані для систем,\n" +"де не передбачено підтримки RFC2307bis. Рекомендується вимикати цей додаток\n" +"під час перенесення, щоб зменшити навантаження на систему. Ви зможете\n" +"увімкнути його після перенесення. Щоб перенести дані з увімкненим додатком\n" +"скористайтеся параметром «--with-compat».\n" +"\n" +"Перенесені користувачі не матимуть реєстраційних записів Kerberos,\n" +"перенесено буде лише пароль LDAP. Щоб завершити процес перенесення,\n" +"користувачам слід відкрити сторінку\n" +"http://ipa.example.com/ipa/migration і пройти розпізнавання за\n" +"допомогою пароля LDAP з метою створення запису реєстраційних даних\n" +"Kerberos.\n" +"\n" +"Типово перенесення вимкнено. Для його вмикання скористайтеся командою\n" +"ipa config-mod:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"Якщо основний DN не буде надано за допомогою --basedn, IPA " +"використовуватиме\n" +"значення defaultNamingContext, якщо його встановлено, або перше значення у\n" +"наборі namingContexts у кореневій теці віддаленого сервера LDAP.\n" +"\n" +"Записи користувачів додають до типової групи користувачів. Процес такого\n" +"додавання може бути доволі тривалим, отже під час перенесення він " +"виконується\n" +"у пакетному режимі, пакетами по 100 користувачів. У результаті буде певний\n" +"період, коли записи користувачів вже буде додано до IPA, але ці користувачі\n" +"ще не будуть учасниками типової групи користувачів.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Найпростіше перенесення з типовими параметрами:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Визначення контейнерів користувача і групи. Можна скористатися для\n" +" перенесення даних користувача і групи з сервера IPA версії 1:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Оскільки на сервері IPA версії 2 вже передбачено попередньо\n" +" визначені групи, які можуть збігатися з групами, які переносяться з\n" +" сервера (IPA версії 1), наприклад admins, ipausers, користувачів з\n" +" таких груп може бути перенесено до невідомої (unknown) групи на\n" +" новому сервері IPA версії 2.\n" +" Скористайтеся параметром --group-overwrite-gid для перезапису\n" +" ідентифікатора групи вже створених груп для запобігання цій\n" +" незручності:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Перенесені дані користувачів та груп можуть містити класи об’єктів та " +"супутні\n" +" атрибути, невідомі серверу IPA версії 2. Ці класти об’єктів та атрибутів\n" +" може бути виключено з процедури перенесення даних:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"ВЕДЕННЯ ЖУРНАЛУ\n" +"\n" +"Під час перенесення повідомлення з попередженнями та записами помилок\n" +"додаватимуться до журналу помилок Apache. З відповідним файлом слід\n" +"ознайомитися після завершення перенесення для виправлення та виявлення\n" +"помилок, які могли статися.\n" +"\n" +"Для кожного пакета зі 100 перенесених записів користувачів буде показано\n" +"інформаційне повідомлення, призначене для оцінки поступу обробки та\n" +"визначення її тривалості.\n" +"\n" +"Якщо визначено рівень ведення журналу debug за допомогою встановлення\n" +"debug = True у /etc/ipa/default.conf або у /etc/ipa/server.conf,\n" +"для кожного перенесеного запису додаватиметься власний запис, також\n" +"додаватиметься резюме щодо кожного оновлення типової групи\n" +"користувачів.\n" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" +"Реєстраційний запис Kerberos %s вже існує. Скористайтеся командою «ipa user-" +"mod», щоб встановити його параметри вручну." + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" +"Не вдалося визначити, чи існує вже реєстраційний запис Kerberos %s. " +"Скористайтеся командою «ipa user-mod», щоб встановити його параметри вручну." + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" +"Не вдалося додати користувача до типової групи. Додати користувача вручну " +"можна за допомогою команди «ipa group-add-member»." + +msgid "Migration of LDAP search reference is not supported." +msgstr "Підтримки перенесення посилання пошуку LDAP не передбачено." + +msgid "Malformed DN" +msgstr "Помилкове форматування DN" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "%(user)s не є користувачем з групи POSIX" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" +". Перевірте ідентифікатор вже створеної групи. Скористайтеся параметром --" +"group-overwrite-gid для перезапису ідентифікатора групи" + +msgid "Invalid LDAP URI." +msgstr "Некоректна адреса LDAP." + +#, python-format +msgid "%s to exclude from migration" +msgstr "%s, які слід виключити з перенесення" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" +"список результатів пошуку об’єктів міграції\n" +"було обрізано сервером; ймовірно,\n" +"процес міграції не завершено\n" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" +"Пошуком LDAP у %(container)s не повернуто жодного результату (основа пошуку: " +"%(search_base)s, клас об’єктів: %(objectclass)s)" + +msgid "Default group for new users not found" +msgstr "Типової групи для нових користувачів не знайдено" + +msgid "netgroups" +msgstr "мережеві групи" + +msgid "Netgroups" +msgstr "Мережеві групи" + +msgid "Netgroup" +msgstr "Мережева група" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "Додано групу мережеву групу «%(value)s»" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"Групу вузлів з назвою «%s» вже створено. Групи вузлів і мережеві групи мають " +"спільний простір назв." + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Вилучено мережеву групу «%(value)s»" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "Змінено мережеву групу «%(value)s»" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "встановлено відповідність %(count)d групи" +msgstr[1] "встановлено відповідність %(count)d груп" +msgstr[2] "встановлено відповідність %(count)d груп" + +msgid "One time password commands" +msgstr "Команди для одноразового пароля" + +msgid "OTP configuration options" +msgstr "Параметри налаштування OTP" + +msgid "OTP Configuration" +msgstr "Налаштування OTP" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Змінити пароль «%(value)s»" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" +"\n" +"Засоби звітування щодо стану можливості PKINIT Kerberos\n" +"\n" +"Звітування щодо того, увімкнено чи вимкнено PKINIT у Kerberos на основних " +"елементах IPA\n" +"\n" +"ПРИКЛАДИ:\n" +" Вивести список станів PKINIT для усіх основних елементів:\n" +" ipa pkinit-status\n" +"\n" +" Перевірити стан PKINIT на «ipa.example.com»:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" Вивести список усіх основних елементів IPA із вимкненим PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"Докладніші дані щодо підтримки PKINIT:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" + +msgid "pkinit" +msgstr "pkinit" + +msgid "PKINIT" +msgstr "PKINIT" + +msgid "PKINIT status" +msgstr "стан PKINIT" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "Визначає, увімкнено чи вимкнено PKINIT" + +msgid "Report PKINIT status on the IPA masters" +msgstr "Звіт щодо стану PKINIT на основних елементах IPA" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "Встановлено відповідність %(count)s сервера" +msgstr[1] "Встановлено відповідність %(count)s серверів" +msgstr[2] "Встановлено відповідність %(count)s серверів" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" +"\n" +"Проксі-сервери RADIUS\n" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" +"\n" +"Керування проксі-серверами RADIUS.\n" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" +"\n" +"У IPA передбачено підтримку зовнішнього проксі-сервера RADIUS для\n" +"виконання розпізнавання OTP krb5. Це надає системі значної гнучкості\n" +"з метою інтеграції зі сторонніми службами розпізнавання.\n" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" +"\n" +" Додати новий сервер:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" +"\n" +" Знайти усі сервери, чиї запис містять рядок «example.com»:\n" +" ipa radiusproxy-find example.com\n" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" +"\n" +" Перевірити налаштування:\n" +" ipa radiusproxy-show MyRADIUS\n" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" +"\n" +" Змінити реєстраційні дані:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" +"\n" +" Вилучити налаштування:\n" +" ipa radiusproxy-del MyRADIUS\n" + +msgid "invalid attribute name" +msgstr "некоректна назва атрибута" + +msgid "invalid port number" +msgstr "некоректний номер порту" + +msgid "RADIUS proxy server" +msgstr "Проксі-сервер RADIUS" + +msgid "RADIUS proxy servers" +msgstr "Проксі-сервери RADIUS" + +msgid "RADIUS Servers" +msgstr "Сервери RADIUS" + +msgid "RADIUS Server" +msgstr "Сервер RADIUS" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "Додано проксі-сервер RADIUS «%(value)s»" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "Вилучити проксі-сервер RADIUS «%(value)s»" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "Змінено запис проксі-сервера RADIUS «%(value)s»" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "Встановлено відповідність %(count)d проксі-сервера RADIUS" +msgstr[1] "Встановлено відповідність %(count)d проксі-серверів RADIUS" +msgstr[2] "Встановлено відповідність %(count)d проксі-серверів RADIUS" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" +"неможливо додати права доступу «%(perm)s» з типом прив’язки «%(bindtype)s» " +"до привілею" + +msgid "Privilege" +msgstr "Привілей" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "Додано привілей «%(value)s»" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "Вилучено привілей «%(value)s»" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "Змінено привілей «%(value)s»" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "встановлено відповідність %(count)d привілею" +msgstr[1] "встановлено відповідність %(count)d привілеїв" +msgstr[2] "встановлено відповідність %(count)d привілеїв" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" +"Клас об'єкта служби, який використовується для прив'язування правил до груп" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" +"пріоритет повинен мати унікальне значення (%(prio)d вже використано для " +"%(gname)s)" + +msgid "Add Class of Service entry" +msgstr "Додати запис класу служби" + +msgid "Delete Class of Service entry" +msgstr "Вилучити запис класу служби" + +msgid "Modify Class of Service entry" +msgstr "Змінити запис класу служби" + +msgid "Display Class of Service entry" +msgstr "Показати запис класу служби" + +msgid "Search for Class of Service entry" +msgstr "Шукати запис класу служби" + +msgid "password policy" +msgstr "правила для паролів" + +msgid "password policies" +msgstr "правила щодо паролів" + +msgid "Password Policies" +msgstr "Правила щодо паролів" + +msgid "Password Policy" +msgstr "Правила для паролів" + +msgid "Max repeat" +msgstr "Макс. повторення" + +msgid "Maximum number of same consecutive characters" +msgstr "Максимальна кількість однакових символів поспіль" + +msgid "Max sequence" +msgstr "Макс. послідовність" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "Максимальна довжина можливої послідовності з абетки (abcd)" + +msgid "Dictionary check" +msgstr "Перевірка за словником" + +msgid "Check if the password is a dictionary word" +msgstr "Перевіряти, чи є пароль словом зі словника" + +msgid "User check" +msgstr "Перевірка на ім'я користувача" + +msgid "Check if the password contains the username" +msgstr "Перевіряти, чи не міститься у паролі ім'я користувача" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" +"Якщо визначено maxrepeat, maxsequence, dictcheck або usercheck, мінімальною " +"довжиною має бути число >= 6" + +msgid "Maximum password life must be greater than minimum." +msgstr "" +"Максимальний строк дії пароля має перевищувати мінімальний строк його дії." + +msgid "cannot delete global password policy" +msgstr "неможливо вилучити загальні правила паролів" + +msgid "priority cannot be set on global policy" +msgstr "для загальних правил не може встановлювати пріоритети" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" +"\n" +"Домени області\n" +"\n" +"Керування списком доменів, пов’язаних з областю IPA.\n" +"\n" +"Цей список є корисним для контролерів доменів з інших областей, які\n" +"мають встановити відносини довіри із цією областю IPA. Цим контролерам\n" +"потрібні дані щодо того, які запити слід переспрямовувати до KDC цієї\n" +"області IPA.\n" +"\n" +"Автоматичне керування: домен автоматично додається до списку доменів\n" +"області, коли створюється нова зона DNS, керована IPA. Те саме стосується\n" +"вилучення.\n" +"\n" +"Керована ззовні DNS: домени, які не керуються у DNS сервера IPA, має бути\n" +"вручну додано до списку за допомогою команди ipa realmdomains-mod.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Показати поточний список доменів області:\n" +" ipa realmdomains-show\n" +"\n" +" Замірити список доменів області:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Додати домен до списку доменів області:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Вилучити домен зі списку доменів області:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" + +msgid "Realm domains" +msgstr "Домени області" + +msgid "Realm Domains" +msgstr "Домени області" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" +"\n" +" Внесення змін до доменів області\n" +"\n" +" Перевірка DNS: при додаванні домену до списку вручну типово\n" +" виконується перевірка DNS. Вона дає дані щодо прив'язки домену\n" +" до області IPA за рахунок перевірки того, чи містить запис TXT домену у\n" +" _kerberos TXT назву області IPA. Цю перевірку можна обійти, вказавши\n" +" параметр --force.\n" +"\n" +" Вилучення: коли вилучається домен області, який мав відповідну зону\n" +" DNS керовану IPA, також автоматично вилучається відповідний запис\n" +" TXT у зоні у _kerberos. Інші записи у зоні та сама зона лишаються\n" +" незмінними.\n" +" " + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" +"Запис зони DNS для кожного realmdomain має містити записи SOA або NS. Для %s " +"таких записів не виявлено" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "Вказані нижче домени не належать до цієї області: %(domains)s" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" +"Не вдалося виявити область таких доменів: %(domains)s. Якщо ці домени " +"належать до цієї області, будь ласка, створіть запис TXT _kerberos, що " +"міститиме «%(realm)s», на кожному з них." + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" +"Параметр --domain не можна використовувати разом із параметрами --add-domain " +"і --del-domain. Скористайтеся параметром --domain для визначення усього " +"списку доменів області явним чином. Щоб додати або вилучити окремі домени, " +"скористайтеся параметрами --add-domain/del-domain." + +msgid "IPA server domain cannot be omitted" +msgstr "Домен сервера IPA не можна пропускати" + +msgid "IPA server domain cannot be deleted" +msgstr "Домен сервера IPA не можна вилучати" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" +"\n" +"Обмежене службами делегування\n" +"\n" +"Керування правилами, за допомогою яких можна обмежити делегування\n" +"реєстраційних даних так, що служба зможе виконувати персоніфікацію\n" +"користувача під час обміну даними з іншою службою без потреби для\n" +"користувача насправді переспрямовувати квиток для отримання квитка\n" +"(TGT). Так створюється значно кращий метод делегування реєстраційних\n" +"даних, оскільки він запобігає розкриттю короткотермінових ключів\n" +"доступу користувачів.\n" +"\n" +"Відповідно до угоди з іменування, до назви правила додається слово\n" +"\"target\" або \"targets\". Така схема назв не є обов’язковою, але вона\n" +"допомагає концептуально пов’язати правила та їхні призначення.\n" +"\n" +"Правило складається з двох компонентів:\n" +" - Списку цілей (призначень), яких стосується правило\n" +" - Списку memberPrincipals, яким дозволено делегування для\n" +" цих цілей\n" +"\n" +"Запис цілі складається зі списку реєстраційних записів, які можна\n" +"делегувати.\n" +"\n" +"Якщо простіше, правило стверджує, що певний реєстраційний запис\n" +"можна делегувати як вказаний список реєстраційних записів,\n" +"відповідно до визначеного списку цілей.\n" +"\n" +"У правилі і цілі реєстраційні дані Kerberos може бути вказано за\n" +"їхньою назвою або альтернативною назвою, область дії можна пропустити.\n" +"Крім того, вузли можна вказувати за їхніми назвами. Якщо вказані\n" +"реєстраційні дані Kerberos містять один компонент і не завершуються " +"символом\n" +"«$», запис вважатиметься назвою вузла. Назви реєстраційних даних Kerberos, " +"які\n" +"завершуються «$» типово використовуються як альтернативні назви для " +"пов'язаних\n" +"із Active Directory служб.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нове правило обмеженого делегування:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Додати нову ціль обмеженого делегування:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Додати реєстраційний запис до правила:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Додати реєстраційні дані вузла «ipa.example.com» до правила:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Додати нашу ціль до правила:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Додати реєстраційний запис до цілі:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Показати дані щодо іменованого правила і цілі:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Вилучити обмежене делегування:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"У цьому прикладі служба ftp може отримувати квиток для отримання квитка для\n" +"служби ldap від імені пов’язаного користувача.\n" +"\n" +"Ми наполегливо не рекомендуємо змінювати делегування, які постачаються з\n" +"IPA, ipa-http-delegation та його цілі ipa-cifs-delegation-targets і\n" +"ipa-ldap-delegation-targets. Некоректні зміни можуть усунути можливість\n" +"делегування, що спричинить непрацездатність усієї системи.\n" + +msgid "Allowed to Impersonate" +msgstr "Дозволено виконувати імперсонацію" + +msgid "Member principals" +msgstr "Реєстраційні записи учасників" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "Помилкове форматування реєстраційного запису: %(error)s" + +msgid "Add target to a named service delegation." +msgstr "Додати ціль до делегування іменованої служби." + +#, python-format +msgid "member %s" +msgstr "%s учасника" + +msgid "Remove member from a named service delegation." +msgstr "Вилучити запис із делегування іменованої служби." + +msgid "service delegation rule" +msgstr "правило делегування служби" + +msgid "service delegation rules" +msgstr "правила делегування служб" + +msgid "Service delegation rules" +msgstr "Правила делегування служб" + +msgid "Service delegation rule" +msgstr "Правило делегування служб" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Додано правило делегування служб «%(value)s»" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Вилучено делегування служб «%(value)s»" + +msgid "privileged service delegation rule" +msgstr "привілейоване правило делегування служб" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "встановлено відповідність %(count)d правила делегування служб" +msgstr[1] "встановлено відповідність %(count)d правил делегування служб" +msgstr[2] "встановлено відповідність %(count)d правил делегування служб" + +msgid "service delegation target" +msgstr "ціль делегування служб" + +msgid "service delegation targets" +msgstr "призначення делегування служб" + +msgid "Service delegation targets" +msgstr "Призначення делегування служб" + +msgid "Service delegation target" +msgstr "Ціль делегування служб" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "Додано ціль делегування служб «%(value)s»" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Вилучено ціль делегування служб «%(value)s»" + +msgid "privileged service delegation target" +msgstr "привілейована ціль делегування служб" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "встановлено відповідність %(count)d призначення делегування служб" +msgstr[1] "встановлено відповідність %(count)d призначень делегування служб" +msgstr[2] "встановлено відповідність %(count)d призначень делегування служб" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" +"\n" +"Користувачі етапу\n" +"\n" +"Керування записами користувачів етапу.\n" +"\n" +"Записи користувачів етапу перебувають безпосередньо у контейнері:\n" +"\"cn=stage users, cn=accounts, cn=provisioning, SUFFIX\".\n" +"Користувач не може пройти розпізнавання за допомогою цих записів\n" +"(навіть якщо записи містять реєстраційні дані) і є кандидатами на\n" +"перетворення на активні записи.\n" +"\n" +"Записи активних користувачів є користувачами Posix, що перебувають\n" +"безпосередньо у контейнері: \"cn=accounts, SUFFIX\".\n" +"Користувач може пройти розпізнавання за допомогою активних записів,\n" +"якщо для них передбачено реєстраційні дані\n" +"\n" +"Вилучені записи користувачів є записами користувачів Posix, що\n" +"перебувають безпосередньо у контейнері: \"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Користувачі не можуть проходити розпізнавання за допомогою цих\n" +"записів (навіть якщо записи містять реєстраційні дані)\n" +"\n" +"Контейнер користувачів етапу містить записи\n" +" - створені командами 'stageuser-add', які є користувачами Posix\n" +" - створені зовнішньою системою забезпечення\n" +"\n" +"Коректний запис користувача етапу МАЄ відповідати таким вимогам:\n" +" - RDN запису має значення 'uid'\n" +" - ipaUniqueID має значення 'autogenerate'\n" +"\n" +"У IPA передбачено підтримку широкого діапазону форматів імен користувачів,\n" +"але слід зважати на різноманітні обмеження, які можуть стосуватися " +"середовища,\n" +"у якому ви працюєте. Наприклад, імена користувачів, що починаються з цифри,\n" +"або імена користувачів, довжина яких перевищує певну довжину, можуть\n" +"призвести до проблем у деяких системах UNIX.\n" +"Для зміни формату, який дозволено інструментами IPA, скористайтеся командою\n" +"'ipa config-mod'.\n" +"\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нового користувача етапу:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Додати користувача етапу з контейнера вилучених користувачів\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" + +msgid "Stage Users" +msgstr "Користувачі етапу" + +msgid "Stage User" +msgstr "Користувач етапу" + +msgid "stage user" +msgstr "користувач етапу" + +msgid "stage users" +msgstr "користувачі етапу" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "Додано користувача етапу «%(value)s»" + +msgid "givenname is required" +msgstr "слід вказати ім’я" + +msgid "sn is required" +msgstr "слід вказати sn" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "Вилучено запис користувача етапу «%(value)s»" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "Змінено запис користувача етапу «%(value)s»" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "встановлено відповідність %(count)d користувача" +msgstr[1] "встановлено відповідність %(count)d користувачів" +msgstr[2] "встановлено відповідність %(count)d користувачів" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "Активувати користувача етапу «%(value)s»" + +msgid "Entry RDN is not 'uid'" +msgstr "RDN запису не належить до «uid»" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "У запису немає атрибута «%(attribute)s»" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "запис активного користувача із іменем «%(user)s» вже існує" + +#, python-format +msgid "Stage user %s activated" +msgstr "Активовано користувача етапу %s" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "Додати один або декілька сертифікатів запису користувача етапу" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "Додано сертифікати до запису користувача етапу «%(value)s»" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "Вилучити один або декілька сертифікатів запису користувача етапу" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "Вилучено сертифікати із запису користувача етапу «%(value)s»" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" +"Додати новий псевдонім реєстраційного запису до запису користувача етапу" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "Додано нові псевдоніми до запису користувача етапу «%(value)s»" + +msgid "Remove principal alias from the stageuser entry" +msgstr "Вилучити псевдонім реєстраційного запису із запису користувача етапу" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "Вилучено псевдоніми із запису користувача етапу «%(value)s»" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" +"Додати одну або декілька прив’язок сертифікатів до запису користувача етапу." + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" +"Вилучити одну або декілька прив’язок сертифікатів із запису користувача " +"етапу." + +msgid "pyhbac is not installed." +msgstr "pyhbac не встановлено." + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" +"\n" +"Дії з сертифікатами IPA\n" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" +"\n" +"Реалізує набір команд для керування сертифікатами серверів SSL.\n" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" +"\n" +"Запити щодо сертифікатів існують у формі Certificate Signing Request (CSR)\n" +"і форматі PEM.\n" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" +"\n" +"Служба сертифікації dogtag використовує лише значення CN CSR і примусово " +"встановлює\n" +"решту параметрів призначення за налаштуваннями сервера.\n" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" +"\n" +"Сертифікат зберігається з реєстраційним записом, а реєстраційний запис\n" +"потребує вузла.\n" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" +"\n" +"Для того, щоб створити запит щодо сертифіката:\n" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" +"\n" +"* Вузол має існувати\n" +"* Служба має існувати (або слід скористатися параметром --add " +"дляавтоматичного додавання)\n" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" +"\n" +"ПОШУК:\n" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" +"\n" +"Шукати сертифікати можна за призначенням сертифіката, серійним номером,\n" +"причиною відкликання, датами чинності та датою видання.\n" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" +"\n" +"Якщо пошук виконується за датою _від, використовується порівняння >=, а " +"якщо\n" +"виконується пошук _до дати — порівняння <=. Поєднання обох пошуків " +"призводить\n" +"до пошуку з логічним поєднанням ТА.\n" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" +"\n" +"Дати обробляються як дати за Гринвічем, відповідно до дат визначених " +"усертифікатах.\n" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" +"\n" +"Формат дати є таким: РРРР-мм-дд.\n" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" +"\n" +" Створити запит щодо нового сертифіката і додати реєстраційний запис: ipa " +"cert-request --add --principal=HTTP/lion.example.com example.csr\n" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" +"\n" +" Отримати вже створений сертифікат:\n" +" ipa cert-show 1032\n" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" +"\n" +" Відкликати сертифікат (причини визначено у RFC 5280):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" +"\n" +" Вилучити сертифікат зі списку відкликання:\n" +" ipa cert-remove-hold 1032\n" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" +"\n" +" Перевірити стан запиту щодо підписування:\n" +" ipa cert-status 10\n" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" +"\n" +" Пошук сертифікатів за назвою вузла:\n" +" ipa cert-find --subject=ipaserver.example.com\n" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" +"\n" +" Пошук відкликаних сертифікатів за причиною:\n" +" ipa cert-find --revocation-reason=5\n" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" +"\n" +" Пошук сертифікатів за датою видання\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" +"\n" +" Пошук сертифікатів, власником яких є вказаний користувач:\n" +" ipa cert-find --user=user\n" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" +"\n" +" Перевірити сертифікат:\n" +" ipa cert-find --file=cert.pem --all\n" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" +"\n" +" Перевірити, чи є власником сертифіката вказаний користувач:\n" +" ipa cert-find --file=cert.pem --user=user\n" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" +"\n" +"У поточній версії IPA негайно виконує (або відхиляє) всі запити щодо\n" +"сертифікатів, отже дані щодо стану запиту не мають сенсу. Ці дані\n" +"можуть знадобитися у наступних версіях або у разі, якщо CA видає\n" +"сертифікат не одразу.\n" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" +"\n" +"Передбачено підтримку таких причин відкликання:\n" +"\n" + +msgid " * 0 - unspecified\n" +msgstr " * 0 - не визначено\n" + +msgid " * 1 - keyCompromise\n" +msgstr " * 1 - keyCompromise\n" + +msgid " * 2 - cACompromise\n" +msgstr " * 2 - cACompromise\n" + +msgid " * 3 - affiliationChanged\n" +msgstr " * 3 - affiliationChanged\n" + +msgid " * 4 - superseded\n" +msgstr " * 4 - superseded\n" + +msgid " * 5 - cessationOfOperation\n" +msgstr " * 5 - cessationOfOperation\n" + +msgid " * 6 - certificateHold\n" +msgstr " * 6 - certificateHold\n" + +msgid " * 8 - removeFromCRL\n" +msgstr " * 8 - removeFromCRL\n" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr " * 9 - privilegeWithdrawn\n" + +msgid " * 10 - aACompromise\n" +msgstr " * 10 - aACompromise\n" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" +"\n" +"Зауважте, що коди причини 7 не використовується. Докладніші дані у RFC " +"5280:\n" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" + +msgid "CA is not configured" +msgstr "CA не налаштовано" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" +"Реєстраційному запису «%(principal)s» не дозволено використовувати службу " +"сертифікації «%(ca)s» із профілем «%(profile_id)s» для видання сертифікатів." + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" +"enabledService/configuredService не перебуває у записі kdc ipaConfigString" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "Вузол «%(hostname)s» не є активним KDC" + +msgid "Issuing CA" +msgstr "Видавничий CA" + +msgid "Name of issuing CA" +msgstr "Назва видавничого CA" + +msgid "Base-64 encoded certificate." +msgstr "Сертифікат у кодуванні Base-64." + +msgid "Certificate chain" +msgstr "Ланцюжок сертифікації" + +msgid "X.509 certificate chain" +msgstr "Ланцюжок сертифікації X.509" + +msgid "Subject email address" +msgstr "Адреса електронної пошти призначення" + +msgid "Subject DNS name" +msgstr "Назва DNS призначення" + +msgid "Subject X.400 address" +msgstr "Адреса X.400 призначення" + +msgid "Subject directory name" +msgstr "Назва каталогу призначення" + +msgid "Subject EDI Party name" +msgstr "Назва EDI Party призначення" + +msgid "Subject URI" +msgstr "Адреса призначення" + +msgid "Subject IP Address" +msgstr "IP-адреса призначення" + +msgid "Subject OID" +msgstr "OID призначення" + +msgid "Subject UPN" +msgstr "UPN призначення" + +msgid "Subject Kerberos principal name" +msgstr "Назва реєстраційного запису Kerberos призначення" + +msgid "Subject Other Name" +msgstr "Інша назва призначення" + +msgid "Issuer DN" +msgstr "DN видавця" + +msgid "Not Before" +msgstr "Не раніше" + +msgid "Not After" +msgstr "Не пізніше" + +msgid "Fingerprint (SHA1)" +msgstr "Відбиток (SHA1)" + +msgid "Fingerprint (SHA256)" +msgstr "Відбиток (SHA256)" + +msgid "Serial number (hex)" +msgstr "Серійний номер (шістнадцятковий)" + +msgid "Request status" +msgstr "Стан запиту" + +msgid "Include certificate chain in output" +msgstr "Включити ланцюжок сертифікації до виведення" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" +"автоматично додати реєстраційний запис, якщо його не існує (лише " +"реєстраційні записи служб)" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "Сертифікати krbtgt можуть використовувати лише профіль %s" + +msgid "No Common Name was found in subject of request." +msgstr "У темі запиту не було знайдено загальної назви (CN)." + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" +"назва вузла у предметі запиту «%(cn)s» не збігається із назвою або " +"альтернативними назвами реєстраційного запису «%(principal)s»" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" +"назва вузла у призначенні запиту, «%(cn)s», не збігається з назвою вузла " +"реєстраційного запису, «%(hostname)s»" + +msgid "DN commonName does not match user's login" +msgstr "У commonName DN не збігається із ім’ям користувача" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" +"emailAddress DN не збігається із жодною адресою електронної пошти користувача" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "Недостатні привілеї «write» до атрибута «userCertificate» запису «%s»." + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" +"використання типу альтернативної назви об’єкта %s заборонено для " +"реєстраційних записів користувачів" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" +"Реєстраційного запису служби для альтернативної назви об’єкта %s запиту щодо " +"сертифіката не існує" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" +"Недостатні привілеї для створення сертифіката з альтернативною назвою " +"призначення «%s»." + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" +"Реєстраційний запис «%s» у альтернативній назві об’єкта не відповідає " +"запитаному реєстраційному запису" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" +"RFC822Name не збігається зі жодною адресою електронної пошти користувача" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" +"використання типу альтернативної назви об’єкта %s заборонено для " +"реєстраційних записів, які не пов’язано із користувачами" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "Використання типу альтернативної назви об’єкта %s заборонено" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "Службу сертифікації «%s» вимкнено" + +msgid "'add' option" +msgstr "параметр «add»" + +msgid "The principal for this request doesn't exist." +msgstr "Реєстраційного запису для цього запиту не існує." + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "IP-адреса у subjectAltName (%s) є недоступною з назв DNS" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "IP-адреса у subjectAltName (%s) не містить запису PTR" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "PTR-запис для SAN IP (%s) не відповідає записам A/AAAA" + +msgid "Status" +msgstr "Стан" + +msgid "Revoked" +msgstr "Анульований" + +msgid "Revocation reason" +msgstr "Причина відкликання" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" +"Причина відкликання сертифіката (0-10). Введіть «ipa help cert», щоб " +"ознайомитися із подробицями причин відкликання. " + +#, python-format +msgid "Owner %s" +msgstr "Власник %s" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" +"Не знайдено сертифікат із серійним номером %(serial)s, виданий CA «%(ca)s»" + +msgid "7 is not a valid revocation reason" +msgstr "7 не є коректною причиною відкликання" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "Результати мають містити лише атрибут основного ключа («сертифікат»)" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "встановлено відповідність %(count)d сертифіката" +msgstr[1] "встановлено відповідність %(count)d сертифікатів" +msgstr[2] "встановлено відповідність %(count)d сертифікатів" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "Шукати сертифікати із вказаними %s власника." + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "Шукати сертифікати, власником яких не є %s." + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" +"\n" +"Команди sudo\n" +"\n" +"Команди, використані як будівельні блоки для sudo\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Створення запису команди\n" +" ipa sudocmd-add --desc='Читання файлів журналу' /usr/bin/less\n" +"\n" +" Вилучення команди\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "команда sudo" + +msgid "sudo commands" +msgstr "команди sudo" + +msgid "Sudo Commands" +msgstr "Команди sudo" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Додано команду sudo «%(value)s»" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Вилучено команду sudo «%(value)s»" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Змінено команду sudo «%(value)s»" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "встановлено відповідність %(count)d команди sudo" +msgstr[1] "встановлено відповідність %(count)d команд sudo" +msgstr[2] "встановлено відповідність %(count)d команд sudo" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" +"\n" +"Правила sudo\n" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" +"\n" +"Sudo (su \"do\") надає системному адміністратору змогу делегувати\n" +"повноваження певним користувачам (або групам користувачів) на виконання\n" +"деяких (або усіх) команд від імені адміністратора (root) або іншого\n" +"користувача, зберігаючи водночас журнал виконання команд та\n" +"аргументів.\n" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" +"\n" +"У IPA передбачено декілька параметрів налаштовування роботи sudo:\n" +" Users: користувачі або групи, які можуть викликати sudo.\n" +" Hosts: вузли або групи вузлів, користувачі якого можуть викликати sudo.\n" +" Allow Command: специфічні команди, які можна виконувати за допомогою " +"sudo.\n" +" Deny Command: специфічні команди, які не можна виконувати за допомогою " +"sudo.\n" +" RunAsUser: користувачі або групи, від імені яких sudo виконуватиме " +"команди.\n" +" RunAsGroup: групи, ідентифікатори яких буде використано sudo для " +"виконання команд.\n" +" Options: різноманітні параметри sudoers, які можуть змінити поведінку " +"sudo.\n" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" +"\n" +"До правила sudo можна додати порядок, який керуватиме порядком\n" +"обробки записів (якщо такий порядок передбачено на клієнтському боці).\n" +"Порядок визначається числовим індексом, який не повинен повторюватися.\n" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" +"\n" +"У IPA передбачено визначений binddn для використання з sudo, який " +"розташовано у\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" +"\n" +"Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" +"\n" +" Створити правило:\n" +" ipa sudorule-add readfiles\n" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" +"\n" +" Додати об’єкт команди sudo і записати його як дозволену команду до " +"правила:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" +"\n" +" Додати запис вузла до правила:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" +"\n" +" Додати запис користувача до правила:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" +"\n" +" Додати особливе правило sudo для типового налаштовування сервера sudo:\n" +" ipa sudorule-add defaults\n" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" +"\n" +" Встановити типовий варіант дій для sudo:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" +"\n" +" Встановити переходи типу і ролі SELinux на правило:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" + +msgid "this option has been deprecated." +msgstr "цей параметр вважається застарілим." + +msgid "sudo rules" +msgstr "правила sudo" + +msgid "Sudo Rules" +msgstr "Правила Sudo" + +msgid "Sudo Rule" +msgstr "Правило sudo" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" +"порядковий номер повинен мати унікальне значення (%(order)d вже використано " +"для %(rule)s)" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Додано правило sudo «%(value)s»" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Вилучено правило sudo «%(value)s»" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Змінено правило sudo «%(value)s»" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" +"Значенням категорії %(type)s не можна встановлювати «all», якщо існують " +"дозволені %(objects)s" + +msgid "users" +msgstr "користувачі" + +msgid "command" +msgstr "команда" + +msgid "commands" +msgstr "команди" + +msgid "runAs user" +msgstr "користувач, від імені якого виконуватиметься" + +msgid "runAs users" +msgstr "користувачі, від імені яких виконуватиметься" + +msgid "group runAs" +msgstr "група, від імені якої виконуватиметься" + +msgid "runAs groups" +msgstr "групи, від імені яких виконуватиметься" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "встановлено відповідність %(count)d правила sudo" +msgstr[1] "встановлено відповідність %(count)d правил sudo" +msgstr[2] "встановлено відповідність %(count)d правил sudo" + +msgid "commands cannot be added when command category='all'" +msgstr "не можна додавати команди, якщо категорія команд=«all»" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" +"не можна додавати записи користувачів, якщо категорія запуску від імені " +"користувачів або запуску від імені груп=«all»" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "Не можна вказувати «%(name)s» як ім’я користувача у записі RunAsUser" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "Назва групи «%(name)s» є неприйнятною для RunAsUser" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "Назва групи «%(name)s» є неприйнятною для RunAsGroup" + +msgid "operation not defined" +msgstr "дію не визначено" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "виконувати цю дію заборонено: %s" + +msgid "No such virtual command" +msgstr "Такої віртуальної команди не передбачено" + +msgid "commands for controlling sudo configuration" +msgstr "команди керування налаштуванням sudo" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" +"\n" +"Групи команд sudo\n" +"\n" +"Керування групами команд sudo.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нову групу команд sudo:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Вилучити групу команд sudo:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Керування участю групи команд sudo, команди:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Керування участю групи команд sudo, команди:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Показ групи команд sudo:\n" +" ipa sudocmdgroup-show admincmds\n" + +msgid "sudo command group" +msgstr "група команд sudo" + +msgid "sudo command groups" +msgstr "групи команд sudo" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Додано групу команд sudo «%(value)s»" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Вилучено групу команд sudo «%(value)s»" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Змінено групу команд sudo «%(value)s»" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "встановлено відповідність %(count)d групи команд sudo" +msgstr[1] "встановлено відповідність %(count)d груп команд sudo" +msgstr[2] "встановлено відповідність %(count)d груп команд sudo" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" +"\n" +"Довіра між областями\n" +"\n" +"Керування відносинами довіри між доменами IPA і Active Directory.\n" +"\n" +"З метою надання доступу користувачам віддаленого домену до ресурсів у " +"домені\n" +"IPA слід встановити відносини довіри. У поточній версії у IPA передбачено\n" +"підтримку довіри лише між доменами IPA і Active Directory під керуванням " +"Windows\n" +"Server 2008 або новішої версії з функціональними можливостями рівня 2008 " +"або\n" +"новішої версії.\n" +"\n" +"Будь ласка, зауважте, що слід належним чином налаштувати DNS на обох " +"доменах,\n" +"IPA і Active Directory, щоб домени могли виявити один одного. " +"Працездатність\n" +"відносин довіри залежить від можливості виявлення спеціальних ресурсів у\n" +"іншому домені за допомогою записів DNS.\n" +"\n" +"Приклад:\n" +"\n" +"1. Встановити довіру між областями з Active Directory за допомогою " +"реєстраційних\n" +" даних адміністратора AD:\n" +"\n" +" ipa trust-add --type=ad <домен.ad> --admin <адміністратор домену AD> --" +"password\n" +"\n" +"2. Показати список всіх наявних відносин довіри:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Показати подробиці щодо певних відносин довіри:\n" +"\n" +" ipa trust-show <домен.ad>\n" +"\n" +"4. Вилучити наявні відносини довіри:\n" +"\n" +" ipa trust-del <домен.ad>\n" +"\n" +"Щойно відносини довіри буде встановлено, віддалених користувачів слід " +"прив’язати\n" +"до локальних груп POSIX, щоб скористатися ресурсами IPA. Прив’язку слід\n" +"виконати за допомогою використання зовнішньої участі групи не-POSIX, а " +"потім\n" +"цю групу має бути включено до однієї з локальних груп POSIX.\n" +"\n" +"Приклади:\n" +"\n" +"1. Створити групу для прив’язки адміністраторів та їхньої локальної групи " +"POSIX\n" +" довіреного домену:\n" +"\n" +" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc='<домен.ad> admins' ad_admins\n" +"\n" +"2. Додати ідентифікатор безпеки Domain Admins домену <домен.ad> до групи " +"ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Дозволити прив’язування учасників групи ad_admins_external до групи POSIX " +"ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Показати список зовнішніх учасників групи ad_admins_external для " +"перегляду їхніх SID:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"НАЛАШТУВАННЯ ДОВІРИ ЗАГАЛЬНОГО РІВНЯ\n" +"\n" +"Якщо встановлено підпакунок довіри AD IPA та запущено ipa-adtrust-install,\n" +"створюються налаштування локального домену (SID, GUID, назва NetBIOS). " +"Після\n" +"цього створені ідентифікатори використовуються для обміну даними з\n" +"довіреним доменом певного типу.\n" +"\n" +"1. Показати налаштування довіри загального рівня для типів довіри Active " +"Directory:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Змінити загальні налаштування для всіх довір типу Active Directory і\n" +" встановити іншу резервну основну групу (GID резервної основної групи\n" +" використовується як GID основного користувача, якщо користувача\n" +" розпізнано у домені IPA, але він не має жодного вже встановленого\n" +" основного GID):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Повернути для резервної основної групи значення типової прихованої групи\n" +" (будь-якої групи, у якій дозволено клас об’єктів posixGroup):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr " Крім того, цю команду можуть виконати такі сервери: %(masters)s" + +msgid "AD Trust setup" +msgstr "Налаштування довіри AD" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" +"Виконати вибрану команду без встановленої підтримки Samba 4 неможливо. " +"Переконайтеся, що вами встановлено підпакунок IPA server-trust-ad." + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" +"Вибрану команду не можна виконати без екземпляра Samba 4, встановленого у " +"цій системі. Переконайтеся, що на цьому сервері було виконано ipa-adtrust-" +"install." + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Без налаштовування власного домену не можна виконувати пошук у довірених " +"доменах. Спочатку запустіть ipa-adtrust-install на сервері IPA." + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" +"Спроба отримати список доменів із довіреного лісу зазнала невдачі. Подробиці " +"можна знайти у error_log" + +msgid "trust" +msgstr "довіра" + +msgid "trusts" +msgstr "записи довіри" + +msgid "Trusts" +msgstr "Записи довіри" + +msgid "Trust" +msgstr "Довіра" + +msgid "SID blocklist incoming" +msgstr "Список блокування вхідних SID" + +msgid "SID blocklist outgoing" +msgstr "Список блокування вихідних SID" + +msgid "Trust direction" +msgstr "Напрямок довіри" + +msgid "Trust type" +msgstr "Тип довіри" + +msgid "Trust status" +msgstr "Стан довіри" + +msgid "UPN suffixes" +msgstr "Суфікси UPN" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "некоректний SID: {SID}" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" +"\n" +"Додати новий запис довіри для використання.\n" +"\n" +"За допомогою цієї команди можна встановити відносини довіри з\n" +"іншим доменом, який після цього вважається «довіреним». У результаті\n" +"користувачі довіреного домену зможуть отримувати доступ до ресурсів\n" +"цього домену.\n" +"\n" +"У поточній версії передбачено підтримку лише відносин довіри з доменами\n" +"Active Directory.\n" +"\n" +"Команду можна безпечно запускати декілька разів для одного і того самого\n" +"домену, такий запуск призводить до зміни у реєстраційних записах відносин\n" +"довіри з обох боків.\n" +"\n" +"Зауважте, що якщо команда раніше виконувалася із вказаним типом діапазону\n" +"або автоматичним визначенням типу діапазону, і ви хочете налаштувати\n" +"інший тип діапазону, ймовірно, вам доведеться вилучити першй діапазон " +"ідентифікаторів\n" +"за допомогою ipa idrange-del, перш ніж ви зможете повторити команду із " +"бажаним типом.\n" +" " + +msgid "Active Directory domain range" +msgstr "Діапазон доменів Active Directory" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "Діапазон довіри Active Directory з атрибутами POSIX" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" +"Тип діапазону ідентифікаторів довіреного домену, одне з дозволених значень" + +msgid "External trust" +msgstr "Зовнішня довіра" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" +"Встановити зовнішню довіру до домену у іншому лісі. Довіра не переходить за " +"межі домену." + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "Додано запис довіри Active Directory для області «%(value)s»" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Відновлено довіру до домену «%(value)s»" + +msgid "missing base_id" +msgstr "не вистачає base_id" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "pysss_murmur на сервері не доступний, отже base-id не надано." + +msgid "trust type" +msgstr "тип довіри" + +msgid "only \"ad\" is supported" +msgstr "передбачено підтримку лише «ad»" + +msgid "domain" +msgstr "домен" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" +"Не можна встановлювати довіру до AD, розгорнутою у тому самому домені, що і " +"IPA. Підтримки такої можливості не передбачено." + +msgid "Realm-domain mismatch" +msgstr "Невідповідність між областю і доменом" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" +"Для встановлення довіри з Active Directory назва домену і назва області " +"сервера IPA мають збігатися" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" +"До доменів області IPA включено домен %(domain)s. Перш ніж встановлювати " +"довіру, це включення слід усунути. Див. команду «ipa realmdomains-mod --del-" +"domain»." + +msgid "Trusted domain and administrator account use different realms" +msgstr "" +"Довіреним доменом і обліковим записом адміністратора використовуються різні " +"області" + +msgid "Realm administrator password should be specified" +msgstr "Має бути вказано пароль адміністратора області" + +msgid "id range type" +msgstr "тип діапазону ідентифікаторів" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" +"Якщо додається зв’язок довіри AD, значенням --range-type має бути лише ipa-" +"ad-trust або ipa-ad-trust-posix." + +msgid "id range" +msgstr "діапазон ідентифікаторів" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" +"Для цього зв’язку довіри вже існує діапазон ідентифікаторів. Вам слід або " +"вилучити попередній діапазон, або виключити з команди параметри --base-id/--" +"range-size." + +msgid "range exists" +msgstr "діапазон вже існує" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" +"Вже існує діапазон ідентифікаторів з тією самою назвою але іншим доменом " +"SID. Діапазон ідентифікаторів для нового довіреного домену має бути створено " +"вручну." + +msgid "range type change" +msgstr "зміна типу діапазону" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" +"Діапазон ідентифікаторів для довіреного домену вже існує, але належить до " +"іншого типу. Будь ласка, вилучіть попередній діапазон вручну або не " +"визначайте тип у примусовому порядку за допомогою параметра --range-type." + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "Не вдалося визначити контролер домену для домену {domain}. " + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" +"Для нього у DNS IPA визначено правила переспрямовування. Можливо, " +"переспрямовувач вказує не помилковий вузол?" + #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " msgstr "" -"Рівень домену не може бути піднято до {0}, слід розв’язати наявні конфлікти " -"реплікації." - -msgid "Server does not support domain level functionality" -msgstr "" -"На сервері не передбачено підтримки функціональних можливостей рівня домену" - -msgid "Domain Level cannot be lowered." -msgstr "Не можна знижувати рівень домену." +"IPA керує DNS. Будь ласка, переконайтеся, що поточні налаштування DNS " +"уможливлюють визначення адрес службових записів домену «{domain}». Приклади " +"налаштовування DNS за допомогою командного інтерфейсу або вебінтерфейсу " +"наведено у документації. " #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." msgstr "" -"Не можна підняти рівень домену до {0}, оскільки на сервері {1} не " -"передбачено підтримки такого рівня." +"Оскільки IPA не керує записами DNS, слід налаштувати DNS так, щоб система " +"визначала адресу домену «{domain}» за даними щодо вузлів IPA, і навпаки." + +msgid "Unable to verify write permissions to the AD" +msgstr "Не вдалося перевірити права доступу на запис до AD" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "Вказано недостатньо аргументів для виконання налаштовування довіри" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "Вилучено запис довіри «%(value)s»" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" +"\n" +" Змінити запис довіри (для наступного використання).\n" +"\n" +" У поточній версії можлива зміна лише типова зміна атрибутів LDAP.\n" +" Додаткові варіанти буде додано у наступних випусках.\n" +" " + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "Змінено довіру «%(value)s» (зміни набудуть чинності за 60 секунд)" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "встановлено відповідність %(count)d запису довіри" +msgstr[1] "встановлено відповідність %(count)d записів довіри" +msgstr[2] "встановлено відповідність %(count)d записів довіри" + +msgid "trust configuration" +msgstr "довірені налаштування" + +msgid "Global Trust Configuration" +msgstr "Загальні довірені налаштування" + +msgid "IPA AD trust agents" +msgstr "Агенти довіри AD IPA" + +msgid "IPA servers configured as AD trust agents" +msgstr "Сервери IPA, які налаштовано як агенти довіри AD" + +msgid "IPA AD trust controllers" +msgstr "Контролери довіри AD IPA" + +msgid "IPA servers configured as AD trust controllers" +msgstr "Сервери IPA, які налаштовано як контролери довіри AD" + +msgid "unsupported trust type" +msgstr "непідтримуваний тип довіри" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "Змінено налаштування довіри «%(value)s»" + +msgid "Name" +msgstr "Назва" + +msgid "SID" +msgstr "SID" + +msgid "sidgen_was_run" +msgstr "sidgen_was_run" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" +"Для виконання цієї команди має існувати група «editors», але групи з такою " +"назвою не знайдено." + +msgid "trust domain" +msgstr "довірений домен" + +msgid "trust domains" +msgstr "довірені домени" + +msgid "Trusted domains" +msgstr "Довірені домени" + +msgid "Trusted domain" +msgstr "Довірений домен" + +msgid "Domain enabled" +msgstr "Домен увімкнено" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "Дані щодо довіреного домену «%(value)s» вилучено" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"вилучення кореневого домену правила довіри неможливе, скористайтеся trust-" +"del для вилучення самого правила довіри" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" +"Список довірених доменів успішно оновлено. Для отримання поточного списку " +"цих доменів скористайтеся командою trustdomain-find." + +msgid "Configure this server as a trust agent." +msgstr "Налаштувати цей сервер як довірений агент." + +msgid "Enable support for trusted domains for old clients" +msgstr "Увімкнути підтримку довірених доменів для застарілих клієнтів" + +#, python-format +msgid "must be \"%s\"" +msgstr "має бути «%s»" + +msgid "not allowed to remotely add agent" +msgstr "заборонено віддалено додавати агентів" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Увімкнено домен довіри «%(value)s»" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" +"Кореневий домен правила довіри для наявного правила довіри завжди увімкнено" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Домен довіри «%(value)s» вимкнено" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"вимикання кореневого домену правила довіри неможливе, скористайтеся trust-" +"del для вилучення самого правила довіри" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" +"\n" +"Повернути дані щодо поточного розпізнаного профілю\n" +"\n" +"Команда визначення профілю повертає дані щодо того, як\n" +"отримати більше даних про профіль, розпізнаний для\n" +"цього запиту. Дані:\n" +"\n" +" * тип об’єкта\n" +" * команда для отримання подробиць щодо об’єкта\n" +" * аргументи та параметри, які слід передати команді\n" +"\n" +"Дані повертаються у форматі словника. Нижче, як приклад,\n" +"наведено виведення у форматі «ключ: значення».\n" +"\n" +"Приклади:\n" +"\n" +" Пошук від імені користувача IPA:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Пошук від імені користувача довіреного домену:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Пошук від імені вузла:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Пошук від імені служби Kerberos:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" + +msgid "Describe currently authenticated identity." +msgstr "Описати поточний розпізнаний профіль." + +msgid "Object class name" +msgstr "Назва класу об’єктів" + +msgid "Function to get details" +msgstr "Функція, подробиці щодо якої слід отримати" + +msgid "Arguments to details function" +msgstr "Аргументи до функції details" + +msgid "Cannot query Directory Manager with API" +msgstr "" +"Не вдалося опитати засіб керування каталогом за допомогою програмного " +"інтерфейсу" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" +"\n" +"Ролі сервера IPA\n" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" +"\n" +"Отримати стан ролей (сервер DNS, CA тощо), що надається основними серверами " +"IPA.\n" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" +"\n" +"Стан ролі може бути одним зі значень: enabled, configured або absent.\n" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" +"\n" +" Показати стан ролі «DNS server» на сервері:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" +"\n" +" Показати стан усіх ролей, назва яких містить «AD», на сервері:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" +"\n" +" Показати стан усіх налаштованих ролей на сервері:\n" +" ipa server-role-find ipa.example.com\n" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" +"\n" +" Показати неявну основну роль IPA:\n" +" ipa server-role-find --include-master\n" + +msgid "server role" +msgstr "роль сервера" + +msgid "server roles" +msgstr "ролі сервера" + +msgid "IPA Server Roles" +msgstr "Ролі сервера IPA" + +msgid "IPA Server Role" +msgstr "Роль сервера IPA" + +msgid "IPA server role name" +msgstr "Назва ролі сервера IPA" + +msgid "Role status" +msgstr "Стан ролі" + +msgid "Status of the role" +msgstr "Стан ролі" + +msgid "Show role status on a server" +msgstr "Показати стан ролі на сервері" + +msgid "Find a server role on a server(s)" +msgstr "Знайти роль сервера на серверах" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "встановлено відповідність %(count)s ролі сервера" +msgstr[1] "встановлено відповідність %(count)s ролей сервера" +msgstr[2] "встановлено відповідність %(count)s ролей сервера" + +msgid "Include IPA master entries" +msgstr "Включити основні записи IPA" + +msgid "roles" +msgstr "ролі" + +msgid "IPA role name" +msgstr "Назва ролі IPA" + +msgid "" +"\n" +"Vaults\n" +msgstr "" +"\n" +"Сховища\n" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" +"\n" +"Керування сховищами.\n" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" +"\n" +"Сховище — безпечне місце для зберігання ключа. Одне сховище\n" +"може містити лише один ключ. При архівуванні ключа до сховища,\n" +"наявний ключ (якщо такий існує) буде перезаписано.\n" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" +"\n" +"За правами власності сховища поділяються на три категорії:\n" +"* приватні сховища користувачів\n" +"* сховища служб\n" +"* сховища спільного використання\n" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" +"\n" +"Сховища користувачів — це сховища, власником яких є конкретний\n" +"користувач. Приватними є сховища, власником яких є поточний\n" +"користувач. Власником сховища служби є певна служба. Сховища\n" +"спільного використання належать адміністратору, але можуть\n" +"використовуватися іншими користувачами або службами.\n" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" +"\n" +"За механізмами захисту сховища поділяються на три\n" +"типи:\n" +"* стандартні сховища\n" +"* симетричні сховища\n" +"* асиметричні сховища\n" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" +"\n" +"У стандартному сховищі для передавання і зберігання реєстраційних\n" +"даних використовуються безпечні механізми. Реєстраційні дані\n" +"може бути отримано лише користувачами, які мають доступ\n" +"до сховища.\n" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" +"\n" +"Симетричне сховище є подібним до стандартного сховища, але\n" +"у ньому реєстраційні дані попередньо шифруються до\n" +"передавання за допомогою пароля.\n" +"Реєстраційні дані можна отримати лише за допомогою цього пароля.\n" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" +"\n" +"Асиметричне сховище є подібним до стандартного сховища, але\n" +"у ньому реєстраційні дані попередньо шифруються до\n" +"передавання за допомогою відкритого ключа.\n" +"Реєстраційні дані можна отримати лише за допомогою закритого ключа.\n" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Вивести список сховищ:\n" +" ipa vault-find\n" +" [--user <користувач>|--service <служба>|--shared]\n" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" +"\n" +" Додати стандартне сховище:\n" +" ipa vault-add <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --type standard\n" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" +"\n" +" Додати симетричне сховище:\n" +" ipa vault-add <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --type symmetric --password-file пароль.txt\n" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" +"\n" +" Додати асиметричне сховище:\n" +" ipa vault-add <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --type asymmetric --public-key-file відкритий_ключ.pem\n" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Показати сховище:\n" +" ipa vault-show <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" +"\n" +" Змінити опис сховища:\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --desc <опис>\n" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" +"\n" +" Змінити тип сховища:\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --type <тип>\n" +" [старий пароль/закритий ключ]\n" +" [новий пароль/відкритий ключ]\n" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" +"\n" +" Змінити пароль до симетричного сховища:\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --change-password\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --old-password <старий пароль>\n" +" --new-password <новий пароль>\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --old-password-file <файл старого пароля>\n" +" --new-password-file <файл нового пароля>\n" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" +"\n" +" Змінити ключ асиметричного сховища:\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --private-key-file <файл старого закритого ключа>\n" +" --public-key-file <файл нового відкритого ключа>\n" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Вилучити сховище:\n" +" ipa vault-del <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" +"\n" +" Вивести налаштування сховищ:\n" +" ipa vaultconfig-show\n" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Архівувати дані до стандартного сховища:\n" +" ipa vault-archive \n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --in <файл вхідних даних>\n" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Архівувати дані до симетричного сховища:\n" +" ipa vault-archive \n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --in <файл вхідних даних>\n" +" --password-file пароль.txt\n" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Архівувати дані до асиметричного сховища:\n" +" ipa vault-archive \n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --in <файл вхідних даних>\n" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" +"\n" +" Отримати дані зі стандартного сховища:\n" +" ipa vault-retrieve <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --out <файл результатів>\n" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Отримати дані з симетричного сховища:\n" +" ipa vault-retrieve <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --out <файл результатів>\n" +" --password-file password.txt\n" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" +"\n" +" Отримати дані з асиметричного сховища:\n" +" ipa vault-retrieve <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --out <файл результатів> --private-key-file private.pem\n" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Додати записи власників сховища:\n" +" ipa vault-add-owner <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Вилучити записи учасників сховища:\n" +" ipa vault-remove-owner <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Додати записи учасників сховища:\n" +" ipa vault-add-member <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Вилучити записи учасників сховища:\n" +" ipa vault-remove-member <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" +"\n" +" Об’єкт контейнера сховищ.\n" +" " + +msgid "vaultcontainer" +msgstr "контейнер сховищ" + +msgid "vaultcontainers" +msgstr "контейнери сховищ" + +msgid "Vault Containers" +msgstr "Контейнери сховищ" + +msgid "Vault Container" +msgstr "Контейнер сховищ" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" +"Параметри служби, спільного використання та користувача не можна вказувати " +"одночасно" + +msgid "Host is not supported" +msgstr "Підтримки вузла не передбачено" + +msgid "KRA service is not enabled" +msgstr "Службу KRA не увімкнено" + +msgid "Deleted vault container" +msgstr "Вилучено контейнер сховищ" + +#, python-format +msgid "owner %s" +msgstr "власник %s" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" +"\n" +" Об’єкт сховища.\n" +" " + +msgid "vault" +msgstr "сховище" + +msgid "vaults" +msgstr "сховища" + +msgid "Vaults" +msgstr "Сховища" + +msgid "Vault" +msgstr "Сховище" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" +"Параметри служби, спільного використання та користувача не можна вказувати " +"одночасно" + +msgid "Add a vault." +msgstr "Додати сховище." + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "Додано сховище «%(value)s»" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "Вилучено сховище «%(value)s»" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "встановлено відповідність %(count)d сховища" +msgstr[1] "встановлено відповідність %(count)d сховищ" +msgstr[2] "встановлено відповідність %(count)d сховищ" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" +"Параметри служби, спільного використання та користувача не можна вказувати " +"одночасно" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "Змінено сховище «%(value)s»" + +msgid "Vault configuration" +msgstr "Налаштування сховища" + +msgid "IPA KRA servers" +msgstr "Сервери KRA IPA" + +msgid "IPA servers configured as key recovery agents" +msgstr "" +"Сервери IPA, налаштовані як агенти відновлення ключів (key recovery agents)" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "Дані архівовано до сховища «%(value)s»" + +msgid "Retrieve data from a vault." +msgstr "Отримати дані зі сховища." + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Отримано дані зі сховища «%(value)s»" + +msgid "No archived data." +msgstr "Немає архівованих даних." + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "Перевіряє, чи увімкнено на якомусь із серверів службу KRA" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" +"\n" +"Керування профілями сертифікатів\n" +"\n" +"Профілі сертифікатів використовуються службами сертифікації (CA) під час\n" +"підписування сертифікатів для визначення того, чи є прийнятним запит на\n" +"підписування сертифіката (CSR), і, якщо це так, визначення можливостей\n" +"і розширень, які буде надано сертифікатом.\n" +"\n" +"Форматом профілю сертифікатів є список значень, які може обробляти\n" +"Dogtag або система сертифікації служби сертифікації Red Hat.\n" +"\n" +"СИНТАКСИС ІДЕНТИФІКАТОРА ПРОФІЛЮ:\n" +"\n" +"Ідентифікатор профілю — рядок без пробілів і символів пунктуації,\n" +"що починається з літери і складається з послідовності літер, цифр, та " +"символів підкреслювання («_»).\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Імпортувати профіль, у якому не зберігатимуться видані сертифікати:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --summary \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Вилучити профіль сертифікатів:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Показати дані щодо профілю:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Зберегти налаштування профілю до файла:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Шукати профілі, у яких не зберігаються сертифікати:\n" +" ipa certprofile-find --store=false\n" +"\n" +"ФОРМАТ НАЛАШТУВАНЬ ПРОФІЛЮ:\n" +"\n" +"Налаштування профілю зберігаються у вигляді простого списку\n" +"властивостей, що використовується системою сертифікації Dogtag.\n" +"Підтримки формату XML не передбачено.\n" +"\n" +"Профілів, які керуються IPA, стосуються такі обмеження:\n" +"\n" +"- Під час імпортування профілю поле «profileId», якщо таке є, має\n" +" містити значення, що збігається з ідентифікатором, вказаним у рядку " +"команди.\n" +"\n" +"- Значенням поля «classId» має бути «caEnrollImpl»\n" +"\n" +"- Значенням поля «auth.instance_id» має бути «raCertAuth»\n" +"\n" +"- Має бути використано вхідний клас «certReqInputImpl» і вихідний\n" +" клас «certOutputImpl».\n" +"\n" + +msgid "invalid Profile ID" +msgstr "некоректний ідентифікатор профілю" + +msgid "Certificate Profile" +msgstr "Профіль сертифікатів" + +msgid "Certificate Profiles" +msgstr "Профілі сертифікатів" + +msgid "Profile configuration" +msgstr "Налаштування профілю" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "встановлено відповідність %(count)d профілю" +msgstr[1] "встановлено відповідність %(count)d профілів" +msgstr[2] "встановлено відповідність %(count)d профілів" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "Імпортовано профіль «%(value)s»" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "У даних профілю profileId вказано декілька разів: %(values)s" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" +"Ідентифікатор профілю, «%(cli_value)s», не збігається із вказаним у даних " +"профілю, «%(file_value)s»" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "Вилучено профіль «%(value)s»" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "Стандартний профіль «%(profile_id)s» не може бути вилучено" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Змінено профіль сертифікатів «%(value)s»" + +msgid "Certificate profiles cannot be renamed" +msgstr "Профілі сертифікатів не можна перейменовувати" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "Недостатні права доступу для внесення змін до профілю сертифікації." + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" +"\n" +"Групи вузлів.\n" +"\n" +"Керування групами вузлів. Корисні для застосування керування\n" +"до декількох вузлів на основі заснованого на вузлах керування\n" +"доступом (Host-based Access Control або HBAC).\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" додавання нової групи вузлів:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Додавання нової групи вузлів:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Додавання учасників до групи вузлів з використанням виразу Bash у фігурних " +"дужках):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Додавання групи вузлів як учасника іншої групи вузлів:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Вилучення вузла з групи вузлів:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Показ списку групи вузлів:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Додавання керівника учасниками:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Вилучення керівника учасниками\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Вилучення групи вузлів:\n" +" ipa hostgroup-del baltimore\n" + +msgid "host groups" +msgstr "групи вузлів" + +msgid "Host Group" +msgstr "Група вузлів" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Додано групу вузлів «%(value)s»" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"Мережеву групу з назвою «%s» вже створено. Групи вузлів і мережеві групи " +"мають спільний простір назв." + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Вилучено групу вузлів «%(value)s»" + +msgid "hostgroup" +msgstr "група вузлів" + +msgid "privileged hostgroup" +msgstr "привілейована група вузлів" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Змінено групу вузлів «%(value)s»" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "встановлено відповідність %(count)d групи вузлів" +msgstr[1] "встановлено відповідність %(count)d груп вузлів" +msgstr[2] "встановлено відповідність %(count)d груп вузлів" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" +"Додати записи користувачів, які можуть керувати учасниками цієї групи вузлів." + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" +"Вилучити записи користувачів, які можуть керувати учасниками цієї групи " +"вузлів." + +msgid "kerberos ticket policy settings" +msgstr "параметри правил квитків kerberos" + +msgid "Kerberos Ticket Policy" +msgstr "Правила квитків Kerberos" + +msgid "OTP max life" +msgstr "Макс. строк дії OTP" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "Максимальний строк дії квитка ключа OTP (у секундах)" + +msgid "OTP max renew" +msgstr "Макс. вік поновлення OTP" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" +"Максимальний вік, протягом якого можливе поновлення квитка ключа OTP (у " +"секундах)" + +msgid "RADIUS max life" +msgstr "Макс. строк дії RADIUS" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "Максимальний строк дії квитка RADIUS (у секундах)" + +msgid "RADIUS max renew" +msgstr "Макс. вік поновлення RADIUS" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" +"Максимальний вік, протягом якого можливе поновлення квитка PKINIT (у " +"секундах)" + +msgid "PKINIT max life" +msgstr "Макс. строк дії PKINIT" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "Максимальний строк дії квитка PKINIT (у секундах)" + +msgid "PKINIT max renew" +msgstr "Макс. вік поновлення PKINIT" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" +"Максимальний вік, протягом якого можливе поновлення квитка PKINIT (у " +"секундах)" + +msgid "Hardened max life" +msgstr "Макс. строк дії Hardened" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "Максимальний строк дії квитка Hardened (у секундах)" + +msgid "Hardened max renew" +msgstr "Макс. вік поновлення Hardened" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" +"Максимальний вік, протягом якого можливе поновлення квитка Hardened (у " +"секундах)" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "Не вдалося прочитати правила щодо квитків для %s" + +msgid "Default ticket policy could not be read" +msgstr "Не вдалося прочитати типові правила щодо квитків" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" +"Не вдалося прочитати фільтр походження (originfilter) UPG Definition. " +"Переконайтеся, що у вас є відповідні права доступу." + +msgid "" +"\n" +"IPA locations\n" +msgstr "" +"\n" +"Місця IPA\n" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" +"\n" +"Робота з місцями DNS\n" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" +"\n" +" Знайти усі місця:\n" +" ipa location-find\n" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" +"\n" +" Показати певне місце:\n" +" ipa location-show location\n" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" +"\n" +" Додати запис місця:\n" +" ipa location-add location --description 'My location'\n" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" +"\n" +" Вилучити запис місця:\n" +" ipa location-del location\n" + +msgid "location" +msgstr "місце" + +msgid "locations" +msgstr "місця" + +msgid "IPA Locations" +msgstr "Місця IPA" + +msgid "IPA Location" +msgstr "Місце IPA" + +msgid "Location name" +msgstr "Назва місця" + +msgid "IPA location name" +msgstr "Назва місця IPA" + +msgid "IPA Location description" +msgstr "Опис місця IPA" + +msgid "Servers" +msgstr "Сервери" + +msgid "Servers that belongs to the IPA location" +msgstr "Сервери, що належать до запису місця IPA" + +msgid "Advertised by servers" +msgstr "Повідомлено серверами" + +msgid "List of servers which advertise the given location" +msgstr "Вивести список серверів, які повідомляють про вказане місце" + +msgid "Add a new IPA location." +msgstr "Додати новий запис місця IPA." + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "Додано запис місця IPA «%(value)s»" + +msgid "Delete an IPA location." +msgstr "Вилучити місце IPA." + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Вилучено запис місця IPA «%(value)s»" + +msgid "IPA Server" +msgstr "Сервер IPA" + +msgid "Modify information about an IPA location." +msgstr "Змінити дані щодо місця IPA." + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "Змінено запис місця IPA «%(value)s»" + +msgid "Search for IPA locations." +msgstr "Шукати місця IPA." + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "встановлено відповідність %(count)d місця IPA" +msgstr[1] "встановлено відповідність %(count)d місць IPA" +msgstr[2] "встановлено відповідність %(count)d місць IPA" + +msgid "Display information about an IPA location." +msgstr "Показати дані щодо місця IPA." + +msgid "Servers in location" +msgstr "Сервери у місці" + +msgid "Role" +msgstr "Роль" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "Додано роль «%(value)s»" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "Вилучено роль «%(value)s»" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "Змінено роль «%(value)s»" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "встановлено відповідність %(count)d ролі" +msgstr[1] "встановлено відповідність %(count)d ролей" +msgstr[2] "встановлено відповідність %(count)d ролей" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Додано користувача «%(value)s»" + +msgid "Default group for new users is not POSIX" +msgstr "Типовою групою для нових користувачів не є група POSIX" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Вилучено користувача «%(value)s»" + +#, python-format +msgid "%s: user is already preserved" +msgstr "%s: запис користувача вже захищено" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Змінено користувача «%(value)s»" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "Відновлено обліковий запис користувача «%(value)s»" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "користувач «%s» вже є активним" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "Обліковий запис користувача етапу «%(value)s»" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "Вимкнено обліковий запис користувача «%(value)s»" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "Увімкнено обліковий запис користувача «%(value)s»" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" +"\n" +" Розблокувати обліковий запис користувача\n" +"\n" +" Обліковий запис може бути заблоковано, якщо відповідно до правил " +"безпеки\n" +" користувач перевищить обмеження на кількість введення помилкових " +"паролів\n" +" протягом певного часу. Запис блокується тимчасово, його може бути\n" +" розблоковано адміністратором." + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "Розблоковано обліковий запис «%(value)s»" + +msgid "Failed logins" +msgstr "Кількість невдалих спроб увійти" + +msgid "Last successful authentication" +msgstr "Останнє успішне розпізнавання" + +msgid "Last failed authentication" +msgstr "Останнє невдале розпізнавання" + +msgid "Time now" +msgstr "Поточний час" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" +"\n" +" Стан блокування облікового запису користувача\n" +"\n" +" Обліковий запис може бути заблоковано, якщо введено неправильний пароль\n" +" забагато разів протягом певного проміжку часу, який визначається " +"правилами\n" +" роботи з паролями. Блокування облікового запису є тимчасовим станом, " +"його\n" +" може бути розблоковано адміністратором.\n" +"\n" +" Ця програма з’єднується з кожним основним вузлом IPA і показує стан\n" +" блокування на кожному з них.\n" +"\n" +" Щоб визначити, чи слід блокувати обліковий запис на певному сервері, " +"слід\n" +" виконати порівняння кількості помилкових спроб входу та час останньої\n" +" невдалої спроби з еталонними значеннями. Обліковий запис буде " +"заблоковано,\n" +" якщо буде перевищено кількість maxfail помилкових спроб протягом " +"проміжку\n" +" часу failinterval. Відповідні значення задаються правилами обробки " +"паролів,\n" +" пов’язаними з обліковим записом користувача.\n" +"\n" +" Зміни до лічильника помилкових спроб входу вносяться, лише коли " +"користувач\n" +" виконує спробу увійти, тому може статися так, що обліковий запис " +"заблоковано,\n" +" хоча час, що минув з останньої помилкової спроби, перевищує час " +"блокування\n" +" (lockouttime), заданий правилам обробки паролів. Це означає, що " +"користувач\n" +" може увійти до системи знову. " + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "Помилка %(host)s: %(error)s" + +#, python-format +msgid "%(host)s failed" +msgstr "Помилка %(host)s" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "Обліковий запис вимкнено: %(disabled)s" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "Додано сертифікати до запису користувача «%(value)s»" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Вилучено сертифікати із запису користувача «%(value)s»" + +msgid "Add new principal alias to the user entry" +msgstr "Додати новий псевдонім реєстраційного запису до запису користувача" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Додано нові псевдоніми до запису користувача «%(value)s»" + +msgid "Remove principal alias from the user entry" +msgstr "Вилучити псевдонім реєстраційного запису із запису користувача" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Вилучити псевдоніми із запису користувача «%(value)s»" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" +"\n" +"Жетони OTP\n" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"Керування жетонами OTP.\n" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" +"\n" +"У IPA передбачено підтримку використання жетонів OTP для багатофакторного " +"розпізнавання.\n" +"За допомогою цього коду уможливлюється керування жетонами OTP.\n" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" +"\n" +" Додати новий жетон:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Перевірити жетон:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" +"\n" +" Змінити постачальника:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Вилучити жетон:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "OTP token" +msgstr "Жетон OTP" + +msgid "OTP tokens" +msgstr "Жетони OTP" + +msgid "OTP Tokens" +msgstr "Жетони OTP" + +msgid "OTP Token" +msgstr "Жетон OTP" + +msgid "URI" +msgstr "URI" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "Додано жетон OTP «%(value)s»" + +msgid "cannot be empty" +msgstr "не може бути порожнім" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Вилучено жетон OTP «%(value)s»" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Змінено жетон OTP «%(value)s»" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "встановлено відповідність %(count)d жетона OTP" +msgstr[1] "встановлено відповідність %(count)d жетони OTP" +msgstr[2] "встановлено відповідність %(count)d жетонів OTP" + +msgid "A list of ACI values" +msgstr "Список значень ACI" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "type, filter, subtree і targetgroup є взаємовиключними" + +msgid "ACI prefix is required" +msgstr "Слід вказати префікс ACI" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"слід вказати хоча б одне з: type, filter, subtree, targetgroup, attrs або " +"memberof" + +msgid "filter and memberof are mutually exclusive" +msgstr "filter і memberof не можна використовувати разом" + +msgid "group, permission and self are mutually exclusive" +msgstr "group, permission і self не можна використовувати разом" + +msgid "One of group, permission or self is required" +msgstr "Слід вказати одне зі значень, group, permission або self" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "Групи з назвою «%s» не існує" + +msgid "empty filter" +msgstr "порожній фільтр" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Синтаксична помилка: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "некоректне DN (%s)" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "Не знайдено ACI з назвою «%s»" + +msgid "ACI object." +msgstr "Об'єкт ACI." + +msgid "ACIs" +msgstr "ACI" + +msgid "ACI" +msgstr "ACI" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "Створено ACI «%(value)s»" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "Вилучено ACI «%(value)s»" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "Змінено ACI «%(value)s»" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "встановлено відповідність %(count)d ACI" +msgstr[1] "встановлено відповідність %(count)d ACI" +msgstr[2] "встановлено відповідність %(count)d ACI" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "ACI перейменовано на «%(value)s»" msgid "" "\n" @@ -19467,9 +25020,6 @@ msgstr "Сервер назв «%(host)s» не має відповідного msgid "Managedby permission" msgstr "Права доступу managedby" -msgid "DNS is not configured" -msgstr "DNS не налаштовано" - msgid "cannot be used when a zone is specified" msgstr "не можна використовувати, якщо вказано зону" @@ -19703,1827 +25253,731 @@ msgstr "Тестовий запуск" msgid "Do not update records only return expected records" msgstr "Не оновлювати записи, лише повернути список очікуваних записів" +#, python-brace-format msgid "" -"\n" -"DNS server configuration\n" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." msgstr "" -"\n" -"Налаштування сервера DNS\n" +"Рівень домену не може бути піднято до {0}, слід розв’язати наявні конфлікти " +"реплікації." -msgid "" -"\n" -"Manipulate DNS server configuration\n" +msgid "Server does not support domain level functionality" msgstr "" -"\n" -"Керування налаштуваннями сервера DNS\n" +"На сервері не передбачено підтримки функціональних можливостей рівня домену" -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" -"\n" -" Показати налаштування певного сервера DNS:\n" -" ipa dnsserver-show\n" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" -"\n" -" Оновити налаштування для вказаного сервера DNS:\n" -" ipa dnsserver-mod\n" - -msgid "DNS server" -msgstr "Сервер DNS" - -msgid "DNS servers" -msgstr "Сервери DNS" - -msgid "DNS Servers" -msgstr "Сервери DNS" - -msgid "DNS Server" -msgstr "Сервер DNS" - -msgid "DNS Server name" -msgstr "Назва сервера DNS" - -msgid "SOA mname override" -msgstr "Перевизначення mname SOA" - -msgid "SOA mname (authoritative server) override" -msgstr "Перевизначити mname SOA (довірений сервер)" - -msgid "Forwarders" -msgstr "Переспрямовувачі" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Окремі переспрямовувачі для серверів. Нетиповий порт можна вказати для " -"кожного переспрямовувача за допомогою стандартної конструкції «IP_АДРЕСА " -"port ПОРТ»" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" -"Умовні правила переспрямування для окремого сервера. Встановіть значення " -"«none» для вимикання переспрямовувача загального рівня для цієї зони. Якщо " -"ви встановите це значення, умовні переспрямовувачі зони не братимуться до " -"уваги." - -msgid "Modify DNS server configuration" -msgstr "Змінити налаштування сервера DNS" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "Змінено запис сервера DNS «%(value)s»" - -msgid "Search for DNS servers." -msgstr "Шукати сервери DNS." - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "встановлено відповідність %(count)d сервера DNS" -msgstr[1] "встановлено відповідність %(count)d серверів DNS" -msgstr[2] "встановлено відповідність %(count)d серверів DNS" - -msgid "IPA DNS Server is not installed" -msgstr "Сервер DNS IPA не встановлено" - -msgid "Display configuration of a DNS server." -msgstr "Показати налаштування сервера DNS." - -msgid "Add a new DNS server." -msgstr "Додати новий запис сервера DNS." - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "Додано новий запис сервера DNS «%(value)s»" - -msgid "Delete a DNS server" -msgstr "Вилучити запис сервера DNS" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Вилучено сервер DNS «%(value)s»" - -msgid "REST API is not logged in." -msgstr "Вхід до програмного інтерфейсу REST не виконано." - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" -"Відповідь від програмного інтерфейсу REST CA, що не відповідає 2xx: " -"%(status)d. %(explanation)s" - -msgid "Unable to communicate with CMS" -msgstr "Не вдалося обмінятися даними з CMS" - -msgid "Response from CA was not valid JSON" -msgstr "Відповідь від CA не була коректним кодом JSON" - -msgid "Host-based access control commands" -msgstr "Команди керування доступом на основі вузлів" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" -"\n" -"Служби HBAC\n" -"\n" -"Служби PAM, якими може керувати HBAC. Назва, використана тут, має\n" -"відповідати назві служби, з якою працює PAM.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нову службу HBAC:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Змінити вже створену службу HBAC:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Шукати служби HBAC. У нашому прикладі буде повернуто два результати\n" -" службу FTP і щойно додану службу tftp:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Вилучення служби HBAC:\n" -" ipa hbacsvc-del tftp\n" -"\n" - -msgid "HBAC services" -msgstr "Служби HBAC" - -msgid "HBAC Services" -msgstr "Служби HBAC" - -msgid "HBAC Service" -msgstr "Служба HBAC" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "Додано службу HBAC «%(value)s»" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Вилучено службу HBAC «%(value)s»" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "Змінено службу HBAC «%(value)s»" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "встановлено відповідність %(count)d служби HBAC" -msgstr[1] "встановлено відповідність %(count)d служб HBAC" -msgstr[2] "встановлено відповідність %(count)d служб HBAC" - -msgid "HBAC service group" -msgstr "група служб HBAC" - -msgid "HBAC service groups" -msgstr "Група служб HBAC" - -msgid "HBAC Service Groups" -msgstr "Група служб HBAC" - -msgid "HBAC Service Group" -msgstr "Група служб HBAC" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Додано групу служб HBAC «%(value)s»" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "Вилучено групу служб HBAC «%(value)s»" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "Змінено групу служб HBAC «%(value)s»" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "встановлено відповідність %(count)d групи служб HBAC" -msgstr[1] "встановлено відповідність %(count)d груп служб HBAC" -msgstr[2] "встановлено відповідність %(count)d груп служб HBAC" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" -"\n" -"Користувачі етапу\n" -"\n" -"Керування записами користувачів етапу.\n" -"\n" -"Записи користувачів етапу перебувають безпосередньо у контейнері:\n" -"\"cn=stage users, cn=accounts, cn=provisioning, SUFFIX\".\n" -"Користувач не може пройти розпізнавання за допомогою цих записів\n" -"(навіть якщо записи містять реєстраційні дані) і є кандидатами на\n" -"перетворення на активні записи.\n" -"\n" -"Записи активних користувачів є користувачами Posix, що перебувають\n" -"безпосередньо у контейнері: \"cn=accounts, SUFFIX\".\n" -"Користувач може пройти розпізнавання за допомогою активних записів,\n" -"якщо для них передбачено реєстраційні дані\n" -"\n" -"Вилучені записи користувачів є записами користувачів Posix, що\n" -"перебувають безпосередньо у контейнері: \"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Користувачі не можуть проходити розпізнавання за допомогою цих\n" -"записів (навіть якщо записи містять реєстраційні дані)\n" -"\n" -"Контейнер користувачів етапу містить записи\n" -" - створені командами 'stageuser-add', які є користувачами Posix\n" -" - створені зовнішньою системою забезпечення\n" -"\n" -"Коректний запис користувача етапу МАЄ відповідати таким вимогам:\n" -" - RDN запису має значення 'uid'\n" -" - ipaUniqueID має значення 'autogenerate'\n" -"\n" -"У IPA передбачено підтримку широкого діапазону форматів імен користувачів,\n" -"але слід зважати на різноманітні обмеження, які можуть стосуватися " -"середовища,\n" -"у якому ви працюєте. Наприклад, імена користувачів, що починаються з цифри,\n" -"або імена користувачів, довжина яких перевищує певну довжину, можуть\n" -"призвести до проблем у деяких системах UNIX.\n" -"Для зміни формату, який дозволено інструментами IPA, скористайтеся командою\n" -"'ipa config-mod'.\n" -"\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нового користувача етапу:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Додати користувача етапу з контейнера вилучених користувачів\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" - -msgid "Stage Users" -msgstr "Користувачі етапу" - -msgid "Stage User" -msgstr "Користувач етапу" - -msgid "stage user" -msgstr "користувач етапу" - -msgid "stage users" -msgstr "користувачі етапу" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Додано користувача етапу «%(value)s»" - -msgid "givenname is required" -msgstr "слід вказати ім’я" - -msgid "sn is required" -msgstr "слід вказати sn" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "не повинне перевищувати %(len)d символів у довжину" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Вилучено запис користувача етапу «%(value)s»" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Змінено запис користувача етапу «%(value)s»" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "встановлено відповідність %(count)d користувача" -msgstr[1] "встановлено відповідність %(count)d користувачів" -msgstr[2] "встановлено відповідність %(count)d користувачів" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Активувати користувача етапу «%(value)s»" - -msgid "Entry RDN is not 'uid'" -msgstr "RDN запису не належить до «uid»" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "У запису немає атрибута «%(attribute)s»" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "запис активного користувача із іменем «%(user)s» вже існує" - -#, python-format -msgid "Stage user %s activated" -msgstr "Активовано користувача етапу %s" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "Додати один або декілька сертифікатів запису користувача етапу" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "Додано сертифікати до запису користувача етапу «%(value)s»" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "Вилучити один або декілька сертифікатів запису користувача етапу" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "Вилучено сертифікати із запису користувача етапу «%(value)s»" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" -"Додати новий псевдонім реєстраційного запису до запису користувача етапу" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "Додано нові псевдоніми до запису користувача етапу «%(value)s»" - -msgid "Remove principal alias from the stageuser entry" -msgstr "Вилучити псевдонім реєстраційного запису із запису користувача етапу" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "Вилучено псевдоніми із запису користувача етапу «%(value)s»" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" -"Додати одну або декілька прив’язок сертифікатів до запису користувача етапу." - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" -"Вилучити одну або декілька прив’язок сертифікатів із запису користувача " -"етапу." - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" -"\n" -"Топологія\n" -"\n" -"Керування топологією реплікації на домені рівня 1.\n" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" -"\n" -"Дані сервера IPA зберігаються на сервері LDAP у двох суфіксах:\n" -"* суфіксі домену, наприклад «dc=example,dc=com», тут містяться усі пов’язані " -"із доменом дані\n" -"* суфіксі ca, «o=ipaca», наявні лише на серверах із встановленим CA. Тут\n" -" містяться дані для компонента сервера сертифікатів.\n" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" -"\n" -"Дані, що зберігаються на серверах IPA, відтворюються на інших серверах IPA. " -"Спосіб\n" -"відтворення (реплікації) визначається угодами. Угоди реплікації потрібно\n" -"встановлювати для обох суфіксів окремо. На рівні домену 0 угодами керують\n" -"програми ipa-replica-manage та ipa-csreplica-manage. На рівні доменів 1\n" -"керування виконується централізовано за допомогою команд «ipa topology*».\n" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" -"\n" -"Угоди представляються сегментами топології. Типово, сегмент топології\n" -"представляється 2 угодами реплікації — по одній для кожного напрямку, " -"наприклад\n" -"від A до B і від B до A. Створення односпрямованих сегментів заборонене.\n" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" -"\n" -"Щоб перевірити, що жоден сервер не від’єднано у топології вказаного " -"суфікса,\n" -"скористайтеся такою командою:\n" -" ipa topologysuffix-verify $suffix\n" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -"\n" -"Приклади:\n" -" Знайти усі сервери IPA:\n" -" ipa server-find\n" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" -"\n" -" Знайти усі суфікси:\n" -" ipa topologysuffix-find\n" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" -"\n" -" Додати сегмент топології до суфікса «domain»:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" -"\n" -" Додати сегмент топології до суфікса «ca»:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" -"\n" -" Вивести список усіх сегментів топології у суфіксі «domain»:\n" -" ipa topologysegment-find domain\n" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" -"\n" -" Вивести список усіх сегментів топології у суфіксі «ca»:\n" -" ipa topologysegment-find ca\n" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" -"\n" -" Вилучити сегмент топології у суфіксі «domain»:\n" -" ipa topologysegment-del domain segment_name\n" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" -"\n" -" Вилучити сегмент топології у суфіксі «ca»:\n" -" ipa topologysegment-del ca segment_name\n" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" -"\n" -" Перевірити топологію суфікса «domain»:\n" -" ipa topologysuffix-verify domain\n" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" -"\n" -" Перевірити топологію суфікса «ca»:\n" -" ipa topologysuffix-verify ca\n" +msgid "Domain Level cannot be lowered." +msgstr "Не можна знижувати рівень домену." #, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "Керування топологією потребує мінімального рівня домену {0} " - -msgid "segment" -msgstr "сегмент" - -msgid "segments" -msgstr "сегменти" - -msgid "Topology Segments" -msgstr "Сегменти топології" - -msgid "Topology Segment" -msgstr "Сегмент топології" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "лівий вузол не є вузлом топології: %(leftnode)s" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "правий вузол не є вузлом топології: %(rightnode)s" - -msgid "left node and right node must not be the same" -msgstr "лівий і правий вузли повинні бути різними вузлами" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "у лівому вузлі ({host}) не передбачено підтримки суфіксів «{suff}»" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "у правому вузлі ({host}) не передбачено підтримки суфіксів «{suff}»" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "встановлено відповідність %(count)d сегмента" -msgstr[1] "встановлено відповідність %(count)d сегментів" -msgstr[2] "встановлено відповідність %(count)d сегментів" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Додано сегмент «%(value)s»" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Вилучено сегмент «%(value)s»" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Змінено сегмент «%(value)s»" - -#, python-format -msgid "%(value)s" -msgstr "%(value)s" - -msgid "left or right node has to be specified" -msgstr "слід вказати лівий або правий вузол" - -msgid "only one node can be specified" -msgstr "можна вказувати лише один вузол" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "Оновлення реплікації для сегмента: надіслано запит щодо «%(pkey)s»." - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "Зупиняємо реплікацію для сегмента: надіслано запит щодо «%(pkey)s»." - -msgid "suffixes" -msgstr "суфікси" - -msgid "Topology suffixes" -msgstr "Суфікси топології" - -msgid "Topology suffix" -msgstr "Суфікс топології" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "встановлено відповідність %(count)d суфікса топології" -msgstr[1] "встановлено відповідність %(count)d суфіксів топології" -msgstr[2] "встановлено відповідність %(count)d суфіксів топології" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Вилучено суфікс топології «%(value)s»" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "Додано суфікс топології «%(value)s»" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Змінено суфікс топології «%(value)s»" +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" +"Не можна підняти рівень домену до {0}, оскільки на сервері {1} не " +"передбачено підтримки такого рівня." msgid "" "\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" +"API Schema\n" msgstr "" "\n" -"Перевірити топологію реплікації для вказаного суфікса.\n" +"Схема API\n" + +msgid "" "\n" -"Перевірки, які виконуються:\n" -" 1. перевірка того, чи не є топологія від’єднаною. Іншими словами, чи є\n" -" шляхи реплікації між усіма серверами.\n" -" 2. перевірка того, чи немає у сервера перевищення рекомендованої\n" -" кількості узгоджень реплікації.\n" +"Provides API introspection capabilities.\n" +msgstr "" +"\n" +"Надає можливості інтроспекції програмного інтерфейсу.\n" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" +"\n" +" Показати подробиці щодо user-find:\n" +" ipa command-show user-find\n" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" +"\n" +" Знайти параметри user-find:\n" +" ipa param-find user-find\n" + +msgid "Documentation" +msgstr "Документація" + +msgid "Exclude from" +msgstr "Виключити з" + +msgid "Include in" +msgstr "Включити до" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "Результати мають містити лише атрибут основного ключа («%s»)" + +msgid "Help topic" +msgstr "Тема довідки" + +msgid "Version" +msgstr "Версія" + +msgid "Parameters" +msgstr "Параметри" + +msgid "Method of" +msgstr "Метод" + +msgid "Method name" +msgstr "Назва методу" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s: не знайдено %(oname)s" + +msgid "Display information about a command." +msgstr "Показати інформацію щодо команди." + +msgid "Search for commands." +msgstr "Шукати команди." + +msgid "Return command defaults" +msgstr "Повернути типові параметри команди" + +msgid "Display information about a class." +msgstr "Показати дані щодо класу." + +msgid "Search for classes." +msgstr "Шукати класи." + +msgid "Display information about a help topic." +msgstr "Показати дані щодо теми довідки." + +msgid "Search for help topics." +msgstr "Шукати у темах довідки." + +msgid "Required" +msgstr "Обов’язкове" + +msgid "Multi-value" +msgstr "Багато значень" + +msgid "Always ask" +msgstr "Завжди питати" + +msgid "CLI metavar" +msgstr "Метазмінна CLI" + +msgid "CLI name" +msgstr "Назва CLI" + +msgid "Confirm (password)" +msgstr "Підтвердження (пароль)" + +msgid "Default" +msgstr "Типовий" + +msgid "Default from" +msgstr "Типовий з" + +msgid "Label" +msgstr "Мітка" + +msgid "Convert on server" +msgstr "Перетворити на сервері" + +msgid "Option group" +msgstr "Група варіантів" + +msgid "Sensitive" +msgstr "З врахуванням" + +msgid "Positional argument" +msgstr "Позиційний аргумент" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(metaobject)s: не знайдено %(oname)s" + +msgid "Display information about a command parameter." +msgstr "Показати інформацію щодо параметра команди." + +msgid "Search command parameters." +msgstr "Шукати параметри команди." + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(command_name)s: не знайдено %(oname)s" + +msgid "Display information about a command output." +msgstr "Показати інформацію щодо даних, які виводить команда." + +msgid "Search for command outputs." +msgstr "Шукати за даними, які виводить команда." + +msgid "Store and provide schema for commands and topics" +msgstr "Збереження і надання схеми для команд і тем" + +msgid "Fingerprint of schema cached by client" +msgstr "Відбиток схеми, кешований клієнтом" + +msgid "Member service groups" +msgstr "Групи служб учасника" + +msgid "Member HBAC service groups" +msgstr "Групи служб HBAC учасника" + +msgid "Member ID user overrides" +msgstr "Перевизначення ідентифікатора учасника користувача" + +msgid "Indirect Member ID user overrides" +msgstr "Перевизначення ідентифікатора опосередкованого учасника користувача" + +msgid "Indirect Member permissions" +msgstr "Опосередковані права доступу учасника" + +msgid "Indirect Member HBAC service" +msgstr "Опосередкована служба HBAC учасника" + +msgid "Indirect Member HBAC service group" +msgstr "Опосередкована група служб HBAC учасника" + +msgid "Invalid format. Should be name=value" +msgstr "Некоректний формат. Правильний формат: назва=значення" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Основний вузол IPA не можна вилучати або вимикати" + +msgid "entry" +msgstr "запис" + +msgid "entries" +msgstr "записи" + +msgid "Entry" +msgstr "Запис" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "не знайдено запис контейнера (%(container)s)" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s: не знайдено %(oname)s" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "%(oname)s з назвою «%(pkey)s» вже існує" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "не можна використовувати атрибут «%(attribute)s»" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "ці атрибути не можна використовувати: %(attrs)s" + +msgid "attribute is not configurable" +msgstr "атрибут не можна налаштовувати" + +msgid "No such attribute on this entry" +msgstr "У цього запису немає такого атрибута" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "Перейменувати об’єкт %(ldap_obj_name)s" + +msgid "the entry was deleted while being modified" +msgstr "запис було вилучено під час внесення змін" + +#, python-format +msgid "%s" +msgstr "%s" + +#, python-format +msgid "%s to add" +msgstr "%s для додавання" + +#, python-format +msgid "%s to remove" +msgstr "%s для вилучення" #, python-format msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" -"Недостатні привілеї «write» до атрибута «krbLastPwdChange» запису «%s»." +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "Шукати %(searched_object)s у цих %(relationship)s %(ldap_object)s." + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "Шукати %(searched_object)s не у цих %(relationship)s %(ldap_object)s." + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "додано значення атрибута до запису %(value)s" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "вилучено значення атрибутів із запису %(value)s" + +msgid "one or more values to remove" +msgstr "одне або декілька значень для вилучення" + +msgid "The deny type has been deprecated." +msgstr "Тип «deny» вважається застарілим." + +msgid "HBAC rules" +msgstr "правила HBAC" + +msgid "HBAC Rules" +msgstr "Правила HBAC" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "Додано правило HBAC «%(value)s»" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "Вилучено правило HBAC «%(value)s»" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "Змінено правило HBAC «%(value)s»" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "встановлено відповідність %(count)d правила HBAC" +msgstr[1] "встановлено відповідність %(count)d правил HBAC" +msgstr[2] "встановлено відповідність %(count)d правил HBAC" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "Увімкнено правило HBAC «%(value)s»" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "Вимкнено правило HBAC «%(value)s»" + +msgid "Access time" +msgstr "Час доступу" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "Додати вузли джерела та групи вузлів до правила HBAC." msgid "" "\n" -"Groups of hosts.\n" +"Simulate use of Host-based access controls\n" "\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" -"\n" -"Групи вузлів.\n" -"\n" -"Керування групами вузлів. Корисні для застосування керування\n" -"до декількох вузлів на основі заснованого на вузлах керування\n" -"доступом (Host-based Access Control або HBAC).\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" додавання нової групи вузлів:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Додавання нової групи вузлів:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Додавання учасників до групи вузлів з використанням виразу Bash у фігурних " -"дужках):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Додавання групи вузлів як учасника іншої групи вузлів:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Вилучення вузла з групи вузлів:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Показ списку групи вузлів:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Додавання керівника учасниками:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Вилучення керівника учасниками\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Вилучення групи вузлів:\n" -" ipa hostgroup-del baltimore\n" - -msgid "host groups" -msgstr "групи вузлів" - -msgid "Host Group" -msgstr "Група вузлів" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Додано групу вузлів «%(value)s»" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"Мережеву групу з назвою «%s» вже створено. Групи вузлів і мережеві групи " -"мають спільний простір назв." - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Вилучено групу вузлів «%(value)s»" - -msgid "hostgroup" -msgstr "група вузлів" - -msgid "privileged hostgroup" -msgstr "привілейована група вузлів" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Змінено групу вузлів «%(value)s»" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "встановлено відповідність %(count)d групи вузлів" -msgstr[1] "встановлено відповідність %(count)d груп вузлів" -msgstr[2] "встановлено відповідність %(count)d груп вузлів" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" -"Додати записи користувачів, які можуть керувати учасниками цієї групи вузлів." - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" -"Вилучити записи користувачів, які можуть керувати учасниками цієї групи " -"вузлів." - -msgid "" -"\n" -"Vaults\n" -msgstr "" -"\n" -"Сховища\n" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" -"\n" -"Керування сховищами.\n" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" -"\n" -"Сховище — безпечне місце для зберігання ключа. Одне сховище\n" -"може містити лише один ключ. При архівуванні ключа до сховища,\n" -"наявний ключ (якщо такий існує) буде перезаписано.\n" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" -"\n" -"За правами власності сховища поділяються на три категорії:\n" -"* приватні сховища користувачів\n" -"* сховища служб\n" -"* сховища спільного використання\n" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" -"\n" -"Сховища користувачів — це сховища, власником яких є конкретний\n" -"користувач. Приватними є сховища, власником яких є поточний\n" -"користувач. Власником сховища служби є певна служба. Сховища\n" -"спільного використання належать адміністратору, але можуть\n" -"використовуватися іншими користувачами або службами.\n" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" -"\n" -"За механізмами захисту сховища поділяються на три\n" -"типи:\n" -"* стандартні сховища\n" -"* симетричні сховища\n" -"* асиметричні сховища\n" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" -"\n" -"У стандартному сховищі для передавання і зберігання реєстраційних\n" -"даних використовуються безпечні механізми. Реєстраційні дані\n" -"може бути отримано лише користувачами, які мають доступ\n" -"до сховища.\n" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" -"\n" -"Симетричне сховище є подібним до стандартного сховища, але\n" -"у ньому реєстраційні дані попередньо шифруються до\n" -"передавання за допомогою пароля.\n" -"Реєстраційні дані можна отримати лише за допомогою цього пароля.\n" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" -"\n" -"Асиметричне сховище є подібним до стандартного сховища, але\n" -"у ньому реєстраційні дані попередньо шифруються до\n" -"передавання за допомогою відкритого ключа.\n" -"Реєстраційні дані можна отримати лише за допомогою закритого ключа.\n" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Вивести список сховищ:\n" -" ipa vault-find\n" -" [--user <користувач>|--service <служба>|--shared]\n" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" -"\n" -" Додати стандартне сховище:\n" -" ipa vault-add <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --type standard\n" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" -"\n" -" Додати симетричне сховище:\n" -" ipa vault-add <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --type symmetric --password-file пароль.txt\n" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" -"\n" -" Додати асиметричне сховище:\n" -" ipa vault-add <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --type asymmetric --public-key-file відкритий_ключ.pem\n" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Показати сховище:\n" -" ipa vault-show <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" -"\n" -" Змінити опис сховища:\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --desc <опис>\n" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" -"\n" -" Змінити тип сховища:\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --type <тип>\n" -" [старий пароль/закритий ключ]\n" -" [новий пароль/відкритий ключ]\n" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" -"\n" -" Змінити пароль до симетричного сховища:\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --change-password\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --old-password <старий пароль>\n" -" --new-password <новий пароль>\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --old-password-file <файл старого пароля>\n" -" --new-password-file <файл нового пароля>\n" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" -"\n" -" Змінити ключ асиметричного сховища:\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --private-key-file <файл старого закритого ключа>\n" -" --public-key-file <файл нового відкритого ключа>\n" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Вилучити сховище:\n" -" ipa vault-del <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" -"\n" -" Вивести налаштування сховищ:\n" -" ipa vaultconfig-show\n" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" -"\n" -" Архівувати дані до стандартного сховища:\n" -" ipa vault-archive \n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --in <файл вхідних даних>\n" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Архівувати дані до симетричного сховища:\n" -" ipa vault-archive \n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --in <файл вхідних даних>\n" -" --password-file пароль.txt\n" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" -"\n" -" Архівувати дані до асиметричного сховища:\n" -" ipa vault-archive \n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --in <файл вхідних даних>\n" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" -"\n" -" Отримати дані зі стандартного сховища:\n" -" ipa vault-retrieve <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --out <файл результатів>\n" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Отримати дані з симетричного сховища:\n" -" ipa vault-retrieve <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --out <файл результатів>\n" -" --password-file password.txt\n" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" -"\n" -" Отримати дані з асиметричного сховища:\n" -" ipa vault-retrieve <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --out <файл результатів> --private-key-file private.pem\n" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Додати записи власників сховища:\n" -" ipa vault-add-owner <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Вилучити записи учасників сховища:\n" -" ipa vault-remove-owner <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Додати записи учасників сховища:\n" -" ipa vault-add-member <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Вилучити записи учасників сховища:\n" -" ipa vault-remove-member <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" -"\n" -" Об’єкт контейнера сховищ.\n" -" " - -msgid "vaultcontainer" -msgstr "контейнер сховищ" - -msgid "vaultcontainers" -msgstr "контейнери сховищ" - -msgid "Vault Containers" -msgstr "Контейнери сховищ" - -msgid "Vault Container" -msgstr "Контейнер сховищ" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" -"Параметри служби, спільного використання та користувача не можна вказувати " -"одночасно" - -msgid "Host is not supported" -msgstr "Підтримки вузла не передбачено" - -msgid "KRA service is not enabled" -msgstr "Службу KRA не увімкнено" - -msgid "Deleted vault container" -msgstr "Вилучено контейнер сховищ" - -#, python-format -msgid "owner %s" -msgstr "власник %s" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" -"\n" -" Об’єкт сховища.\n" -" " - -msgid "vault" -msgstr "сховище" - -msgid "vaults" -msgstr "сховища" - -msgid "Vaults" -msgstr "Сховища" - -msgid "Vault" -msgstr "Сховище" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" -"Параметри служби, спільного використання та користувача не можна вказувати " -"одночасно" - -msgid "Add a vault." -msgstr "Додати сховище." - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "Додано сховище «%(value)s»" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "Вилучено сховище «%(value)s»" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "встановлено відповідність %(count)d сховища" -msgstr[1] "встановлено відповідність %(count)d сховищ" -msgstr[2] "встановлено відповідність %(count)d сховищ" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" -"Параметри служби, спільного використання та користувача не можна вказувати " -"одночасно" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "Змінено сховище «%(value)s»" - -msgid "Vault configuration" -msgstr "Налаштування сховища" - -msgid "IPA KRA servers" -msgstr "Сервери KRA IPA" - -msgid "IPA servers configured as key recovery agents" -msgstr "" -"Сервери IPA, налаштовані як агенти відновлення ключів (key recovery agents)" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "Дані архівовано до сховища «%(value)s»" - -msgid "Retrieve data from a vault." -msgstr "Отримати дані зі сховища." - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Отримано дані зі сховища «%(value)s»" - -msgid "No archived data." -msgstr "Немає архівованих даних." - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "Перевіряє, чи увімкнено на якомусь із серверів службу KRA" - -msgid "netgroups" -msgstr "мережеві групи" - -msgid "Netgroups" -msgstr "Мережеві групи" - -msgid "Netgroup" -msgstr "Мережева група" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Додано групу мережеву групу «%(value)s»" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"Групу вузлів з назвою «%s» вже створено. Групи вузлів і мережеві групи мають " -"спільний простір назв." - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Вилучено мережеву групу «%(value)s»" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Змінено мережеву групу «%(value)s»" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "встановлено відповідність %(count)d групи" -msgstr[1] "встановлено відповідність %(count)d груп" -msgstr[2] "встановлено відповідність %(count)d груп" - -msgid "One time password commands" -msgstr "Команди для одноразового пароля" - -msgid "OTP configuration options" -msgstr "Параметри налаштування OTP" - -msgid "OTP Configuration" -msgstr "Налаштування OTP" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Змінити пароль «%(value)s»" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" -"\n" -"Засоби звітування щодо стану можливості PKINIT Kerberos\n" -"\n" -"Звітування щодо того, увімкнено чи вимкнено PKINIT у Kerberos на основних " -"елементах IPA\n" -"\n" -"ПРИКЛАДИ:\n" -" Вивести список станів PKINIT для усіх основних елементів:\n" -" ipa pkinit-status\n" -"\n" -" Перевірити стан PKINIT на «ipa.example.com»:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" Вивести список усіх основних елементів IPA із вимкненим PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"Докладніші дані щодо підтримки PKINIT:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" - -msgid "pkinit" -msgstr "pkinit" - -msgid "PKINIT" -msgstr "PKINIT" - -msgid "PKINIT status" -msgstr "стан PKINIT" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "Визначає, увімкнено чи вимкнено PKINIT" - -msgid "Report PKINIT status on the IPA masters" -msgstr "Звіт щодо стану PKINIT на основних елементах IPA" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "Встановлено відповідність %(count)s сервера" -msgstr[1] "Встановлено відповідність %(count)s серверів" -msgstr[2] "Встановлено відповідність %(count)s серверів" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" -"\n" -"Проксі-сервери RADIUS\n" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" -"\n" -"Керування проксі-серверами RADIUS.\n" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" -"\n" -"У IPA передбачено підтримку зовнішнього проксі-сервера RADIUS для\n" -"виконання розпізнавання OTP krb5. Це надає системі значної гнучкості\n" -"з метою інтеграції зі сторонніми службами розпізнавання.\n" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" -"\n" -" Додати новий сервер:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" -"\n" -" Знайти усі сервери, чиї запис містять рядок «example.com»:\n" -" ipa radiusproxy-find example.com\n" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" -"\n" -" Перевірити налаштування:\n" -" ipa radiusproxy-show MyRADIUS\n" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" -"\n" -" Змінити реєстраційні дані:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" -"\n" -" Вилучити налаштування:\n" -" ipa radiusproxy-del MyRADIUS\n" - -msgid "invalid attribute name" -msgstr "некоректна назва атрибута" - -msgid "invalid port number" -msgstr "некоректний номер порту" - -msgid "RADIUS proxy server" -msgstr "Проксі-сервер RADIUS" - -msgid "RADIUS proxy servers" -msgstr "Проксі-сервери RADIUS" - -msgid "RADIUS Servers" -msgstr "Сервери RADIUS" - -msgid "RADIUS Server" -msgstr "Сервер RADIUS" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "Додано проксі-сервер RADIUS «%(value)s»" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "Вилучити проксі-сервер RADIUS «%(value)s»" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "Змінено запис проксі-сервера RADIUS «%(value)s»" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "Встановлено відповідність %(count)d проксі-сервера RADIUS" -msgstr[1] "Встановлено відповідність %(count)d проксі-серверів RADIUS" -msgstr[2] "Встановлено відповідність %(count)d проксі-серверів RADIUS" - -msgid "A list of ACI values" -msgstr "Список значень ACI" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "type, filter, subtree і targetgroup є взаємовиключними" - -msgid "ACI prefix is required" -msgstr "Слід вказати префікс ACI" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" -"слід вказати хоча б одне з: type, filter, subtree, targetgroup, attrs або " -"memberof" - -msgid "filter and memberof are mutually exclusive" -msgstr "filter і memberof не можна використовувати разом" - -msgid "group, permission and self are mutually exclusive" -msgstr "group, permission і self не можна використовувати разом" - -msgid "One of group, permission or self is required" -msgstr "Слід вказати одне зі значень, group, permission або self" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "Групи з назвою «%s» не існує" - -msgid "empty filter" -msgstr "порожній фільтр" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Синтаксична помилка: %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "некоректне DN (%s)" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "Не знайдено ACI з назвою «%s»" - -msgid "ACI object." -msgstr "Об'єкт ACI." - -msgid "ACIs" -msgstr "ACI" - -msgid "ACI" -msgstr "ACI" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "Створено ACI «%(value)s»" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "Вилучено ACI «%(value)s»" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "Змінено ACI «%(value)s»" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "встановлено відповідність %(count)d ACI" -msgstr[1] "встановлено відповідність %(count)d ACI" -msgstr[2] "встановлено відповідність %(count)d ACI" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "ACI перейменовано на «%(value)s»" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" "\n" -"Налаштування сервера\n" +"Імітація використання керування доступом на основі вузлів (HBAC)\n" "\n" -"Керування типовими значеннями, які використовує IPA, та деякими з\n" -"придатних до зміни параметрів.\n" +"Правила HBAC керують тим, хто може отримувати доступ до певних служб на\n" +"певних вузлах.\n" +"Ви можете скористатися HBAC для керування тим, які користувачі або групи\n" +"на початковому вузлі можуть отримувати доступ до служби або групи служб\n" +"на вузлі призначення\n" "\n" -"ЗАУВАЖЕННЯ:\n" +"Оскільки застосування правил HBAC передбачає використання робочого\n" +"середовища, це додаток призначено для імітації обробки правил HBAC без\n" +"доступу до реального середовища\n" "\n" -"Тут зберігається значення параметра сповіщення щодо паролів\n" -"(--pwdexpnotify), отже його не буде скопійовано. Це значення поки що\n" -"не використовується для сповіщення користувачів щодо завершення строку дії\n" -"пароля.\n" +" Перевірити відповідність користувача з початкового вузла до служби на " +"іменованому\n" +" вузлі правилам уможливлення доступу.\n" "\n" -"Деякі з атрибутів придатні лише для читання, їх буде показано лише з метою\n" -"інформування. Серед цих атрибутів:\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" "\n" -"Основа призначення сертифіката: змінна основа призначення сертифіката,\n" -" наприклад O=EXAMPLE.COM. Цей атрибут можна налаштувати лише під час\n" -" встановлення.\n" -"Параметри додатка роботи з паролями: у поточній версії визначають додаткові\n" -" хеші, які створюються на основі пароля (можуть бути і інші умови).\n" +" --user, --host і --service є обов’язковими, інші можна не вказувати.\n" "\n" -"Під час встановлення списку пріоритетності для користувачів SELinux може " -"виникнути\n" -"потреба у додаванні лапок до значення, щоб оболонка не обробляла параметр.\n" +" Якщо вказано --rules, імітувати вмикання вказаних правил і перевірити\n" +" можливість входу користувача у разі використання лише цих правил.\n" "\n" -"Максимальна довжина назви вузла у Linux керується значенням\n" -"MAXHOSTNAMELEN у ядрі. Типовим значенням є 64. У деяких інших\n" -"операційних системах, наприклад у Solaris, можна використовувати у\n" -"назвах до 255 символів. Цей параметр надає гнучкості щодо довжини, але\n" -"у Linux його значення все одно обмежено максимальним можливим.\n" +" Якщо вказано --enabled, додати всі увімкнені правила HBAC до імітації\n" +"\n" +" Якщо вказано --disabled, додати всі вимкнені правила HBAC до імітації\n" +"\n" +" Якщо вказано --nodetail, не повертати даних щодо відповідних і " +"невідповідних\n" +" правил.\n" +"\n" +" Якщо вказано одночасно --rules і --enabled, виконати імітацію --rules _і_\n" +" всіх увімкнених правил IPA.\n" +"\n" +" Якщо не вказано --rules, буде виконано імітацію всіх увімкнених правил " +"IPA.\n" "\n" "ПРИКЛАДИ:\n" "\n" -" Показати основні налаштування сервера:\n" -" ipa config-show\n" +" 1. Використання всіх увімкнених правил HBAC у базі даних IPA:\n" +" $ ipa hbactest --user=a1a --srchost=foo --host=bar --service=sshd\n" +" --------------------\n" +" Надано доступ: Так\n" +" --------------------\n" +" невідповідне: my-second-rule\n" +" невідповідне: my-third-rule\n" +" невідповідне: myrule\n" +" відповідне: allow_all\n" "\n" -" Показати всі параметри налаштування:\n" -" ipa config-show --all\n" +" 2. Вимикання докладного резюме застосування правил:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Надано доступ: Так\n" +" --------------------\n" "\n" -" Змінити максимальну довжину імені користувача на 99 символів:\n" -" ipa config-mod --maxusername=99\n" +" 3. Перевірити явно вказані правила HBAC:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Надано доступ: Ні\n" +" ---------------------\n" +" невідповідне: my-second-rule\n" +" невідповідне: myrule\n" "\n" -" Змінити максимальну довжину назви вузла на 255 символів:\n" -" ipa config-mod --maxhostname=255\n" +" 4. Використання всіх увімкнених правил HBAC у базі даних IPA + явно " +"вказаних правил:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Доступ надано: Так\n" +" --------------------\n" +" невідповідне: my-second-rule\n" +" невідповідне: my-third-rule\n" +" невідповідне: myrule\n" +" відповідне: allow_all\n" "\n" -"Збільшити типовий час і максимальне обмеження на розмір пошуку\n" -" сервера IPA:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 5. Перевірка всіх вимкнених правил HBAC у базі даних IPA:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Надано доступ: Ні\n" +" ---------------------\n" +" невідповідне: new-rule\n" "\n" -" Встановити типовий домен електронної пошти користувачів:\n" -" ipa config-mod --emaildomain=example.com\n" +" 6. Перевірка всіх вимкнених правил HBAC у базі даних IPA + явно вказані " +"правила:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Надано доступ: Ні\n" +" ---------------------\n" +" невідповідне: my-second-rule\n" +" невідповідне: my-third-rule\n" +" невідповідне: myrule\n" "\n" -" Увімкнути режим перенесення, щоб зробити команду \"ipa migrate-ds\"\n" -" працездатною:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 7. Перевірка всіх (увімкнених і вимкнених) правил HBAC у базі даних " +"IPA:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Надано доступ: Так\n" +" --------------------\n" +" невідповідне: my-second-rule\n" +" невідповідне: my-third-rule\n" +" невідповідне: myrule\n" +" невідповідне: new-rule\n" +" відповідне: allow_all\n" "\n" -" Визначити пріоритетність користувачів у карті SELinux:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +"\n" +"HBACTEST І ДОВІРЕНІ ДОМЕНИ\n" +"\n" +"Якщо у IPA налаштовано зовнішній довірений домен, правила HBAC також\n" +"застосовуються до користувачів, що отримують доступ до ресурсів IPA з\n" +"з довіреного домену. Після цього користувачі і групи довіреного домену\n" +"(на їхні SID) може бути прив’язано до зовнішніх груп, які можуть бути\n" +"учасниками груп POSIX у IPA. Такі прив’язки може бути використано у\n" +"правилах HBAC, отже уможливлення доступу до ресурсів, захищених системою\n" +"HBAC.\n" +"\n" +"Додаток hbactest здатен тестувати доступ як для локальних користувачів\n" +"IPA, так і користувачів з довірених доменів, як за повним іменем\n" +"користувача, так і за SID користувачів. У таких іменах користувачів\n" +"має бути вказано скорочено довірений домен (ДОМЕН\\Administrator) або\n" +"назву реєстраційного запису користувача (UPN), Administrator@ad.test.\n" +"\n" +"Будь ласка, зауважте, що виконувати hbactest з аргументом користувача\n" +"довіреного домену у параметрі --user можуть виконувати лише учасники\n" +"групи «trust admins».\n" +"\n" +"ПРИКЛАД:\n" +"\n" +" 1. Перевірити, чи відповідає користувач з довіреного домену,\n" +" вказаний за коротким іменем, якомусь правилу:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Надано доступ: Так\n" +" --------------------\n" +" Відповідні правила: allow_all\n" +" Відповідні правила: can_login\n" +"\n" +" 2. Перевірити, чи відповідає користувач з довіреного домену,\n" +" вказаний за назвою його домену, якомусь правилу:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Надано доступ: Так\n" +" --------------------\n" +" Відповідні правила: allow_all\n" +" Невідповідні правила: can_login\n" +"\n" +" 3. Перевірити, чи відповідає користувач з довіреного домену\n" +" вказаний за SID, якомусь правилу:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Надано доступ: Так\n" +" --------------------\n" +" Відповідні правила: allow_all\n" +" Відповідні правила: can_login\n" +"\n" +" 4. Перевірити, чи відповідає інший користувач з довіреного домену,\n" +" вказаний за SID, якомусь правилу:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Надано доступ: Так\n" +" --------------------\n" +" Відповідні правила: allow_all\n" +" Відповідні правила: can_login\n" +"\n" +" 5. Перевірити, чи відповідає інший користувач з довіреного домену,\n" +" вказаний за коротким ім’ям, якомусь правилу:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Надано доступ: Так\n" +" --------------------\n" +" Відповідні правила: allow_all\n" +" Невідповідні правила: can_login\n" -msgid "must be at least 10" -msgstr "має бути принаймні 10" +msgid "Unresolved rules in --rules" +msgstr "Непридатні до обробки правила у --rules" -msgid "configuration options" -msgstr "параметри налаштування" +#, python-format +msgid "Access granted: %s" +msgstr "Надано доступ: %s" -msgid "Configuration" -msgstr "Налаштування" +msgid "ID View" +msgstr "Перегляд ідентифікаторів" -msgid "Maximum hostname length" -msgstr "Максимальна довжина назви вузла" +msgid "system ID View" +msgstr "системний перегляд ідентифікаторів" -msgid "IPA masters" -msgstr "Основні вузли IPA" +msgid "ID Views" +msgstr "Перегляди ідентифікаторів" -msgid "List of all IPA masters" -msgstr "Список усіх основних вузлів IPA" +msgid "User object overrides" +msgstr "Пріоритет об’єкта користувача" -msgid "Hidden IPA masters" -msgstr "Приховані основні сервери IPA" +msgid "Group object overrides" +msgstr "Пріоритет об’єкта групи" -msgid "List of all hidden IPA masters" -msgstr "Список усіх прихованих основних серверів IPA" - -msgid "IPA master capable of PKINIT" -msgstr "Основний IPA з можливістю PKINIT" - -msgid "IPA master which can process PKINIT requests" -msgstr "Основний IPA, який може обробляти запити PKINIT" - -msgid "IPA CA servers" -msgstr "Сервери CA IPA" - -msgid "IPA servers configured as certificate authority" -msgstr "Сервери IPA, які налаштовано як центри сертифікації" - -msgid "Hidden IPA CA servers" -msgstr "Приховані сервери CA IPA" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "Приховані сервери IPA, які налаштовано як служби сертифікації" - -msgid "IPA CA renewal master" -msgstr "Основних вузол відновлення CA IPA" - -msgid "Renewal master for IPA certificate authority" -msgstr "Основний сервер відновлення для центру сертифікації IPA" - -msgid "IPA servers configured as key recovery agent" -msgstr "Сервери IPA, які налаштовано як агенти відновлення ключів" - -msgid "Hidden IPA KRA servers" -msgstr "Приховані сервери KRA IPA" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "Приховані сервери IPA, які налаштовано як агенти відновлення ключів" +msgid "Hosts the view applies to" +msgstr "Вузли, до яких застосовний перегляд" msgid "Domain resolution order" msgstr "Порядок визначення доменів" @@ -21533,346 +25987,194 @@ msgstr "" "список доменів, відокремлених двокрапками, які використовуються для обробки " "коротких назв" -msgid "IPA servers configured as domain name server" -msgstr "Сервери IPA, які налаштовано як сервери назв доменів (DNS)" - -msgid "Hidden IPA DNS servers" -msgstr "Приховані сервери DNS IPA" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "Приховані сервери IPA, які налаштовано як сервери назв доменів" - -msgid "DNSec key master" -msgstr "Основний сервер ключів DNSec" - -msgid "Empty domain is not allowed" -msgstr "Не можна використовувати порожні домени" +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "Додано перегляд ідентифікаторів «%(value)s»" #, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "Некоректна назва домену, «%(domain)s»: %(e)s" +msgid "Deleted ID View \"%(value)s\"" +msgstr "Вилучено перегляд ідентифікаторів «%(value)s»" #, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "На сервері немає інформації щодо домену «%(domain)s»" +msgid "Modified an ID View \"%(value)s\"" +msgstr "Змінено перегляд ідентифікаторів «%(value)s»" #, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "Вимкнений домен «%(domain)s» не можна використовувати" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "встановлено відповідність %(count)d перегляду ідентифікаторів" +msgstr[1] "встановлено відповідність %(count)d переглядів ідентифікаторів" +msgstr[2] "встановлено відповідність %(count)d переглядів ідентифікаторів" -msgid "The group doesn't exist" -msgstr "Такої групи не існує" +msgid "Default Trust View cannot be applied on hosts" +msgstr "Типовий перегляд довіри не може бути застосовано до вузлів" -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "не можна використовувати атрибут «%s»" +msgid "not found" +msgstr "не знайдено" -msgid "May not be empty" -msgstr "Не може бути порожнім" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "Типовий атрибут %(obj)s, %(attr)s, не буде дозволено!" - -msgid "A list of SELinux users delimited by $ expected" +msgid "ID View cannot be applied to IPA master" msgstr "" -"Мало бути вказано список користувачів SELinux, записи якого відокремлено " -"символом $" +"Перегляд ідентифікаторів не може бути застосовано до основного сервера IPA" + +msgid "ID View already applied" +msgstr "Перегляд ідентифікаторів уже застосовано" + +msgid "value" +msgstr "значення" #, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "Користувач SELinux «%(user)s» є некоректним: %(error)s" +msgid "ID View applied to %i host." +msgstr "Перегляд ідентифікаторів застосовано до %i вузла." -msgid "SELinux user map default user not in order list" -msgstr "" -"Типового користувача типової карти користувачів SELinux немає у порядковому " -"списку" +#, python-format +msgid "ID View applied to %i hosts." +msgstr "Перегляд ідентифікаторів застосовано до %i вузлів." + +#, python-format +msgid "ID View cleared from %i host." +msgstr "Перегляд ідентифікаторів знято з %i вузла." + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "Перегляд ідентифікаторів знято з %i вузлів." msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" -"\n" -"Групи користувачів\n" -"\n" -"Керування групами користувачів, групами або службами. Типово нові групи є " -"групами POSIX. Ви можете\n" -"додати параметр --nonposix до команди group-add з метою позначення нової\n" -"групи як групи не-POSIX. Ви можете скористатися аргументом --posix команди " -"group-mod\n" -"для перетворення групи не-POSIX на групу POSIX. Групи POSIX не можна\n" -"перетворювати на групи не-POSIX.\n" -"\n" -"Кожна група повинна мати опис.\n" -"\n" -"Групи POSIX повинні мати номер ідентифікатора групи (GID). Передбачено " -"підтримку\n" -"зміни GID, але ця зміна може вплинути на права доступу до ваших файлів. Для\n" -"створення групи слід вказати GID. IPA створить одну групу автоматично, якщо\n" -"таку не вказано.\n" -"\n" -"\n" -"Учасниками груп можуть бути користувачі, інші групи і служби Kerberos. У\n" -"середовищах POSIX як учасників груп можна бути бачити лише користувачів, " -"але\n" -"для керування у межах IPA може бути використано вкладені групи і групи\n" -"служб.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додавання нової групи:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Додавання нової групи не-POSIX:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Перетворити групу не-POSIX на групу posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Додати нову групу POSIX з вказаним ідентифікатором групи:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Додати нову групу POSIX і надати IPA змогу призначити ідентифікатор:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Вилучення групи:\n" -" ipa group-del unixadmins\n" -"\n" -" Додати групу \"remoteadmins\" до групи \"localadmins\":\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Додати список користувачів до групи \"localadmins\":\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Додавання служб Kerberos до групи «printer admins»:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Вилучення користувача з групи \"localadmins\":\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Показати інформацію щодо іменованої групи.\n" -" ipa group-show localadmins\n" -"\n" -"Керівниками учасників груп є користувачі або групи, які можуть додавати " -"учасників\n" -"до групи або вилучати учасників з групи.\n" -"\n" -" Дозволити користувачу «test2» додавати або вилучати учасників з групи " -"«localadmins»:\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Відкликати права керування учасниками для користувача «test2» з " -"«localadmins»:\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"Участь із зовнішніх груп створено для того, щоб уможливити прив’язку\n" -"користувачів з довірених доменів до локальних груп POSIX з метою\n" -"використання ресурсів IPA. Зовнішніх користувачів слід додавати до груп\n" -"які спеціально створено як зовнішні або групи не-POSIX. Таку групу\n" -"слід пізніше включити до одної з груп POSIX.\n" -"\n" -"У поточній версії учасник зовнішньої групи є ідентифікатором безпеки\n" -"(Security Identifier або SID) визначеним довіреним доменом. Додавання\n" -"учасників зовнішньої групи можна виконати у форматі SID, DOM\\ім’я або\n" -"ім’я@домен. IPA намагатиметься визначити за переданим іменем SID за\n" -"допомогою використання Загального каталогу довіреного домену.\n" -"\n" -"Приклад:\n" -"\n" -"1. Створити групу для прив’язки адміністраторів довіреного домену до\n" -"відповідної локальної групи POSIX:\n" -"\n" -" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc='<домен.ad> admins' ad_admins\n" -"\n" -"2. Додати ідентифікатор Domain Admins домену <домен.ad> до\n" -"групи ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Дозволити прив’язку групи ad_admins_external до групи POSIX ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Показати список зовнішніх учасників групи ad_admins_external, щоб " -"визначити\n" -"їхні SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +"Ви намагаєтеся послатися на магічну приватну групу, яку не можна " +"перевизначати Спробуйте краще перевизначити атрибут GID запису відповідного " +"користувача." -msgid "groups" -msgstr "групи" - -msgid "User Group" -msgstr "Група користувачів" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Додано групу «%(value)s»" - -msgid "gid cannot be set for external group" -msgstr "Не можна встановлювати gid для зовнішньої групи" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Вилучено групу «%(value)s»" - -msgid "privileged group" -msgstr "привілейована група" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Змінено групу «%(value)s»" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "встановлено відповідність %(count)d групи" -msgstr[1] "встановлено відповідність %(count)d груп" -msgstr[2] "встановлено відповідність %(count)d груп" +msgid "IPA object" +msgstr "Об’єкт IPA" msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" msgstr "" -"Виконати дію з перевірки зовнішніх учасників без встановленої підтримки " -"Samba 4 неможливо. Переконайтеся, що вами встановлено на сервері підпакунок " -"IPA server-trust-ad." - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Без налаштовування власного домену не можна виконувати дію з приєднання. " -"Спочатку запустіть ipa-adtrust-install на сервері IPA." +"системні об’єкти IPA (наприклад системні групи, приватні групи користувачів) " +"не може бути перевизначено" #, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Від’єднати групу «%(value)s» від користувача «%(value)s»" +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "Не вдалося визначити прив’язку «%(anchor)s»." -msgid "not allowed to modify user entries" -msgstr "заборонено змінювати записи користувачів" +msgid "Default Trust View cannot contain IPA users" +msgstr "Типовий перегляд довіри не може містити користувачів IPA" -msgid "not allowed to modify group entries" -msgstr "заборонено змінювати записи груп" +msgid "Add a new ID override." +msgstr "Додати нове перевизначення ідентифікаторів." -msgid "Not a managed group" -msgstr "Не є керованою групою" +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "Додано перевизначення ідентифікаторів «%(value)s»" -msgid "Add users that can manage members of this group." -msgstr "Додати записи користувачів, які можуть керувати учасниками цієї групи." +msgid "Delete an ID override." +msgstr "Вилучити перевизначення ідентифікаторів." -msgid "Remove users that can manage members of this group." -msgstr "" -"Вилучити записи користувачів, які можуть керувати учасниками цієї групи." +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "Вилучено перевизначення ідентифікатора «%(value)s»" + +msgid "Modify an ID override." +msgstr "Змінити перевизначення ідентифікатора." + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "Змінено перевизначення ідентифікатора «%(value)s»" + +msgid "ID override" +msgstr "Перевизначення ідентифікатора" + +msgid "ID overrides cannot be renamed" +msgstr "Перевизначення ідентифікаторів не можна перейменовувати" + +msgid "Search for an ID override." +msgstr "Шукати перевизначення ідентифікатора." + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "встановлено відповідність %(count)d перевизначення ідентифікатора" +msgstr[1] "встановлено відповідність %(count)d перевизначень ідентифікаторів" +msgstr[2] "встановлено відповідність %(count)d перевизначень ідентифікаторів" + +msgid "Display information about an ID override." +msgstr "Показати дані щодо перевизначення ідентифікатора." + +msgid "User ID override" +msgstr "Перевизначення ідентифікатора користувача" + +msgid "User ID overrides" +msgstr "Перевизначення ідентифікатора користувача" + +msgid "Group ID override" +msgstr "Перевизначення ідентифікатора групи" + +msgid "Group ID overrides" +msgstr "Перевизначення ідентифікатора групи" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "Додати один або декілька сертифікатів запису idoverrideuser" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Додано сертифікати до запису idoverrideuser «%(value)s»" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "Вилучити один або декілька сертифікатів запису idoverrideuser" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "Вилучено сертифікати із запису idoverrideuser «%(value)s»" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "Додано перевизначення ідентифікатора користувача «%(value)s»" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Вилучено перевизначення ідентифікатора користувача «%(value)s»" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Змінено перевизначення ідентифікатора користувача «%(value)s»" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +"встановлено відповідність %(count)d перевизначення ідентифікатора користувача" +msgstr[1] "" +"встановлено відповідність %(count)d перевизначень ідентифікаторів " +"користувачів" +msgstr[2] "" +"встановлено відповідність %(count)d перевизначень ідентифікаторів " +"користувачів" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "Додано перевизначення ідентифікаторів групи «%(value)s»" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Вилучено перевизначення ідентифікаторів групи «%(value)s»" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "Змінено перевизначення ідентифікаторів групи «%(value)s»" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +"встановлено відповідність %(count)d перевизначення ідентифікаторів групи" +msgstr[1] "" +"встановлено відповідність %(count)d перевизначень ідентифікаторів групи" +msgstr[2] "" +"встановлено відповідність %(count)d перевизначень ідентифікаторів групи" msgid "" "\n" @@ -22175,1093 +26477,1303 @@ msgstr[0] "встановлено відповідність %(count)d запи msgstr[1] "встановлено відповідність %(count)d записів" msgstr[2] "встановлено відповідність %(count)d записів" -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"Жетони OTP\n" +msgid "delegation" +msgstr "уповноваження" -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" -"\n" -"Керування жетонами OTP.\n" +msgid "delegations" +msgstr "уповноваження" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" -"\n" -"У IPA передбачено підтримку використання жетонів OTP для багатофакторного " -"розпізнавання.\n" -"За допомогою цього коду уможливлюється керування жетонами OTP.\n" +msgid "Delegations" +msgstr "Уповноваження" -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" -"\n" -" Додати новий жетон:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Перевірити жетон:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" -"\n" -" Змінити постачальника:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Вилучити жетон:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" - -msgid "OTP token" -msgstr "Жетон OTP" - -msgid "OTP tokens" -msgstr "Жетони OTP" - -msgid "OTP Tokens" -msgstr "Жетони OTP" - -msgid "OTP Token" -msgstr "Жетон OTP" - -msgid "URI" -msgstr "URI" +msgid "Delegation" +msgstr "Уповноваження" #, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Додано жетон OTP «%(value)s»" - -msgid "cannot be empty" -msgstr "не може бути порожнім" +msgid "Added delegation \"%(value)s\"" +msgstr "Додано уповноваження «%(value)s»" #, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Вилучено жетон OTP «%(value)s»" +msgid "Deleted delegation \"%(value)s\"" +msgstr "Вилучено уповноваження «%(value)s»" #, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Змінено жетон OTP «%(value)s»" +msgid "Modified delegation \"%(value)s\"" +msgstr "Змінено уповноваження «%(value)s»" #, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "встановлено відповідність %(count)d жетона OTP" -msgstr[1] "встановлено відповідність %(count)d жетони OTP" -msgstr[2] "встановлено відповідність %(count)d жетонів OTP" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "встановлено відповідність %(count)d уповноваження" +msgstr[1] "встановлено відповідність %(count)d уповноваження" +msgstr[2] "встановлено відповідність %(count)d уповноважень" -msgid "" -"\n" -"Sudo Rules\n" +msgid "HBAC rule and local members cannot both be set" +msgstr "Не можна одночасно вказувати правило HBAC і локальних учасників" + +msgid "Invalid SELinux user name, must match {}" +msgstr "Некоректна назва запису користувача SELinux. Назва має відповідати {}" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" msgstr "" -"\n" -"Правила sudo\n" +"Некоректне значення MLS. Значення має відповідати {mls}, де максимальним " +"рівнем є {mls_max}" -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" msgstr "" -"\n" -"Sudo (su \"do\") надає системному адміністратору змогу делегувати\n" -"повноваження певним користувачам (або групам користувачів) на виконання\n" -"деяких (або усіх) команд від імені адміністратора (root) або іншого\n" -"користувача, зберігаючи водночас журнал виконання команд та\n" -"аргументів.\n" +"Некоректне значення MCS. Значення має відповідати {mcs}, де максимальною " +"категорією є {mcs_max}" -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" -"\n" -"У IPA передбачено декілька параметрів налаштовування роботи sudo:\n" -" Users: користувачі або групи, які можуть викликати sudo.\n" -" Hosts: вузли або групи вузлів, користувачі якого можуть викликати sudo.\n" -" Allow Command: специфічні команди, які можна виконувати за допомогою " -"sudo.\n" -" Deny Command: специфічні команди, які не можна виконувати за допомогою " -"sudo.\n" -" RunAsUser: користувачі або групи, від імені яких sudo виконуватиме " -"команди.\n" -" RunAsGroup: групи, ідентифікатори яких буде використано sudo для " -"виконання команд.\n" -" Options: різноманітні параметри sudoers, які можуть змінити поведінку " -"sudo.\n" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" -"\n" -"До правила sudo можна додати порядок, який керуватиме порядком\n" -"обробки записів (якщо такий порядок передбачено на клієнтському боці).\n" -"Порядок визначається числовим індексом, який не повинен повторюватися.\n" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" -"\n" -"У IPA передбачено визначений binddn для використання з sudo, який " -"розташовано у\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" -"\n" -"Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" -"\n" -" Створити правило:\n" -" ipa sudorule-add readfiles\n" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" -"\n" -" Додати об’єкт команди sudo і записати його як дозволену команду до " -"правила:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" -"\n" -" Додати запис вузла до правила:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" -"\n" -" Додати запис користувача до правила:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" -"\n" -" Додати особливе правило sudo для типового налаштовування сервера sudo:\n" -" ipa sudorule-add defaults\n" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" -"\n" -" Встановити типовий варіант дій для sudo:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" -"\n" -" Встановити переходи типу і ролі SELinux на правило:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" - -msgid "this option has been deprecated." -msgstr "цей параметр вважається застарілим." - -msgid "sudo rules" -msgstr "правила sudo" - -msgid "Sudo Rules" -msgstr "Правила Sudo" - -msgid "Sudo Rule" -msgstr "Правило sudo" +msgid "SELinux user map list not found in configuration" +msgstr "Списку карт користувачів SELinux у налаштуваннях не виявлено" #, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgid "SELinux user %(user)s not found in ordering list (in config)" msgstr "" -"порядковий номер повинен мати унікальне значення (%(order)d вже використано " -"для %(rule)s)" +"Запису користувача SELinux %(user)s не виявлено у порядковому списку (у " +"налаштуваннях)" + +msgid "SELinux User Map rule" +msgstr "Правило карти користувачів SELinux" + +msgid "SELinux User Map rules" +msgstr "Правила карти користувачів SELinux" + +msgid "SELinux User Maps" +msgstr "Карти користувачів SELinux" + +msgid "SELinux User Map" +msgstr "Карта користувачів SELinux" #, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Додано правило sudo «%(value)s»" +msgid "HBAC rule %(rule)s not found" +msgstr "Не знайдено правила HBAC %(rule)s" #, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Вилучено правило sudo «%(value)s»" +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "Додано карту користувачів SELinux «%(value)s»" #, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Змінено правило sudo «%(value)s»" +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "Вилучено карту користувачів SELinux «%(value)s»" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "Змінено карту користувачів SELinux «%(value)s»" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "встановлено відповідність %(count)d карти користувачів SELinux" +msgstr[1] "встановлено відповідність %(count)d карт користувачів SELinux" +msgstr[2] "встановлено відповідність %(count)d карт користувачів SELinux" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "Увімкнено карту користувачів SELinux «%(value)s»" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "Вимкнено карту користувачів SELinux «%(value)s»" + +msgid "" +"\n" +"IPA servers\n" +msgstr "" +"\n" +"Сервери IPA\n" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" +"\n" +"Отримати дані щодо встановлених серверів IPA.\n" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +" Знайти усі сервери:\n" +" ipa server-find\n" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" +"\n" +" Показати вказаний сервер:\n" +" ipa server-show ipa.example.com\n" + +msgid "server" +msgstr "сервер" + +msgid "servers" +msgstr "сервери" + +msgid "IPA Servers" +msgstr "Сервери IPA" + +msgid "Server location" +msgstr "Місце сервера" + +msgid "Service weight" +msgstr "Вага служб" + +msgid "Weight for server services" +msgstr "Вага служб сервера" + +msgid "Service relative weight" +msgstr "Відносна вага служб" + +msgid "Relative weight for server services (counts per location)" +msgstr "Відносна вага служб для сервера (обчислюється для окремого місця)" + +msgid "Enabled server roles" +msgstr "Увімкнені ролі сервера" + +msgid "List of enabled roles" +msgstr "Список усіх увімкнених ролей" + +msgid "Modify information about an IPA server." +msgstr "Змінити дані щодо сервера IPA." + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "Змінено запис сервера IPA «%(value)s»" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "встановлено відповідність %(count)d сервера IPA" +msgstr[1] "встановлено відповідність %(count)d серверів IPA" +msgstr[2] "встановлено відповідність %(count)d серверів IPA" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Вилучено сервер IPA «%(value)s»" + +msgid "Ignore topology errors" +msgstr "Ігнорувати помилки топології" + +msgid "Ignore topology connectivity problems after removal" +msgstr "Ігнорувати проблеми із з’єднуваністю топології після вилучення" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" +"Ігнорувати перевірку на те, чи є сервер, який вилучають, останнім сервером " +"CA або DNS" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" +"Пропустити перевірку того, чи вилучено останній основний сервер CA або " +"сервер DNS" + +msgid "Force server removal" +msgstr "Примусове вилучення сервера" + +msgid "Force server removal even if it does not exist" +msgstr "Примусове вилучення сервера, навіть якщо його не існує" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" +"Репліка є активним основним сервером ключів DNSSEC. Вилучення може зашкодити " +"вашій системі DNS. Будь ласка, спочатку вимкніть або замініть основний " +"сервер ключів DNSSEC." + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" +"Вилучення цього запису сервера залишить вашу встановлену систему без DNS." + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" +"Вилучення цього сервера заборонено, оскільки воно залишить вашу встановлену " +"систему без KRA." + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" +"Вилучення цього сервера заборонено, оскільки воно залишить вашу встановлену " +"систему без CA." + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "Ігноруємо ці попередження і продовжуємо процедуру вилучення" #, python-format msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" -"Значенням категорії %(type)s не можна встановлювати «all», якщо існують " -"дозволені %(objects)s" - -msgid "users" -msgstr "користувачі" - -msgid "command" -msgstr "команда" - -msgid "commands" -msgstr "команди" - -msgid "runAs user" -msgstr "користувач, від імені якого виконуватиметься" - -msgid "runAs users" -msgstr "користувачі, від імені яких виконуватиметься" - -msgid "group runAs" -msgstr "група, від імені якої виконуватиметься" - -msgid "runAs groups" -msgstr "групи, від імені яких виконуватиметься" +"Не вдалося вилучити %(principal)s memberPrincipal із запису s4u2proxy " +"%(dn)s: %(err)s" #, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "встановлено відповідність %(count)d правила sudo" -msgstr[1] "встановлено відповідність %(count)d правил sudo" -msgstr[2] "встановлено відповідність %(count)d правил sudo" +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "Не вдалося вилучити записи назви вузла DNA для %(master)s: %(err)s" -msgid "commands cannot be added when command category='all'" -msgstr "не можна додавати команди, якщо категорія команд=«all»" - -msgid "users cannot be added when runAs user or runAs group category='all'" +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" msgstr "" -"не можна додавати записи користувачів, якщо категорія запуску від імені " -"користувачів або запуску від імені груп=«all»" +"Не вдалося вилучити запис сервера %(master)s зі списку серверів: %(err)s" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "Не можна вказувати «%(name)s» як ім’я користувача у записі RunAsUser" +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "Не вдалося вилучити ключі Custodia для %(master)s: %(err)s" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "Назва групи «%(name)s» є неприйнятною для RunAsUser" +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "Не вдалося вилучити реєстраційні запис або ключі сервера: %(err)s" #, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "Назва групи «%(name)s» є неприйнятною для RunAsGroup" +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "Не вдалося вилучити записи DNS %(hostname)s: %(err)s" -msgid "commands for controlling sudo configuration" -msgstr "команди керування налаштуванням sudo" +msgid "You may need to manually remove them from the tree" +msgstr "Ймовірно, вам доведеться вилучити їх із ієрархії вручну" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "Примусово вилучаємо %(hostname)s" + +msgid "Ignoring topology connectivity errors." +msgstr "Ігноруємо помилки із з’єднуваністю топології." + +msgid "Server has already been deleted" +msgstr "Запис сервера вже вилучено" + +msgid "Agreements deleted" +msgstr "Угоди вилучено" + +msgid "Following segments were not deleted:" +msgstr "Вказані нижче сегменти не було вилучено:" + +msgid "not allowed to perform server connection check" +msgstr "не дозволено виконувати перевірку з’єднання сервера" + +msgid "Set enabled/hidden state of a server." +msgstr "Встановити стан увімкнено/приховано для сервера." + +msgid "State" +msgstr "Стан" + +msgid "Server state" +msgstr "Стан сервера" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "Змінено стан сервера «%(value)s»." + +msgid "Cannot hide CA renewal master." +msgstr "Не можна приховувати основний сервер оновлення CA." + +msgid "Cannot hide DNSSec key master." +msgstr "Не можна приховувати основний сервер ключів DNSSec." + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "Не можна приховувати останній увімкнений сервер %(name)s." msgid "" "\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" +"Session Support for IPA\n" msgstr "" "\n" -"Команди sudo\n" -"\n" -"Команди, використані як будівельні блоки для sudo\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Створення запису команди\n" -" ipa sudocmd-add --desc='Читання файлів журналу' /usr/bin/less\n" -"\n" -" Вилучення команди\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" - -msgid "sudo command" -msgstr "команда sudo" - -msgid "sudo commands" -msgstr "команди sudo" - -msgid "Sudo Commands" -msgstr "Команди sudo" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Додано команду sudo «%(value)s»" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Вилучено команду sudo «%(value)s»" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Змінено команду sudo «%(value)s»" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "встановлено відповідність %(count)d команди sudo" -msgstr[1] "встановлено відповідність %(count)d команд sudo" -msgstr[2] "встановлено відповідність %(count)d команд sudo" +"Підтримка сеансів для IPA\n" msgid "" "\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" +"Manage Certificate Authorities\n" msgstr "" "\n" -"Групи команд sudo\n" -"\n" -"Керування групами команд sudo.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нову групу команд sudo:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Вилучити групу команд sudo:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Керування участю групи команд sudo, команди:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Керування участю групи команд sudo, команди:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Показ групи команд sudo:\n" -" ipa sudocmdgroup-show admincmds\n" - -msgid "sudo command group" -msgstr "група команд sudo" - -msgid "sudo command groups" -msgstr "групи команд sudo" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Додано групу команд sudo «%(value)s»" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Вилучено групу команд sudo «%(value)s»" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Змінено групу команд sudo «%(value)s»" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "встановлено відповідність %(count)d групи команд sudo" -msgstr[1] "встановлено відповідність %(count)d груп команд sudo" -msgstr[2] "встановлено відповідність %(count)d груп команд sudo" +"Керування службами сертифікації\n" msgid "" "\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" msgstr "" "\n" -"Домени області\n" -"\n" -"Керування списком доменів, пов’язаних з областю IPA.\n" -"\n" -"Цей список є корисним для контролерів доменів з інших областей, які\n" -"мають встановити відносини довіри із цією областю IPA. Цим контролерам\n" -"потрібні дані щодо того, які запити слід переспрямовувати до KDC цієї\n" -"області IPA.\n" -"\n" -"Автоматичне керування: домен автоматично додається до списку доменів\n" -"області, коли створюється нова зона DNS, керована IPA. Те саме стосується\n" -"вилучення.\n" -"\n" -"Керована ззовні DNS: домени, які не керуються у DNS сервера IPA, має бути\n" -"вручну додано до списку за допомогою команди ipa realmdomains-mod.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Показати поточний список доменів області:\n" -" ipa realmdomains-show\n" -"\n" -" Замірити список доменів області:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Додати домен до списку доменів області:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Вилучити домен зі списку доменів області:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" - -msgid "Realm domains" -msgstr "Домени області" - -msgid "Realm Domains" -msgstr "Домени області" +"Підлеглі служби сертифікації (Sub-CA) можна додавати для обмежених під час " +"видання областю\n" +"сертифікатів X.509.\n" msgid "" "\n" -" Modify realm domains\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" "\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" +"Служби сертифікації увімкнено при створенні, але їхнє використання " +"регулюється ACL служб сертифікації,\n" +"якщо у оператора немає дозволу обходити ACL служб сертифікації (CA).\n" + +msgid "" "\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" +"\n" +"Усі слжуби сертифікації, окрім служби сертифікації «IPA», можна вимикати і " +"повторно вмикати. Вимикання\n" +"служби сертифікації призводить до заборони для неї видавати сертифікати, але " +"не впливає на\n" +"чинність її сертифіката.\n" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" +"\n" +"Усі записи служб сертифікації (окрім служби «IPA») можна вилучати. Вилучення " +"запису служби сертифікації\n" +"призводить до відкликання її підписувального сертифіката і вилучення " +"закритого ключа.\n" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" +"\n" +" Створити новий запис служби сертифікації, підлеглий щодо служби " +"сертифікації IPA (потребує прав доступу\n" +" «Система: Додати CA»):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" +"\n" +" Вимкнути службу сертифікації (потребує прав доступу «Система: Змінити " +"CA»):.\n" +"\n" +" ipa ca-disable puppet\n" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" +"\n" +" Повторно увімкнути службу сертифікації (потребує прав доступу «Система: " +"Змінити CA»):\n" +"\n" +" ipa ca-enable puppet\n" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" +"\n" +" Вилучити запис служби сертифікації (потребує прав доступу «Система: " +"Вилучити CA»; також потребує попереднього вимикання\n" +" CA):\n" +"\n" +" ipa ca-del puppet\n" + +msgid "Certificate Authority" +msgstr "Центр сертифікації" + +msgid "Certificate Authorities" +msgstr "Центри сертифікації" + +msgid "Name for referencing the CA" +msgstr "Назва до посилання на CA" + +msgid "Description of the purpose of the CA" +msgstr "Опис призначення CA" + +msgid "Authority ID" +msgstr "Ід. центру" + +msgid "Dogtag Authority ID" +msgstr "Ід. Dogtag центру" + +msgid "Subject DN" +msgstr "DN призначення" + +msgid "Subject Distinguished Name" +msgstr "Унікальна назва призначення" + +msgid "Issuer Distinguished Name" +msgstr "Унікальна назва видавця" + +msgid "Search for CAs." +msgstr "Шукати CA." + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "встановлено відповідність %(count)d CA" +msgstr[1] "встановлено відповідність %(count)d CA" +msgstr[2] "встановлено відповідність %(count)d CA" + +msgid "Display the properties of a CA." +msgstr "Показати властивості CA." + +msgid "Create a CA." +msgstr "Створити запис CA." + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "Створено запис CA «%(value)s»" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "Недостатні привілеї «add» для запису «%s»." + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "Нерозпізнані атрибути: %(attrs)s" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "DN призначення вже використано CA «%s»" + +msgid "Delete a CA (must be disabled first)." +msgstr "Вилучити службу сертифікації (її спочатку має бути вимкнено)." + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "Вилучено запис CA «%(value)s»" + +msgid "Insufficient privilege to delete a CA." +msgstr "Недостатні права доступу для вилучення запису CA." + +msgid "CA" +msgstr "CA" + +msgid "IPA CA cannot be deleted" +msgstr "CA IPA не може бути вилучено" + +msgid "Must be disabled first" +msgstr "Слід спочатку вимкнути" + +msgid "Modify CA configuration." +msgstr "Змінити налаштування CA." + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "Змінено CA «%(value)s»" + +msgid "Insufficient privilege to modify a CA." +msgstr "Недостатні права доступу для внесення змін до запису CA." + +msgid "Disable a CA." +msgstr "Вимкнути службу сертифікації." + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "Вимкнено службу сертифікації «%(value)s»" + +msgid "IPA CA cannot be disabled" +msgstr "Службу сертифікації IPA не можна вимикати" + +msgid "Enable a CA." +msgstr "Увімкнути службу сертифікації." + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "Увімкнено службу сертифікації «%(value)s»" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" +"\n" +"Прив’язка сертифікатів до профілів\n" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" +"\n" +"Керування налаштуваннями і правилами прив’язки сертифікатів до профілів.\n" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" +"\n" +"У IPA передбачено підтримку використання сертифікатів для розпізнавання. " +"Сертифікати\n" +"можуть зберігатися або у записі користувача (весь сертифікат у атрибуті\n" +"usercertificate), або просто прив’язуватися до запису користувача.\n" +"Цей код уможливлює керування правилами доступу до прив’язування сертифіката " +"до\n" +"запису користувача.\n" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" +"\n" +" Вивести загальні налаштування прив’язки сертифікатів до профілів:\n" +" ipa certmapconfig-show\n" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" +"\n" +" Змінити загальні налаштування прив’язки сертифікатів до профілів:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" +"\n" +" Створити правило прив’язування сертифікатів до профілів:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" +"\n" +" Змінити правило прив’язування сертифікатів до профілів:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" +"\n" +" Вимкнути правило прив’язування сертифікатів до профілів:\n" +" ipa certmaprule-disable rule1\n" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" +"\n" +" Увімкнути правило прив’язування сертифікатів до профілів:\n" +" ipa certmaprule-enable rule1\n" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" +"\n" +" Вивести дані щодо правила прив’язування сертифікатів до профілів:\n" +" ipa certmaprule-show rule1\n" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" +"\n" +" Знайти усі правила прив’язування сертифікатів до профілів із вказаним " +"доменом:\n" +" ipa certmaprule-find --domain example.com\n" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" +"\n" +" Вилучити правило прив’язування сертифікатів до профілів:\n" +" ipa certmaprule-del rule1\n" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" +"Домени «%s» не можна використовувати для застосування перевірки " +"altSecurityIdentities." + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" +"До довіреного домену Active Directory має бути застосовано правило прив'язки " +"з altSecurityIdentities, але з цим правилом не пов'язано жодного домену." + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "Домен %s не є ні доменом IPA, ні довіреним доменом." + +msgid "Certificate Identity Mapping configuration options" +msgstr "Параметри налаштування прив’язки сертифікатів до профілів" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "Загальні налаштування прив’язки сертифікатів до профілів" + +msgid "Prompt for the username" +msgstr "Запит щодо імені користувача" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" +"Запитувати ім’я користувача, якщо із сертифікатом пов’язано декілька профілів" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "Змінити налаштування прив’язки сертифікатів до профілів." + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "Показати поточні налаштування прив’язки сертифікатів до профілів." + +msgid "Certificate Identity Mapping Rules" +msgstr "Правила прив’язування сертифікатів до профілів" + +msgid "Certificate Identity Mapping Rule" +msgstr "Правило прив’язування сертифікатів до профілів" + +msgid "Certificate Identity Mapping Rule name" +msgstr "Назва правила прив’язування сертифікатів до профілів" + +msgid "Certificate Identity Mapping Rule description" +msgstr "Опис правила прив’язування сертифікатів до профілів" + +msgid "Mapping rule" +msgstr "Правило прив’язування" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" +"Правило, яке використовується для прив’язування сертифіката до запису " +"користувача" + +msgid "Matching rule" +msgstr "Правило відповідності" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" +"Правило, яке використовується для визначення того, чи придатний сертифікат " +"для розпізнавання" + +msgid "Domain where the user entry will be searched" +msgstr "Домен, у якому слід шукати запис користувача" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "Пріоритет правила (більше число — нижчий пріоритет)" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "Створити правило прив’язування сертифіката до профілів." + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Додано правило прив’язування сертифікатів до профілів «%(value)s»" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "Змінити правило прив’язування сертифікатів до профілів." + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Змінено правило прив’язування сертифікатів до профілів «%(value)s»" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "Шукати правила прив’язування сертифікатів до профілів." + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +"Встановлено відповідність %(count)d правила прив’язування сертифікатів до " +"профілів" +msgstr[1] "" +"Встановлено відповідність %(count)d правил прив’язування сертифікатів до " +"профілів" +msgstr[2] "" +"Встановлено відповідність %(count)d правил прив’язування сертифікатів до " +"профілів" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "Вивести дані щодо правила прив’язування сертифікатів до профілів." + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "Вилучити правило прив’язування сертифікатів до профілів." + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Вилучено правило прив’язування сертифікатів до профілів «%(value)s»" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "Увімкнути правило прив’язування сертифікатів до профілів." + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Увімкнено правило прив’язування сертифікатів до профілів «%(value)s»" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "Вимкнути правило прив’язування сертифікатів до профілів." + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Вимкнено правило прив’язування сертифікатів до профілів «%(value)s»" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" +"Не вдалося встановити з’єднання із sssd за допомогою SystemBus. Докладніший " +"опис — у файлі error_log" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" +"Не вдалося знайти користувачів за допомогою SystemBus. Докладніший опис — у " +"файлі error_log" + +msgid "User logins" +msgstr "Користувачі" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" " " msgstr "" "\n" -" Внесення змін до доменів області\n" +" Шукати користувачів, яких пов’язано із наданим сертифікатом.\n" "\n" -" Перевірка DNS: при додаванні домену до списку вручну типово\n" -" виконується перевірка DNS. Вона дає дані щодо прив'язки домену\n" -" до області IPA за рахунок перевірки того, чи містить запис TXT домену у\n" -" _kerberos TXT назву області IPA. Цю перевірку можна обійти, вказавши\n" -" параметр --force.\n" -"\n" -" Вилучення: коли вилучається домен області, який мав відповідну зону\n" -" DNS керовану IPA, також автоматично вилучається відповідний запис\n" -" TXT у зоні у _kerberos. Інші записи у зоні та сама зона лишаються\n" -" незмінними.\n" +" Для отримання списку відповідних користувачів ця команда покладається\n" +" на дані SSSD, отже, вона може повертати кешовані дані. Докладніше про\n" +" очищення кешу SSSD можна дізнатися із документації до sss_cache.\n" " " #, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" -"Запис зони DNS для кожного realmdomain має містити записи SOA або NS. Для %s " -"таких записів не виявлено" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "Вказані нижче домени не належать до цієї області: %(domains)s" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" -"Не вдалося виявити область таких доменів: %(domains)s. Якщо ці домени " -"належать до цієї області, будь ласка, створіть запис TXT _kerberos, що " -"міститиме «%(realm)s», на кожному з них." - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" -"Параметр --domain не можна використовувати разом із параметрами --add-domain " -"і --del-domain. Скористайтеся параметром --domain для визначення усього " -"списку доменів області явним чином. Щоб додати або вилучити окремі домени, " -"скористайтеся параметрами --add-domain/del-domain." - -msgid "IPA server domain cannot be omitted" -msgstr "Домен сервера IPA не можна пропускати" - -msgid "IPA server domain cannot be deleted" -msgstr "Домен сервера IPA не можна вилучати" +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "Встановлено відповідність %(count)s користувача" +msgstr[1] "Встановлено відповідність %(count)s користувачів" +msgstr[2] "Встановлено відповідність %(count)s користувачів" msgid "" "\n" -"Return information about currently authenticated identity\n" +"Server configuration\n" "\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" "\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" +"NOTES:\n" "\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" "\n" "EXAMPLES:\n" "\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" +" Show basic server configuration:\n" +" ipa config-show\n" "\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" +" Show all configuration options:\n" +" ipa config-show --all\n" "\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" "\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" msgstr "" "\n" -"Повернути дані щодо поточного розпізнаного профілю\n" +"Налаштування сервера\n" "\n" -"Команда визначення профілю повертає дані щодо того, як\n" -"отримати більше даних про профіль, розпізнаний для\n" -"цього запиту. Дані:\n" +"Керування типовими значеннями, які використовує IPA, та деякими з\n" +"придатних до зміни параметрів.\n" "\n" -" * тип об’єкта\n" -" * команда для отримання подробиць щодо об’єкта\n" -" * аргументи та параметри, які слід передати команді\n" +"ЗАУВАЖЕННЯ:\n" "\n" -"Дані повертаються у форматі словника. Нижче, як приклад,\n" -"наведено виведення у форматі «ключ: значення».\n" +"Тут зберігається значення параметра сповіщення щодо паролів\n" +"(--pwdexpnotify), отже його не буде скопійовано. Це значення поки що\n" +"не використовується для сповіщення користувачів щодо завершення строку дії\n" +"пароля.\n" "\n" -"Приклади:\n" +"Деякі з атрибутів придатні лише для читання, їх буде показано лише з метою\n" +"інформування. Серед цих атрибутів:\n" "\n" -" Пошук від імені користувача IPA:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" +"Основа призначення сертифіката: змінна основа призначення сертифіката,\n" +" наприклад O=EXAMPLE.COM. Цей атрибут можна налаштувати лише під час\n" +" встановлення.\n" +"Параметри додатка роботи з паролями: у поточній версії визначають додаткові\n" +" хеші, які створюються на основі пароля (можуть бути і інші умови).\n" "\n" -" Пошук від імені користувача довіреного домену:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" +"Під час встановлення списку пріоритетності для користувачів SELinux може " +"виникнути\n" +"потреба у додаванні лапок до значення, щоб оболонка не обробляла параметр.\n" "\n" -" Пошук від імені вузла:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" +"Максимальна довжина назви вузла у Linux керується значенням\n" +"MAXHOSTNAMELEN у ядрі. Типовим значенням є 64. У деяких інших\n" +"операційних системах, наприклад у Solaris, можна використовувати у\n" +"назвах до 255 символів. Цей параметр надає гнучкості щодо довжини, але\n" +"у Linux його значення все одно обмежено максимальним можливим.\n" "\n" -" Пошук від імені служби Kerberos:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" +"ПРИКЛАДИ:\n" +"\n" +" Показати основні налаштування сервера:\n" +" ipa config-show\n" +"\n" +" Показати всі параметри налаштування:\n" +" ipa config-show --all\n" +"\n" +" Змінити максимальну довжину імені користувача на 99 символів:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Змінити максимальну довжину назви вузла на 255 символів:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +"Збільшити типовий час і максимальне обмеження на розмір пошуку\n" +" сервера IPA:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Встановити типовий домен електронної пошти користувачів:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Увімкнути режим перенесення, щоб зробити команду \"ipa migrate-ds\"\n" +" працездатною:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Визначити пріоритетність користувачів у карті SELinux:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgid "Describe currently authenticated identity." -msgstr "Описати поточний розпізнаний профіль." +msgid "must be at least 10" +msgstr "має бути принаймні 10" -msgid "Object class name" -msgstr "Назва класу об’єктів" +msgid "configuration options" +msgstr "параметри налаштування" -msgid "Function to get details" -msgstr "Функція, подробиці щодо якої слід отримати" +msgid "Configuration" +msgstr "Налаштування" -msgid "Arguments to details function" -msgstr "Аргументи до функції details" +msgid "Maximum hostname length" +msgstr "Максимальна довжина назви вузла" -msgid "Cannot query Directory Manager with API" -msgstr "" -"Не вдалося опитати засіб керування каталогом за допомогою програмного " -"інтерфейсу" +msgid "IPA masters" +msgstr "Основні вузли IPA" -msgid "kerberos ticket policy settings" -msgstr "параметри правил квитків kerberos" +msgid "List of all IPA masters" +msgstr "Список усіх основних вузлів IPA" -msgid "Kerberos Ticket Policy" -msgstr "Правила квитків Kerberos" +msgid "Hidden IPA masters" +msgstr "Приховані основні сервери IPA" -msgid "OTP max life" -msgstr "Макс. строк дії OTP" +msgid "List of all hidden IPA masters" +msgstr "Список усіх прихованих основних серверів IPA" -msgid "OTP token maximum ticket life (seconds)" -msgstr "Максимальний строк дії квитка ключа OTP (у секундах)" +msgid "IPA master capable of PKINIT" +msgstr "Основний IPA з можливістю PKINIT" -msgid "OTP max renew" -msgstr "Макс. вік поновлення OTP" +msgid "IPA master which can process PKINIT requests" +msgstr "Основний IPA, який може обробляти запити PKINIT" -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" -"Максимальний вік, протягом якого можливе поновлення квитка ключа OTP (у " -"секундах)" +msgid "IPA CA servers" +msgstr "Сервери CA IPA" -msgid "RADIUS max life" -msgstr "Макс. строк дії RADIUS" +msgid "IPA servers configured as certificate authority" +msgstr "Сервери IPA, які налаштовано як центри сертифікації" -msgid "RADIUS maximum ticket life (seconds)" -msgstr "Максимальний строк дії квитка RADIUS (у секундах)" +msgid "Hidden IPA CA servers" +msgstr "Приховані сервери CA IPA" -msgid "RADIUS max renew" -msgstr "Макс. вік поновлення RADIUS" +msgid "Hidden IPA servers configured as certificate authority" +msgstr "Приховані сервери IPA, які налаштовано як служби сертифікації" -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" -"Максимальний вік, протягом якого можливе поновлення квитка PKINIT (у " -"секундах)" +msgid "IPA CA renewal master" +msgstr "Основних вузол відновлення CA IPA" -msgid "PKINIT max life" -msgstr "Макс. строк дії PKINIT" +msgid "Renewal master for IPA certificate authority" +msgstr "Основний сервер відновлення для центру сертифікації IPA" -msgid "PKINIT maximum ticket life (seconds)" -msgstr "Максимальний строк дії квитка PKINIT (у секундах)" +msgid "IPA servers configured as key recovery agent" +msgstr "Сервери IPA, які налаштовано як агенти відновлення ключів" -msgid "PKINIT max renew" -msgstr "Макс. вік поновлення PKINIT" +msgid "Hidden IPA KRA servers" +msgstr "Приховані сервери KRA IPA" -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" -"Максимальний вік, протягом якого можливе поновлення квитка PKINIT (у " -"секундах)" +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "Приховані сервери IPA, які налаштовано як агенти відновлення ключів" -msgid "Hardened max life" -msgstr "Макс. строк дії Hardened" +msgid "IPA servers configured as domain name server" +msgstr "Сервери IPA, які налаштовано як сервери назв доменів (DNS)" -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "Максимальний строк дії квитка Hardened (у секундах)" +msgid "Hidden IPA DNS servers" +msgstr "Приховані сервери DNS IPA" -msgid "Hardened max renew" -msgstr "Макс. вік поновлення Hardened" +msgid "Hidden IPA servers configured as domain name server" +msgstr "Приховані сервери IPA, які налаштовано як сервери назв доменів" -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" -"Максимальний вік, протягом якого можливе поновлення квитка Hardened (у " -"секундах)" +msgid "DNSec key master" +msgstr "Основний сервер ключів DNSec" + +msgid "Empty domain is not allowed" +msgstr "Не можна використовувати порожні домени" #, python-format -msgid "Ticket policy for %s could not be read" -msgstr "Не вдалося прочитати правила щодо квитків для %s" - -msgid "Default ticket policy could not be read" -msgstr "Не вдалося прочитати типові правила щодо квитків" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" -"Не вдалося прочитати фільтр походження (originfilter) UPG Definition. " -"Переконайтеся, що у вас є відповідні права доступу." - -msgid "" -"\n" -"IPA locations\n" -msgstr "" -"\n" -"Місця IPA\n" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" -"\n" -"Робота з місцями DNS\n" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" -"\n" -" Знайти усі місця:\n" -" ipa location-find\n" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" -"\n" -" Показати певне місце:\n" -" ipa location-show location\n" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" -"\n" -" Додати запис місця:\n" -" ipa location-add location --description 'My location'\n" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" -"\n" -" Вилучити запис місця:\n" -" ipa location-del location\n" - -msgid "location" -msgstr "місце" - -msgid "locations" -msgstr "місця" - -msgid "IPA Locations" -msgstr "Місця IPA" - -msgid "IPA Location" -msgstr "Місце IPA" - -msgid "Location name" -msgstr "Назва місця" - -msgid "IPA location name" -msgstr "Назва місця IPA" - -msgid "IPA Location description" -msgstr "Опис місця IPA" - -msgid "Servers" -msgstr "Сервери" - -msgid "Servers that belongs to the IPA location" -msgstr "Сервери, що належать до запису місця IPA" - -msgid "Advertised by servers" -msgstr "Повідомлено серверами" - -msgid "List of servers which advertise the given location" -msgstr "Вивести список серверів, які повідомляють про вказане місце" - -msgid "Add a new IPA location." -msgstr "Додати новий запис місця IPA." +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "Некоректна назва домену, «%(domain)s»: %(e)s" #, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Додано запис місця IPA «%(value)s»" - -msgid "Delete an IPA location." -msgstr "Вилучити місце IPA." +msgid "Server has no information about domain '%(domain)s'" +msgstr "На сервері немає інформації щодо домену «%(domain)s»" #, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Вилучено запис місця IPA «%(value)s»" +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "Вимкнений домен «%(domain)s» не можна використовувати" -msgid "IPA Server" -msgstr "Сервер IPA" - -msgid "Modify information about an IPA location." -msgstr "Змінити дані щодо місця IPA." +msgid "The group doesn't exist" +msgstr "Такої групи не існує" #, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "Змінено запис місця IPA «%(value)s»" +msgid "attribute \"%s\" not allowed" +msgstr "не можна використовувати атрибут «%s»" -msgid "Search for IPA locations." -msgstr "Шукати місця IPA." +msgid "May not be empty" +msgstr "Не може бути порожнім" #, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "встановлено відповідність %(count)d місця IPA" -msgstr[1] "встановлено відповідність %(count)d місць IPA" -msgstr[2] "встановлено відповідність %(count)d місць IPA" +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "Типовий атрибут %(obj)s, %(attr)s, не буде дозволено!" -msgid "Display information about an IPA location." -msgstr "Показати дані щодо місця IPA." +msgid "A list of SELinux users delimited by $ expected" +msgstr "" +"Мало бути вказано список користувачів SELinux, записи якого відокремлено " +"символом $" -msgid "Servers in location" -msgstr "Сервери у місці" +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "Користувач SELinux «%(user)s» є некоректним: %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" +"Типового користувача типової карти користувачів SELinux немає у порядковому " +"списку" + +msgid "REST API is not logged in." +msgstr "Вхід до програмного інтерфейсу REST не виконано." + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" +"Відповідь від програмного інтерфейсу REST CA, що не відповідає 2xx: " +"%(status)d. %(explanation)s" + +msgid "Unable to communicate with CMS" +msgstr "Не вдалося обмінятися даними з CMS" + +msgid "Response from CA was not valid JSON" +msgstr "Відповідь від CA не була коректним кодом JSON" msgid "" "\n" -"API Schema\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" msgstr "" "\n" -"Схема API\n" +"Вузли/Комп’ютери\n" +"\n" +"Вузол — це окремий комп’ютер. Термін може використовуватися у декількох " +"контекстах:\n" +"- записи служб, пов’язані з певним вузлом\n" +"- вузол зберігає реєстраційні дані вузол/служба\n" +"- вузол можна використовувати у правилах Host-based Access Control (HBAC)\n" +"- для усіх зареєстрованих клієнтів створюється запис вузла\n" msgid "" "\n" -"Provides API introspection capabilities.\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" msgstr "" "\n" -"Надає можливості інтроспекції програмного інтерфейсу.\n" +"РЕЄСТРАЦІЯ:\n" +"\n" +"Передбачено три сценарії реєстрації нових клієнтів:\n" +"\n" +"1. Ви реєструєтеся як повноцінний адміністратор. Запис вузла може існувати\n" +" або не існувати. Повноцінний адміністратор виконує роль hostadmin або є\n" +" учасником групи admins.\n" +"2. Ви реєструєтеся як адміністратор з обмеженими правами. Вузол вже має\n" +" існувати. Обмежений адміністратор виконує роль з привілеями\n" +" Host Enrollment.\n" +"3. Вузол було створено з одноразовим паролем.\n" msgid "" "\n" -" Show user-find details:\n" -" ipa command-show user-find\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" msgstr "" "\n" -" Показати подробиці щодо user-find:\n" -" ipa command-show user-find\n" +"ПОВТОРНА РЕЄСТРАЦІЯ:\n" +"\n" +"Вузол, якому вже колись було надано певну роль, але налаштування було " +"втрачено\n" +"(наприклад через знищення віртуальної машини), можна знову зареєструвати " +"(надати роль).\n" +"\n" +"Щоб дізнатися більше, зверніться до сторінок підручника (man) щодо ipa-" +"client-install.\n" +"\n" +"Запис вузла може, якщо потрібно, зберігати відомості щодо розташування, " +"запущеної\n" +"операційної системи тощо.\n" msgid "" "\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" msgstr "" "\n" -" Знайти параметри user-find:\n" -" ipa param-find user-find\n" +"Додати новий вузол:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" -msgid "Name" -msgstr "Назва" +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" +"\n" +" Вилучити вузол:\n" +" ipa host-del test.example.com\n" -msgid "Documentation" -msgstr "Документація" +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" +"\n" +" Додати новий вузол з одноразовим паролем:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgid "Exclude from" -msgstr "Виключити з" +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" +"\n" +"Додати новий вузол з випадковим одноразовим паролем:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgid "Include in" -msgstr "Включити до" +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" +"\n" +" Змінити відомості щодо вузла:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" +"\n" +" Вилучити відкриті ключі SSH вузла і оновити DNS відповідно до внесених " +"змін:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" +"\n" +"Вимкнути ключ Kerberos вузла, сертифікат SSL та усі його служби:\n" +" ipa host-disable test.example.com\n" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" +"\n" +"Додати вузол, який може керувати сховищем ключів та сертифікатом цього " +"вузла :\n" +" ipa host-add-managedby --hosts=test2 test\n" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" +"\n" +" Дозволити користувачеві створення таблиці ключів:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" + +msgid "Host" +msgstr "Вузол" + +msgid "Base-64 encoded host certificate" +msgstr "Сертифікат вузла у кодуванні Base-64" + +msgid "Serial Number" +msgstr "Серійний номер" + +msgid "Serial Number (hex)" +msgstr "Серійний номер (шістнадцятковий)" + +msgid "Authentication Indicators" +msgstr "Індикатори розпізнавання" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" +"Визначає список дозволених індикаторів розпізнавання. Скористайтеся " +"значенням «otp», щоб дозволити розпізнавання 2FA на основі OTP. " +"Скористайтеся значенням «radius», щоб дозволити розпізнавання 2FA на основі " +"RADIUS. Скористайтеся значенням «pkinit», щоб дозволити розпізнавання 2FA на " +"основі PKINIT. Скористайтеся значенням «hardened», щоб дозволити захищене " +"від простого перебирання розпізнавання за паролем на основі SPAKE або FAST. " +"Якщо індикатор не буде вказано, буде дозволено усі механізми." #, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "Результати мають містити лише атрибут основного ключа («%s»)" - -msgid "Help topic" -msgstr "Тема довідки" - -msgid "Version" -msgstr "Версія" - -msgid "Parameters" -msgstr "Параметри" - -msgid "Method of" -msgstr "Метод" - -msgid "Method name" -msgstr "Назва методу" +msgid "Added host \"%(value)s\"" +msgstr "Додано вузол «%(value)s»" #, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s: не знайдено %(oname)s" +msgid "Deleted host \"%(value)s\"" +msgstr "Вилучено вузол «%(value)s»" -msgid "Display information about a command." -msgstr "Показати інформацію щодо команди." +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "Вилучити записи A, AAAA, SSHFP і PTR вузлів, керованих DNS IPA" -msgid "Search for commands." -msgstr "Шукати команди." - -msgid "Return command defaults" -msgstr "Повернути типові параметри команди" - -msgid "Display information about a class." -msgstr "Показати дані щодо класу." - -msgid "Search for classes." -msgstr "Шукати класи." - -msgid "Display information about a help topic." -msgstr "Показати дані щодо теми довідки." - -msgid "Search for help topics." -msgstr "Шукати у темах довідки." - -msgid "Required" -msgstr "Обов’язкове" - -msgid "Multi-value" -msgstr "Багато значень" - -msgid "Always ask" -msgstr "Завжди питати" - -msgid "CLI metavar" -msgstr "Метазмінна CLI" - -msgid "CLI name" -msgstr "Назва CLI" - -msgid "Confirm (password)" -msgstr "Підтвердження (пароль)" - -msgid "Default" -msgstr "Типовий" - -msgid "Default from" -msgstr "Типовий з" - -msgid "Label" -msgstr "Мітка" - -msgid "Convert on server" -msgstr "Перетворити на сервері" - -msgid "Option group" -msgstr "Група варіантів" - -msgid "Sensitive" -msgstr "З врахуванням" - -msgid "Positional argument" -msgstr "Позиційний аргумент" +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "Не знайдено записів A, AAAA, SSHFP або PTR." #, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(metaobject)s: не знайдено %(oname)s" +msgid "Modified host \"%(value)s\"" +msgstr "Змінено вузол «%(value)s»" -msgid "Display information about a command parameter." -msgstr "Показати інформацію щодо параметра команди." +msgid "Password cannot be set on enrolled host." +msgstr "Не можна визначати пароль для вузла з визначеною роллю." -msgid "Search command parameters." -msgstr "Шукати параметри команди." +msgid "cn is immutable" +msgstr "cn є незмінним" #, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(command_name)s: не знайдено %(oname)s" +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "встановлено відповідність %(count)d вузла" +msgstr[1] "встановлено відповідність %(count)d вузлів" +msgstr[2] "встановлено відповідність %(count)d вузлів" -msgid "Display information about a command output." -msgstr "Показати інформацію щодо даних, які виводить команда." +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "Вимкнено вузол «%(value)s»" -msgid "Search for command outputs." -msgstr "Шукати за даними, які виводить команда." +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "Додано сертифікати до запису вузла «%(value)s»" -msgid "Store and provide schema for commands and topics" -msgstr "Збереження і надання схеми для команд і тем" +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Вилучено сертифікати із запису вузла «%(value)s»" -msgid "Fingerprint of schema cached by client" -msgstr "Відбиток схеми, кешований клієнтом" +msgid "Add new principal alias to host entry" +msgstr "Додати новий псевдонім реєстраційного запису до запису вузла" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Додано нові псевдоніми до запису вузла «%(value)s»" + +msgid "Remove principal alias from a host entry" +msgstr "Вилучити псевдонім реєстраційного запису із запису вузла" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Вилучити псевдоніми із запису вузла «%(value)s»" msgid "" "=======\n" @@ -23569,12 +28081,6 @@ msgstr "Діапазон ідентифікаторів" msgid "local domain range" msgstr "локальний діапазон доменів" -msgid "Active Directory domain range" -msgstr "Діапазон доменів Active Directory" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "Діапазон довіри Active Directory з атрибутами POSIX" - msgid "ID range type, one of allowed values" msgstr "Тип діапазону ідентифікаторів, одне з дозволених значень" @@ -23740,1671 +28246,6 @@ msgstr "Параметри dom-sid і secondary-rid-base не можна вик msgid "Options dom-sid and rid-base must be used together" msgstr "Параметри dom-sid і rid-base слід використовувати разом" -msgid "self service permission" -msgstr "права доступу автослужби" - -msgid "self service permissions" -msgstr "права доступу до автослужби" - -msgid "Self Service Permissions" -msgstr "Права доступу до самообслуговування" - -msgid "Self Service Permission" -msgstr "Права доступу автослужби" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Додано самообслуговування «%(value)s»" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Вилучено самообслуговування «%(value)s»" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Змінено самообслуговування «%(value)s»" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "встановлено відповідність %(count)d самообслуговування" -msgstr[1] "встановлено відповідність %(count)d самообслуговування" -msgstr[2] "встановлено відповідність %(count)d самообслуговувань" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" -"\n" -"Ролі сервера IPA\n" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" -"\n" -"Отримати стан ролей (сервер DNS, CA тощо), що надається основними серверами " -"IPA.\n" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" -"\n" -"Стан ролі може бути одним зі значень: enabled, configured або absent.\n" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" -"\n" -" Показати стан ролі «DNS server» на сервері:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" -"\n" -" Показати стан усіх ролей, назва яких містить «AD», на сервері:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" -"\n" -" Показати стан усіх налаштованих ролей на сервері:\n" -" ipa server-role-find ipa.example.com\n" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" -"\n" -" Показати неявну основну роль IPA:\n" -" ipa server-role-find --include-master\n" - -msgid "server role" -msgstr "роль сервера" - -msgid "server roles" -msgstr "ролі сервера" - -msgid "IPA Server Roles" -msgstr "Ролі сервера IPA" - -msgid "IPA Server Role" -msgstr "Роль сервера IPA" - -msgid "IPA server role name" -msgstr "Назва ролі сервера IPA" - -msgid "Role status" -msgstr "Стан ролі" - -msgid "Status of the role" -msgstr "Стан ролі" - -msgid "Show role status on a server" -msgstr "Показати стан ролі на сервері" - -msgid "Find a server role on a server(s)" -msgstr "Знайти роль сервера на серверах" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "встановлено відповідність %(count)s ролі сервера" -msgstr[1] "встановлено відповідність %(count)s ролей сервера" -msgstr[2] "встановлено відповідність %(count)s ролей сервера" - -msgid "Include IPA master entries" -msgstr "Включити основні записи IPA" - -msgid "roles" -msgstr "ролі" - -msgid "IPA role name" -msgstr "Назва ролі IPA" - -msgid "HBAC rule and local members cannot both be set" -msgstr "Не можна одночасно вказувати правило HBAC і локальних учасників" - -msgid "Invalid SELinux user name, must match {}" -msgstr "Некоректна назва запису користувача SELinux. Назва має відповідати {}" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" -"Некоректне значення MLS. Значення має відповідати {mls}, де максимальним " -"рівнем є {mls_max}" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" -"Некоректне значення MCS. Значення має відповідати {mcs}, де максимальною " -"категорією є {mcs_max}" - -msgid "SELinux user map list not found in configuration" -msgstr "Списку карт користувачів SELinux у налаштуваннях не виявлено" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" -"Запису користувача SELinux %(user)s не виявлено у порядковому списку (у " -"налаштуваннях)" - -msgid "SELinux User Map rule" -msgstr "Правило карти користувачів SELinux" - -msgid "SELinux User Map rules" -msgstr "Правила карти користувачів SELinux" - -msgid "SELinux User Maps" -msgstr "Карти користувачів SELinux" - -msgid "SELinux User Map" -msgstr "Карта користувачів SELinux" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "Не знайдено правила HBAC %(rule)s" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "Додано карту користувачів SELinux «%(value)s»" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "Вилучено карту користувачів SELinux «%(value)s»" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "Змінено карту користувачів SELinux «%(value)s»" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "встановлено відповідність %(count)d карти користувачів SELinux" -msgstr[1] "встановлено відповідність %(count)d карт користувачів SELinux" -msgstr[2] "встановлено відповідність %(count)d карт користувачів SELinux" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "Увімкнено карту користувачів SELinux «%(value)s»" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "Вимкнено карту користувачів SELinux «%(value)s»" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "{role}: такої ролі не знайдено" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "{attr}: немає такого атрибута" - -msgid "pyhbac is not installed." -msgstr "pyhbac не встановлено." - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" -"\n" -"Дії з сертифікатами IPA\n" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" -"\n" -"Реалізує набір команд для керування сертифікатами серверів SSL.\n" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" -"\n" -"Запити щодо сертифікатів існують у формі Certificate Signing Request (CSR)\n" -"і форматі PEM.\n" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" -"\n" -"Служба сертифікації dogtag використовує лише значення CN CSR і примусово " -"встановлює\n" -"решту параметрів призначення за налаштуваннями сервера.\n" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" -"\n" -"Сертифікат зберігається з реєстраційним записом, а реєстраційний запис\n" -"потребує вузла.\n" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" -"\n" -"Для того, щоб створити запит щодо сертифіката:\n" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" -"\n" -"* Вузол має існувати\n" -"* Служба має існувати (або слід скористатися параметром --add " -"дляавтоматичного додавання)\n" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" -"\n" -"ПОШУК:\n" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" -"\n" -"Шукати сертифікати можна за призначенням сертифіката, серійним номером,\n" -"причиною відкликання, датами чинності та датою видання.\n" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" -"\n" -"Якщо пошук виконується за датою _від, використовується порівняння >=, а " -"якщо\n" -"виконується пошук _до дати — порівняння <=. Поєднання обох пошуків " -"призводить\n" -"до пошуку з логічним поєднанням ТА.\n" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" -"\n" -"Дати обробляються як дати за Гринвічем, відповідно до дат визначених " -"усертифікатах.\n" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" -"\n" -"Формат дати є таким: РРРР-мм-дд.\n" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" -"\n" -" Створити запит щодо нового сертифіката і додати реєстраційний запис: ipa " -"cert-request --add --principal=HTTP/lion.example.com example.csr\n" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" -"\n" -" Отримати вже створений сертифікат:\n" -" ipa cert-show 1032\n" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" -"\n" -" Відкликати сертифікат (причини визначено у RFC 5280):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" -"\n" -" Вилучити сертифікат зі списку відкликання:\n" -" ipa cert-remove-hold 1032\n" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" -"\n" -" Перевірити стан запиту щодо підписування:\n" -" ipa cert-status 10\n" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" -"\n" -" Пошук сертифікатів за назвою вузла:\n" -" ipa cert-find --subject=ipaserver.example.com\n" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" -"\n" -" Пошук відкликаних сертифікатів за причиною:\n" -" ipa cert-find --revocation-reason=5\n" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" -"\n" -" Пошук сертифікатів за датою видання\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" -"\n" -" Пошук сертифікатів, власником яких є вказаний користувач:\n" -" ipa cert-find --user=user\n" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" -"\n" -" Перевірити сертифікат:\n" -" ipa cert-find --file=cert.pem --all\n" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" -"\n" -" Перевірити, чи є власником сертифіката вказаний користувач:\n" -" ipa cert-find --file=cert.pem --user=user\n" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" -"\n" -"У поточній версії IPA негайно виконує (або відхиляє) всі запити щодо\n" -"сертифікатів, отже дані щодо стану запиту не мають сенсу. Ці дані\n" -"можуть знадобитися у наступних версіях або у разі, якщо CA видає\n" -"сертифікат не одразу.\n" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" -"\n" -"Передбачено підтримку таких причин відкликання:\n" -"\n" - -msgid " * 0 - unspecified\n" -msgstr " * 0 - не визначено\n" - -msgid " * 1 - keyCompromise\n" -msgstr " * 1 - keyCompromise\n" - -msgid " * 2 - cACompromise\n" -msgstr " * 2 - cACompromise\n" - -msgid " * 3 - affiliationChanged\n" -msgstr " * 3 - affiliationChanged\n" - -msgid " * 4 - superseded\n" -msgstr " * 4 - superseded\n" - -msgid " * 5 - cessationOfOperation\n" -msgstr " * 5 - cessationOfOperation\n" - -msgid " * 6 - certificateHold\n" -msgstr " * 6 - certificateHold\n" - -msgid " * 8 - removeFromCRL\n" -msgstr " * 8 - removeFromCRL\n" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr " * 9 - privilegeWithdrawn\n" - -msgid " * 10 - aACompromise\n" -msgstr " * 10 - aACompromise\n" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" -"\n" -"Зауважте, що коди причини 7 не використовується. Докладніші дані у RFC " -"5280:\n" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" -"Реєстраційному запису «%(principal)s» не дозволено використовувати службу " -"сертифікації «%(ca)s» із профілем «%(profile_id)s» для видання сертифікатів." - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" -"enabledService/configuredService не перебуває у записі kdc ipaConfigString" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "Вузол «%(hostname)s» не є активним KDC" - -msgid "Issuing CA" -msgstr "Видавничий CA" - -msgid "Name of issuing CA" -msgstr "Назва видавничого CA" - -msgid "Base-64 encoded certificate." -msgstr "Сертифікат у кодуванні Base-64." - -msgid "Certificate chain" -msgstr "Ланцюжок сертифікації" - -msgid "X.509 certificate chain" -msgstr "Ланцюжок сертифікації X.509" - -msgid "Subject" -msgstr "Об’єкт" - -msgid "Subject email address" -msgstr "Адреса електронної пошти призначення" - -msgid "Subject DNS name" -msgstr "Назва DNS призначення" - -msgid "Subject X.400 address" -msgstr "Адреса X.400 призначення" - -msgid "Subject directory name" -msgstr "Назва каталогу призначення" - -msgid "Subject EDI Party name" -msgstr "Назва EDI Party призначення" - -msgid "Subject URI" -msgstr "Адреса призначення" - -msgid "Subject IP Address" -msgstr "IP-адреса призначення" - -msgid "Subject OID" -msgstr "OID призначення" - -msgid "Subject UPN" -msgstr "UPN призначення" - -msgid "Subject Kerberos principal name" -msgstr "Назва реєстраційного запису Kerberos призначення" - -msgid "Subject Other Name" -msgstr "Інша назва призначення" - -msgid "Issuer" -msgstr "Видавець" - -msgid "Issuer DN" -msgstr "DN видавця" - -msgid "Not Before" -msgstr "Не раніше" - -msgid "Not After" -msgstr "Не пізніше" - -msgid "Fingerprint (SHA1)" -msgstr "Відбиток (SHA1)" - -msgid "Fingerprint (SHA256)" -msgstr "Відбиток (SHA256)" - -msgid "Serial number (hex)" -msgstr "Серійний номер (шістнадцятковий)" - -msgid "Request status" -msgstr "Стан запиту" - -msgid "Include certificate chain in output" -msgstr "Включити ланцюжок сертифікації до виведення" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" -"автоматично додати реєстраційний запис, якщо його не існує (лише " -"реєстраційні записи служб)" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "Сертифікати krbtgt можуть використовувати лише профіль %s" - -msgid "No Common Name was found in subject of request." -msgstr "У темі запиту не було знайдено загальної назви (CN)." - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" -"назва вузла у предметі запиту «%(cn)s» не збігається із назвою або " -"альтернативними назвами реєстраційного запису «%(principal)s»" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" -"назва вузла у призначенні запиту, «%(cn)s», не збігається з назвою вузла " -"реєстраційного запису, «%(hostname)s»" - -msgid "DN commonName does not match user's login" -msgstr "У commonName DN не збігається із ім’ям користувача" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" -"emailAddress DN не збігається із жодною адресою електронної пошти користувача" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "Недостатні привілеї «write» до атрибута «userCertificate» запису «%s»." - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" -"використання типу альтернативної назви об’єкта %s заборонено для " -"реєстраційних записів користувачів" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" -"Реєстраційного запису служби для альтернативної назви об’єкта %s запиту щодо " -"сертифіката не існує" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" -"Недостатні привілеї для створення сертифіката з альтернативною назвою " -"призначення «%s»." - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" -"Реєстраційний запис «%s» у альтернативній назві об’єкта не відповідає " -"запитаному реєстраційному запису" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" -"RFC822Name не збігається зі жодною адресою електронної пошти користувача" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" -"використання типу альтернативної назви об’єкта %s заборонено для " -"реєстраційних записів, які не пов’язано із користувачами" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "Використання типу альтернативної назви об’єкта %s заборонено" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "Службу сертифікації «%s» вимкнено" - -msgid "'add' option" -msgstr "параметр «add»" - -msgid "The principal for this request doesn't exist." -msgstr "Реєстраційного запису для цього запиту не існує." - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "IP-адреса у subjectAltName (%s) є недоступною з назв DNS" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "IP-адреса у subjectAltName (%s) не містить запису PTR" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "PTR-запис для SAN IP (%s) не відповідає записам A/AAAA" - -msgid "Status" -msgstr "Стан" - -msgid "Revoked" -msgstr "Анульований" - -msgid "Revocation reason" -msgstr "Причина відкликання" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" -"Причина відкликання сертифіката (0-10). Введіть «ipa help cert», щоб " -"ознайомитися із подробицями причин відкликання. " - -#, python-format -msgid "Owner %s" -msgstr "Власник %s" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" -"Не знайдено сертифікат із серійним номером %(serial)s, виданий CA «%(ca)s»" - -msgid "7 is not a valid revocation reason" -msgstr "7 не є коректною причиною відкликання" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "Результати мають містити лише атрибут основного ключа («сертифікат»)" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "встановлено відповідність %(count)d сертифіката" -msgstr[1] "встановлено відповідність %(count)d сертифікатів" -msgstr[2] "встановлено відповідність %(count)d сертифікатів" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "Шукати сертифікати із вказаними %s власника." - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "Шукати сертифікати, власником яких не є %s." - -msgid "ID View" -msgstr "Перегляд ідентифікаторів" - -msgid "system ID View" -msgstr "системний перегляд ідентифікаторів" - -msgid "ID Views" -msgstr "Перегляди ідентифікаторів" - -msgid "User object overrides" -msgstr "Пріоритет об’єкта користувача" - -msgid "Group object overrides" -msgstr "Пріоритет об’єкта групи" - -msgid "Hosts the view applies to" -msgstr "Вузли, до яких застосовний перегляд" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Додано перегляд ідентифікаторів «%(value)s»" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "Вилучено перегляд ідентифікаторів «%(value)s»" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "Змінено перегляд ідентифікаторів «%(value)s»" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "встановлено відповідність %(count)d перегляду ідентифікаторів" -msgstr[1] "встановлено відповідність %(count)d переглядів ідентифікаторів" -msgstr[2] "встановлено відповідність %(count)d переглядів ідентифікаторів" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "Типовий перегляд довіри не може бути застосовано до вузлів" - -msgid "not found" -msgstr "не знайдено" - -msgid "ID View cannot be applied to IPA master" -msgstr "" -"Перегляд ідентифікаторів не може бути застосовано до основного сервера IPA" - -msgid "ID View already applied" -msgstr "Перегляд ідентифікаторів уже застосовано" - -msgid "value" -msgstr "значення" - -#, python-format -msgid "ID View applied to %i host." -msgstr "Перегляд ідентифікаторів застосовано до %i вузла." - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "Перегляд ідентифікаторів застосовано до %i вузлів." - -#, python-format -msgid "ID View cleared from %i host." -msgstr "Перегляд ідентифікаторів знято з %i вузла." - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "Перегляд ідентифікаторів знято з %i вузлів." - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" -"Ви намагаєтеся послатися на магічну приватну групу, яку не можна " -"перевизначати Спробуйте краще перевизначити атрибут GID запису відповідного " -"користувача." - -msgid "IPA object" -msgstr "Об’єкт IPA" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" -"системні об’єкти IPA (наприклад системні групи, приватні групи користувачів) " -"не може бути перевизначено" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "Не вдалося визначити прив’язку «%(anchor)s»." - -msgid "Default Trust View cannot contain IPA users" -msgstr "Типовий перегляд довіри не може містити користувачів IPA" - -msgid "Add a new ID override." -msgstr "Додати нове перевизначення ідентифікаторів." - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "Додано перевизначення ідентифікаторів «%(value)s»" - -msgid "Delete an ID override." -msgstr "Вилучити перевизначення ідентифікаторів." - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "Вилучено перевизначення ідентифікатора «%(value)s»" - -msgid "Modify an ID override." -msgstr "Змінити перевизначення ідентифікатора." - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "Змінено перевизначення ідентифікатора «%(value)s»" - -msgid "ID override" -msgstr "Перевизначення ідентифікатора" - -msgid "ID overrides cannot be renamed" -msgstr "Перевизначення ідентифікаторів не можна перейменовувати" - -msgid "Search for an ID override." -msgstr "Шукати перевизначення ідентифікатора." - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "встановлено відповідність %(count)d перевизначення ідентифікатора" -msgstr[1] "встановлено відповідність %(count)d перевизначень ідентифікаторів" -msgstr[2] "встановлено відповідність %(count)d перевизначень ідентифікаторів" - -msgid "Display information about an ID override." -msgstr "Показати дані щодо перевизначення ідентифікатора." - -msgid "User ID override" -msgstr "Перевизначення ідентифікатора користувача" - -msgid "User ID overrides" -msgstr "Перевизначення ідентифікатора користувача" - -msgid "Base-64 encoded user certificate" -msgstr "Сертифікат користувача у кодуванні Base-64" - -msgid "Group ID override" -msgstr "Перевизначення ідентифікатора групи" - -msgid "Group ID overrides" -msgstr "Перевизначення ідентифікатора групи" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "Додати один або декілька сертифікатів запису idoverrideuser" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Додано сертифікати до запису idoverrideuser «%(value)s»" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "Вилучити один або декілька сертифікатів запису idoverrideuser" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "Вилучено сертифікати із запису idoverrideuser «%(value)s»" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "Додано перевизначення ідентифікатора користувача «%(value)s»" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Вилучено перевизначення ідентифікатора користувача «%(value)s»" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "Змінено перевизначення ідентифікатора користувача «%(value)s»" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -"встановлено відповідність %(count)d перевизначення ідентифікатора користувача" -msgstr[1] "" -"встановлено відповідність %(count)d перевизначень ідентифікаторів " -"користувачів" -msgstr[2] "" -"встановлено відповідність %(count)d перевизначень ідентифікаторів " -"користувачів" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "Додано перевизначення ідентифікаторів групи «%(value)s»" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Вилучено перевизначення ідентифікаторів групи «%(value)s»" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Змінено перевизначення ідентифікаторів групи «%(value)s»" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -"встановлено відповідність %(count)d перевизначення ідентифікаторів групи" -msgstr[1] "" -"встановлено відповідність %(count)d перевизначень ідентифікаторів групи" -msgstr[2] "" -"встановлено відповідність %(count)d перевизначень ідентифікаторів групи" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" -"\n" -"Правило автоматичної участі.\n" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" -"\n" -"Внесіть ясність у правила участі вузлів та користувачів налаштовуванням\n" -"формальних виразів шаблонів включення або виключення. Ви можете автоматично\n" -"пов’язувати нові записи з групою або групою вузлів на основі даних щодо " -"атрибутів.\n" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" -"\n" -"Правило безпосередньо пов’язується з групою за назвою, отже ви не можете\n" -"створити правило без визначення групи або групи вузлів.\n" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" -"\n" -"Умова є формальним виразом, використовується 389-ds для встановлення\n" -"відповідності нового вхідного запису з правилом автоматичної участі.\n" -"Якщо умові відповідає правило включення, запис додається до відповідної\n" -"групи або групи вузлів.\n" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" -"\n" -"Можна визначити типову групу або групу вузлів, яку буде використано для\n" -"записів, які не відповідають жодному правилу. У випадку записів " -"користувачів\n" -"ця група буде резервною групою, оскільки усіх користувачі типово є " -"учасниками\n" -"групи, вказаної у налаштуваннях IPA.\n" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" -"\n" -"За допомогою програми automember-rebuild ви можете повторно застосувати " -"правила\n" -"автоматичної участі до вже створених записів, тобто перебудувати схему " -"участі.\n" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" -"\n" -" Додати початкову групу або групу вузлів:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" -"\n" -" Додати початкове правило:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" -"\n" -" Додати умову до правила:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" -"\n" -" Додати умову виключення до правила для запобігання автоматичному " -"пов’язуванню:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" -"\n" -" Додати вузол:\n" -" ipa host-add web1.example.com\n" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" -"\n" -" Додати запис користувача:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" -"\n" -" Перевірити правила автоматичної участі:\n" -" ipa hostgroup-show webservers\n" -" Група вузлів: webservers\n" -" Опис: Web Servers\n" -" Вузли-учасники: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Назва групи: devel\n" -" Опис: Developers\n" -" GID: 1004200000\n" -" Користувачі-учасники: tuser\n" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" -"\n" -" Вилучити умову з правила:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" -"\n" -" Змінити правило автоматичної участі:\n" -" ipa automember-mod\n" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" -"\n" -" Встановити типову (резервну) групу призначення:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" -"\n" -" Вилучити типову (резервну) групу призначення:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" -"\n" -" Показати типову (резервну) групу призначення:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" -"\n" -" Знайти усіх правила автоматичної участі:\n" -" ipa automember-find\n" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" -"\n" -" Знайти усі осиротілі правила автоматичної участі:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Знайти усі осиротілі правила автоматичної участі і вилучити їх:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" -"\n" -" Показати правило автоматичної участі:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" -"\n" -" Вилучити правило автоматичної участі:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" -"\n" -" Перебудувати записи участі для усіх користувачів:\n" -" ipa automember-rebuild --type=group\n" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" -"\n" -" Перебудувати записи участі для усіх вузлів:\n" -" ipa automember-rebuild --type=hostgroup\n" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" -"\n" -" Перебудувати записи участі для вказаних користувачів:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" -"\n" -" Перебудувати записи участі для вказаних вузлів:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" - -msgid "Auto Membership Rule" -msgstr "Правило автоматичної участі" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(otype)s «%(oname)s» не знайдено" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "%s не є коректним атрибутом." - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" -"\n" -" Додати правило автоматичної участі.\n" -" " - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Додано правило автоматичної участі «%(value)s»" - -msgid "Auto Membership is not configured" -msgstr "Автоматичну участь не налаштовано" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" -"\n" -" Додати умови до правила автоматичної участі.\n" -" " - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Додано умови до «%(value)s»" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "Правило автоматичної участі: %s не знайдено!" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" -"\n" -" Перевизначення з метою додавання у повернуте повідомлення даних щодо " -"успіху чи невдачі.\n" -" " - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" -"\n" -" Вилучити умови з правила автоматичної участі.\n" -" " - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Вилучено умови з «%(value)s»" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" -"\n" -" Перевизначення з метою встановлення станів успіху та невдачі.\n" -" " - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" -"\n" -" Змінити правило автоматичної участі.\n" -" " - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Змінено правило автоматичної участі «%(value)s»" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" -"\n" -" Вилучити правило автоматичної участі.\n" -" " - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Вилучено правило автоматичної участі «%(value)s»" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" -"\n" -" Шукати правила автоматичної участі.\n" -" " - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "встановлено відповідність %(count)d правила" -msgstr[1] "встановлено відповідність %(count)d правил" -msgstr[2] "встановлено відповідність %(count)d правил" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" -"\n" -" Показати дані щодо правила автоматичної участі.\n" -" " - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" -"\n" -" Встановити типову (резервну) групу для невідповідних записів.\n" -" " - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "Встановити типову (резервну) групу для автоматичної участі «%(value)s»" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" -"\n" -" Вилучити типову (резервну) групу для невідповідних записів.\n" -" " - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "Вилучити типову (резервну) групу для автоматичної участі «%(value)s»" - -msgid "No default (fallback) group set" -msgstr "Не встановлено типової (резервної) групи" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" -"\n" -" Показати дані щодо типових (резервних) груп автоматичної участі.\n" -" " - -msgid "Task DN" -msgstr "DN завдання" - -msgid "DN of the started task" -msgstr "DN запущеного завдання" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "має бути вказано принаймні один з варіантів: тип, користувачі чи вузли" - -msgid "users and hosts cannot both be set" -msgstr "не можна одночасно вказувати користувачів і вузли" - -msgid "hosts cannot be set when type is 'group'" -msgstr "не можна вказувати вузли, якщо типом є «group»" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "не можна вказувати користувачів, якщо типом є «hostgroup»" - -msgid "Automember rebuild membership task started" -msgstr "Виконується завдання з перебудови записів автоматичної участі" - -msgid "Automember rebuild membership task completed" -msgstr "Завдання з перезбирання правил автоматичної участі виконано" - -#, python-format -msgid "Task DN = '%s'" -msgstr "DN завдання = «%s»" - -msgid "Automember" -msgstr "Автоматична участь" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" -"\n" -" Виконати пошук осиротілих правил автоматичної участі. Можливо, команду\n" -" слід запускати від імені привілейованого користувача, щоб отримати усі " -"правила.\n" -" " - -msgid "Remove orphan automember rules" -msgstr "Вилучити осиротілі правила автоматичної участі" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" -"\n" -"Керування службами сертифікації\n" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" -"\n" -"Підлеглі служби сертифікації (Sub-CA) можна додавати для обмежених під час " -"видання областю\n" -"сертифікатів X.509.\n" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" -"\n" -"Служби сертифікації увімкнено при створенні, але їхнє використання " -"регулюється ACL служб сертифікації,\n" -"якщо у оператора немає дозволу обходити ACL служб сертифікації (CA).\n" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" -"\n" -"Усі слжуби сертифікації, окрім служби сертифікації «IPA», можна вимикати і " -"повторно вмикати. Вимикання\n" -"служби сертифікації призводить до заборони для неї видавати сертифікати, але " -"не впливає на\n" -"чинність її сертифіката.\n" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" -"\n" -"Усі записи служб сертифікації (окрім служби «IPA») можна вилучати. Вилучення " -"запису служби сертифікації\n" -"призводить до відкликання її підписувального сертифіката і вилучення " -"закритого ключа.\n" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" -"\n" -" Створити новий запис служби сертифікації, підлеглий щодо служби " -"сертифікації IPA (потребує прав доступу\n" -" «Система: Додати CA»):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" -"\n" -" Вимкнути службу сертифікації (потребує прав доступу «Система: Змінити " -"CA»):.\n" -"\n" -" ipa ca-disable puppet\n" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" -"\n" -" Повторно увімкнути службу сертифікації (потребує прав доступу «Система: " -"Змінити CA»):\n" -"\n" -" ipa ca-enable puppet\n" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" -"\n" -" Вилучити запис служби сертифікації (потребує прав доступу «Система: " -"Вилучити CA»; також потребує попереднього вимикання\n" -" CA):\n" -"\n" -" ipa ca-del puppet\n" - -msgid "Certificate Authority" -msgstr "Центр сертифікації" - -msgid "Certificate Authorities" -msgstr "Центри сертифікації" - -msgid "Name for referencing the CA" -msgstr "Назва до посилання на CA" - -msgid "Description of the purpose of the CA" -msgstr "Опис призначення CA" - -msgid "Authority ID" -msgstr "Ід. центру" - -msgid "Dogtag Authority ID" -msgstr "Ід. Dogtag центру" - -msgid "Subject DN" -msgstr "DN призначення" - -msgid "Subject Distinguished Name" -msgstr "Унікальна назва призначення" - -msgid "Issuer Distinguished Name" -msgstr "Унікальна назва видавця" - -msgid "Search for CAs." -msgstr "Шукати CA." - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "встановлено відповідність %(count)d CA" -msgstr[1] "встановлено відповідність %(count)d CA" -msgstr[2] "встановлено відповідність %(count)d CA" - -msgid "Display the properties of a CA." -msgstr "Показати властивості CA." - -msgid "Create a CA." -msgstr "Створити запис CA." - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "Створено запис CA «%(value)s»" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "Недостатні привілеї «add» для запису «%s»." - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "Нерозпізнані атрибути: %(attrs)s" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "DN призначення вже використано CA «%s»" - -msgid "Delete a CA (must be disabled first)." -msgstr "Вилучити службу сертифікації (її спочатку має бути вимкнено)." - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "Вилучено запис CA «%(value)s»" - -msgid "Insufficient privilege to delete a CA." -msgstr "Недостатні права доступу для вилучення запису CA." - -msgid "CA" -msgstr "CA" - -msgid "IPA CA cannot be deleted" -msgstr "CA IPA не може бути вилучено" - -msgid "Must be disabled first" -msgstr "Слід спочатку вимкнути" - -msgid "Modify CA configuration." -msgstr "Змінити налаштування CA." - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "Змінено CA «%(value)s»" - -msgid "Insufficient privilege to modify a CA." -msgstr "Недостатні права доступу для внесення змін до запису CA." - -msgid "Disable a CA." -msgstr "Вимкнути службу сертифікації." - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "Вимкнено службу сертифікації «%(value)s»" - -msgid "IPA CA cannot be disabled" -msgstr "Службу сертифікації IPA не можна вимикати" - -msgid "Enable a CA." -msgstr "Увімкнути службу сертифікації." - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "Увімкнено службу сертифікації «%(value)s»" - msgid "Internationalization messages" msgstr "Повідомлення перекладу" @@ -26516,12 +29357,6 @@ msgstr "Сертифікат відкликано" msgid "REVOKED" msgstr "ВІДКЛИКАНО" -msgid "Serial Number" -msgstr "Серійний номер" - -msgid "Serial Number (hex)" -msgstr "Серійний номер (шістнадцятковий)" - msgid "SHA1 Fingerprint" msgstr "Відбиток SHA1" @@ -26574,9 +29409,6 @@ msgstr "Додати правило прив'язки сертифіката д msgid "Add certificate mapping data" msgstr "Додати дані прив'язки сертифіката" -msgid "Certificate mapping data" -msgstr "Дані прив’язки сертифіката" - msgid "Configuration string" msgstr "Рядок налаштування" @@ -27327,9 +30159,6 @@ msgstr "Додати групи вузлів до мережевої групи msgid "Add users into netgroup '${primary_key}'" msgstr "Додати користувачів до мережевої групи «${primary_key}»" -msgid "Host" -msgstr "Вузол" - msgid "Netgroup Settings" msgstr "Параметри мережевої групи" @@ -27450,9 +30279,6 @@ msgstr "Новий: ключ встановлено" msgid "Add password policy" msgstr "Додати правила паролів" -msgid "Password Policy" -msgstr "Правила для паролів" - msgid "Remove password policies" msgstr "Вилучити правила паролів" @@ -27913,15 +30739,6 @@ msgstr "Вилучити записи довіри" msgid "Remove domains" msgstr "Вилучити домени" -msgid "Trust direction" -msgstr "Напрямок довіри" - -msgid "Trust status" -msgstr "Стан довіри" - -msgid "Trust type" -msgstr "Тип довіри" - msgid "Alternative UPN suffixes" msgstr "Альтернативні суфікси UPN" @@ -28627,9 +31444,6 @@ msgstr "Sudo" msgid "Topology" msgstr "Топологія" -msgid "Trusts" -msgstr "Записи довіри" - msgid "True" msgstr "Так" @@ -28751,1954 +31565,6 @@ msgstr "Обов’язкове поле" msgid "Unsupported value" msgstr "Непідтримуване значення" -msgid "Role" -msgstr "Роль" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "Додано роль «%(value)s»" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Вилучено роль «%(value)s»" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Змінено роль «%(value)s»" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "встановлено відповідність %(count)d ролі" -msgstr[1] "встановлено відповідність %(count)d ролей" -msgstr[2] "встановлено відповідність %(count)d ролей" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" -"\n" -"Сервери IPA\n" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" -"\n" -"Отримати дані щодо встановлених серверів IPA.\n" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -" Знайти усі сервери:\n" -" ipa server-find\n" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" -"\n" -" Показати вказаний сервер:\n" -" ipa server-show ipa.example.com\n" - -msgid "server" -msgstr "сервер" - -msgid "servers" -msgstr "сервери" - -msgid "IPA Servers" -msgstr "Сервери IPA" - -msgid "Server location" -msgstr "Місце сервера" - -msgid "Service weight" -msgstr "Вага служб" - -msgid "Weight for server services" -msgstr "Вага служб сервера" - -msgid "Service relative weight" -msgstr "Відносна вага служб" - -msgid "Relative weight for server services (counts per location)" -msgstr "Відносна вага служб для сервера (обчислюється для окремого місця)" - -msgid "Enabled server roles" -msgstr "Увімкнені ролі сервера" - -msgid "List of enabled roles" -msgstr "Список усіх увімкнених ролей" - -msgid "Modify information about an IPA server." -msgstr "Змінити дані щодо сервера IPA." - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "Змінено запис сервера IPA «%(value)s»" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "встановлено відповідність %(count)d сервера IPA" -msgstr[1] "встановлено відповідність %(count)d серверів IPA" -msgstr[2] "встановлено відповідність %(count)d серверів IPA" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Вилучено сервер IPA «%(value)s»" - -msgid "Ignore topology errors" -msgstr "Ігнорувати помилки топології" - -msgid "Ignore topology connectivity problems after removal" -msgstr "Ігнорувати проблеми із з’єднуваністю топології після вилучення" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" -"Ігнорувати перевірку на те, чи є сервер, який вилучають, останнім сервером " -"CA або DNS" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" -"Пропустити перевірку того, чи вилучено останній основний сервер CA або " -"сервер DNS" - -msgid "Force server removal" -msgstr "Примусове вилучення сервера" - -msgid "Force server removal even if it does not exist" -msgstr "Примусове вилучення сервера, навіть якщо його не існує" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" -"Репліка є активним основним сервером ключів DNSSEC. Вилучення може зашкодити " -"вашій системі DNS. Будь ласка, спочатку вимкніть або замініть основний " -"сервер ключів DNSSEC." - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" -"Вилучення цього запису сервера залишить вашу встановлену систему без DNS." - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" -"Вилучення цього сервера заборонено, оскільки воно залишить вашу встановлену " -"систему без KRA." - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" -"Вилучення цього сервера заборонено, оскільки воно залишить вашу встановлену " -"систему без CA." - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "Ігноруємо ці попередження і продовжуємо процедуру вилучення" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" -"Не вдалося вилучити %(principal)s memberPrincipal із запису s4u2proxy " -"%(dn)s: %(err)s" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "Не вдалося вилучити записи назви вузла DNA для %(master)s: %(err)s" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" -"Не вдалося вилучити запис сервера %(master)s зі списку серверів: %(err)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "Не вдалося вилучити ключі Custodia для %(master)s: %(err)s" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "Не вдалося вилучити реєстраційні запис або ключі сервера: %(err)s" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "Не вдалося вилучити записи DNS %(hostname)s: %(err)s" - -msgid "You may need to manually remove them from the tree" -msgstr "Ймовірно, вам доведеться вилучити їх із ієрархії вручну" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "Примусово вилучаємо %(hostname)s" - -msgid "Ignoring topology connectivity errors." -msgstr "Ігноруємо помилки із з’єднуваністю топології." - -msgid "Server has already been deleted" -msgstr "Запис сервера вже вилучено" - -msgid "Agreements deleted" -msgstr "Угоди вилучено" - -msgid "Following segments were not deleted:" -msgstr "Вказані нижче сегменти не було вилучено:" - -#, python-format -msgid "must be \"%s\"" -msgstr "має бути «%s»" - -msgid "not allowed to perform server connection check" -msgstr "не дозволено виконувати перевірку з’єднання сервера" - -msgid "Set enabled/hidden state of a server." -msgstr "Встановити стан увімкнено/приховано для сервера." - -msgid "State" -msgstr "Стан" - -msgid "Server state" -msgstr "Стан сервера" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "Змінено стан сервера «%(value)s»." - -msgid "Cannot hide CA renewal master." -msgstr "Не можна приховувати основний сервер оновлення CA." - -msgid "Cannot hide DNSSec key master." -msgstr "Не можна приховувати основний сервер ключів DNSSec." - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "Не можна приховувати останній увімкнений сервер %(name)s." - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" -"\n" -"Обмежене службами делегування\n" -"\n" -"Керування правилами, за допомогою яких можна обмежити делегування\n" -"реєстраційних даних так, що служба зможе виконувати персоніфікацію\n" -"користувача під час обміну даними з іншою службою без потреби для\n" -"користувача насправді переспрямовувати квиток для отримання квитка\n" -"(TGT). Так створюється значно кращий метод делегування реєстраційних\n" -"даних, оскільки він запобігає розкриттю короткотермінових ключів\n" -"доступу користувачів.\n" -"\n" -"Відповідно до угоди з іменування, до назви правила додається слово\n" -"\"target\" або \"targets\". Така схема назв не є обов’язковою, але вона\n" -"допомагає концептуально пов’язати правила та їхні призначення.\n" -"\n" -"Правило складається з двох компонентів:\n" -" - Списку цілей (призначень), яких стосується правило\n" -" - Списку memberPrincipals, яким дозволено делегування для\n" -" цих цілей\n" -"\n" -"Запис цілі складається зі списку реєстраційних записів, які можна\n" -"делегувати.\n" -"\n" -"Якщо простіше, правило стверджує, що певний реєстраційний запис\n" -"можна делегувати як вказаний список реєстраційних записів,\n" -"відповідно до визначеного списку цілей.\n" -"\n" -"У правилі і цілі реєстраційні дані Kerberos може бути вказано за\n" -"їхньою назвою або альтернативною назвою, область дії можна пропустити.\n" -"Крім того, вузли можна вказувати за їхніми назвами. Якщо вказані\n" -"реєстраційні дані Kerberos містять один компонент і не завершуються " -"символом\n" -"«$», запис вважатиметься назвою вузла. Назви реєстраційних даних Kerberos, " -"які\n" -"завершуються «$» типово використовуються як альтернативні назви для " -"пов'язаних\n" -"із Active Directory служб.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нове правило обмеженого делегування:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Додати нову ціль обмеженого делегування:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Додати реєстраційний запис до правила:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Додати реєстраційні дані вузла «ipa.example.com» до правила:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Додати нашу ціль до правила:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Додати реєстраційний запис до цілі:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Показати дані щодо іменованого правила і цілі:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Вилучити обмежене делегування:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"У цьому прикладі служба ftp може отримувати квиток для отримання квитка для\n" -"служби ldap від імені пов’язаного користувача.\n" -"\n" -"Ми наполегливо не рекомендуємо змінювати делегування, які постачаються з\n" -"IPA, ipa-http-delegation та його цілі ipa-cifs-delegation-targets і\n" -"ipa-ldap-delegation-targets. Некоректні зміни можуть усунути можливість\n" -"делегування, що спричинить непрацездатність усієї системи.\n" - -msgid "Allowed to Impersonate" -msgstr "Дозволено виконувати імперсонацію" - -msgid "Member principals" -msgstr "Реєстраційні записи учасників" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "Помилкове форматування реєстраційного запису: %(error)s" - -msgid "Add target to a named service delegation." -msgstr "Додати ціль до делегування іменованої служби." - -#, python-format -msgid "member %s" -msgstr "%s учасника" - -msgid "Remove member from a named service delegation." -msgstr "Вилучити запис із делегування іменованої служби." - -msgid "service delegation rule" -msgstr "правило делегування служби" - -msgid "service delegation rules" -msgstr "правила делегування служб" - -msgid "Service delegation rules" -msgstr "Правила делегування служб" - -msgid "Service delegation rule" -msgstr "Правило делегування служб" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Додано правило делегування служб «%(value)s»" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Вилучено делегування служб «%(value)s»" - -msgid "privileged service delegation rule" -msgstr "привілейоване правило делегування служб" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "встановлено відповідність %(count)d правила делегування служб" -msgstr[1] "встановлено відповідність %(count)d правил делегування служб" -msgstr[2] "встановлено відповідність %(count)d правил делегування служб" - -msgid "service delegation target" -msgstr "ціль делегування служб" - -msgid "service delegation targets" -msgstr "призначення делегування служб" - -msgid "Service delegation targets" -msgstr "Призначення делегування служб" - -msgid "Service delegation target" -msgstr "Ціль делегування служб" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "Додано ціль делегування служб «%(value)s»" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Вилучено ціль делегування служб «%(value)s»" - -msgid "privileged service delegation target" -msgstr "привілейована ціль делегування служб" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "встановлено відповідність %(count)d призначення делегування служб" -msgstr[1] "встановлено відповідність %(count)d призначень делегування служб" -msgstr[2] "встановлено відповідність %(count)d призначень делегування служб" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" -"\n" -"Перехід на IPA\n" -"\n" -"Перенесення користувачів і груп з сервера LDAP на IPA.\n" -"\n" -"Надсилає запит LDAP до віддаленого сервера з метою пошуку користувачів\n" -"і груп у контейнері. З метою перенесення паролів вам слід прив’язатися\n" -"до сервера від імені користувача, який може читати атрибут userPassword\n" -"на сервері. Перелік таких користувачів зазвичай обмежено адміністраторами\n" -"вищого рівня, зокрема cn=Directory Manager на 389-ds (типовий користувач\n" -"bind).\n" -"\n" -"Типовим контейнером користувачів є ou=People.\n" -"\n" -"Типовим контейнером груп є ou=Groups.\n" -"\n" -"Записи користувачів і груп, які вже створено на сервері IPA буде\n" -"пропущено.\n" -"\n" -"Дві схеми LDAP визначають спосіб зберігання записів учасників групи:\n" -"RFC2307 і RFC2307bis. RFC2307bis використовує атрибути member і\n" -"uniquemember для визначення учасників групи, RFC2307 використовує\n" -"memberUid. Типовою є схема RFC2307bis.\n" -"\n" -"За допомогою додатка compat IPA може повторно форматувати дані для систем,\n" -"де не передбачено підтримки RFC2307bis. Рекомендується вимикати цей додаток\n" -"під час перенесення, щоб зменшити навантаження на систему. Ви зможете\n" -"увімкнути його після перенесення. Щоб перенести дані з увімкненим додатком\n" -"скористайтеся параметром «--with-compat».\n" -"\n" -"Перенесені користувачі не матимуть реєстраційних записів Kerberos,\n" -"перенесено буде лише пароль LDAP. Щоб завершити процес перенесення,\n" -"користувачам слід відкрити сторінку\n" -"http://ipa.example.com/ipa/migration і пройти розпізнавання за\n" -"допомогою пароля LDAP з метою створення запису реєстраційних даних\n" -"Kerberos.\n" -"\n" -"Типово перенесення вимкнено. Для його вмикання скористайтеся командою\n" -"ipa config-mod:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"Якщо основний DN не буде надано за допомогою --basedn, IPA " -"використовуватиме\n" -"значення defaultNamingContext, якщо його встановлено, або перше значення у\n" -"наборі namingContexts у кореневій теці віддаленого сервера LDAP.\n" -"\n" -"Записи користувачів додають до типової групи користувачів. Процес такого\n" -"додавання може бути доволі тривалим, отже під час перенесення він " -"виконується\n" -"у пакетному режимі, пакетами по 100 користувачів. У результаті буде певний\n" -"період, коли записи користувачів вже буде додано до IPA, але ці користувачі\n" -"ще не будуть учасниками типової групи користувачів.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Найпростіше перенесення з типовими параметрами:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Визначення контейнерів користувача і групи. Можна скористатися для\n" -" перенесення даних користувача і групи з сервера IPA версії 1:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Оскільки на сервері IPA версії 2 вже передбачено попередньо\n" -" визначені групи, які можуть збігатися з групами, які переносяться з\n" -" сервера (IPA версії 1), наприклад admins, ipausers, користувачів з\n" -" таких груп може бути перенесено до невідомої (unknown) групи на\n" -" новому сервері IPA версії 2.\n" -" Скористайтеся параметром --group-overwrite-gid для перезапису\n" -" ідентифікатора групи вже створених груп для запобігання цій\n" -" незручності:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Перенесені дані користувачів та груп можуть містити класи об’єктів та " -"супутні\n" -" атрибути, невідомі серверу IPA версії 2. Ці класти об’єктів та атрибутів\n" -" може бути виключено з процедури перенесення даних:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"ВЕДЕННЯ ЖУРНАЛУ\n" -"\n" -"Під час перенесення повідомлення з попередженнями та записами помилок\n" -"додаватимуться до журналу помилок Apache. З відповідним файлом слід\n" -"ознайомитися після завершення перенесення для виправлення та виявлення\n" -"помилок, які могли статися.\n" -"\n" -"Для кожного пакета зі 100 перенесених записів користувачів буде показано\n" -"інформаційне повідомлення, призначене для оцінки поступу обробки та\n" -"визначення її тривалості.\n" -"\n" -"Якщо визначено рівень ведення журналу debug за допомогою встановлення\n" -"debug = True у /etc/ipa/default.conf або у /etc/ipa/server.conf,\n" -"для кожного перенесеного запису додаватиметься власний запис, також\n" -"додаватиметься резюме щодо кожного оновлення типової групи\n" -"користувачів.\n" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" -"Реєстраційний запис Kerberos %s вже існує. Скористайтеся командою «ipa user-" -"mod», щоб встановити його параметри вручну." - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" -"Не вдалося визначити, чи існує вже реєстраційний запис Kerberos %s. " -"Скористайтеся командою «ipa user-mod», щоб встановити його параметри вручну." - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" -"Не вдалося додати користувача до типової групи. Додати користувача вручну " -"можна за допомогою команди «ipa group-add-member»." - -msgid "Migration of LDAP search reference is not supported." -msgstr "Підтримки перенесення посилання пошуку LDAP не передбачено." - -msgid "Malformed DN" -msgstr "Помилкове форматування DN" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(user)s не є користувачем з групи POSIX" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" -". Перевірте ідентифікатор вже створеної групи. Скористайтеся параметром --" -"group-overwrite-gid для перезапису ідентифікатора групи" - -msgid "Invalid LDAP URI." -msgstr "Некоректна адреса LDAP." - -#, python-format -msgid "%s to exclude from migration" -msgstr "%s, які слід виключити з перенесення" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" -"список результатів пошуку об’єктів міграції\n" -"було обрізано сервером; ймовірно,\n" -"процес міграції не завершено\n" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" -"Пошуком LDAP у %(container)s не повернуто жодного результату (основа пошуку: " -"%(search_base)s, клас об’єктів: %(objectclass)s)" - -msgid "Default group for new users not found" -msgstr "Типової групи для нових користувачів не знайдено" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" -"\n" -"Вузли/Комп’ютери\n" -"\n" -"Вузол — це окремий комп’ютер. Термін може використовуватися у декількох " -"контекстах:\n" -"- записи служб, пов’язані з певним вузлом\n" -"- вузол зберігає реєстраційні дані вузол/служба\n" -"- вузол можна використовувати у правилах Host-based Access Control (HBAC)\n" -"- для усіх зареєстрованих клієнтів створюється запис вузла\n" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" -"\n" -"РЕЄСТРАЦІЯ:\n" -"\n" -"Передбачено три сценарії реєстрації нових клієнтів:\n" -"\n" -"1. Ви реєструєтеся як повноцінний адміністратор. Запис вузла може існувати\n" -" або не існувати. Повноцінний адміністратор виконує роль hostadmin або є\n" -" учасником групи admins.\n" -"2. Ви реєструєтеся як адміністратор з обмеженими правами. Вузол вже має\n" -" існувати. Обмежений адміністратор виконує роль з привілеями\n" -" Host Enrollment.\n" -"3. Вузол було створено з одноразовим паролем.\n" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" -"\n" -"ПОВТОРНА РЕЄСТРАЦІЯ:\n" -"\n" -"Вузол, якому вже колись було надано певну роль, але налаштування було " -"втрачено\n" -"(наприклад через знищення віртуальної машини), можна знову зареєструвати " -"(надати роль).\n" -"\n" -"Щоб дізнатися більше, зверніться до сторінок підручника (man) щодо ipa-" -"client-install.\n" -"\n" -"Запис вузла може, якщо потрібно, зберігати відомості щодо розташування, " -"запущеної\n" -"операційної системи тощо.\n" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" -"\n" -"Додати новий вузол:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" -"\n" -" Вилучити вузол:\n" -" ipa host-del test.example.com\n" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" -"\n" -" Додати новий вузол з одноразовим паролем:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" -"\n" -"Додати новий вузол з випадковим одноразовим паролем:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" -"\n" -" Змінити відомості щодо вузла:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" -"\n" -" Вилучити відкриті ключі SSH вузла і оновити DNS відповідно до внесених " -"змін:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" -"\n" -"Вимкнути ключ Kerberos вузла, сертифікат SSL та усі його служби:\n" -" ipa host-disable test.example.com\n" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" -"\n" -"Додати вузол, який може керувати сховищем ключів та сертифікатом цього " -"вузла :\n" -" ipa host-add-managedby --hosts=test2 test\n" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" -"\n" -" Дозволити користувачеві створення таблиці ключів:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" - -msgid "Base-64 encoded host certificate" -msgstr "Сертифікат вузла у кодуванні Base-64" - -msgid "Principal alias" -msgstr "Псевдонім реєстраційного запису" - -msgid "SSH public key fingerprint" -msgstr "Відбиток відкритого ключа SSH" - -msgid "Authentication Indicators" -msgstr "Індикатори розпізнавання" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" -"Визначає список дозволених індикаторів розпізнавання. Скористайтеся " -"значенням «otp», щоб дозволити розпізнавання 2FA на основі OTP. " -"Скористайтеся значенням «radius», щоб дозволити розпізнавання 2FA на основі " -"RADIUS. Скористайтеся значенням «pkinit», щоб дозволити розпізнавання 2FA на " -"основі PKINIT. Скористайтеся значенням «hardened», щоб дозволити захищене " -"від простого перебирання розпізнавання за паролем на основі SPAKE або FAST. " -"Якщо індикатор не буде вказано, буде дозволено усі механізми." - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Додано вузол «%(value)s»" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Вилучено вузол «%(value)s»" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "Вилучити записи A, AAAA, SSHFP і PTR вузлів, керованих DNS IPA" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "Не знайдено записів A, AAAA, SSHFP або PTR." - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Змінено вузол «%(value)s»" - -msgid "Password cannot be set on enrolled host." -msgstr "Не можна визначати пароль для вузла з визначеною роллю." - -msgid "cn is immutable" -msgstr "cn є незмінним" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "встановлено відповідність %(count)d вузла" -msgstr[1] "встановлено відповідність %(count)d вузлів" -msgstr[2] "встановлено відповідність %(count)d вузлів" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Вимкнено вузол «%(value)s»" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Додано сертифікати до запису вузла «%(value)s»" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Вилучено сертифікати із запису вузла «%(value)s»" - -msgid "Add new principal alias to host entry" -msgstr "Додати новий псевдонім реєстраційного запису до запису вузла" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Додано нові псевдоніми до запису вузла «%(value)s»" - -msgid "Remove principal alias from a host entry" -msgstr "Вилучити псевдонім реєстраційного запису із запису вузла" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Вилучити псевдоніми із запису вузла «%(value)s»" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" -"Клас об'єкта служби, який використовується для прив'язування правил до груп" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" -"пріоритет повинен мати унікальне значення (%(prio)d вже використано для " -"%(gname)s)" - -msgid "Add Class of Service entry" -msgstr "Додати запис класу служби" - -msgid "Delete Class of Service entry" -msgstr "Вилучити запис класу служби" - -msgid "Modify Class of Service entry" -msgstr "Змінити запис класу служби" - -msgid "Display Class of Service entry" -msgstr "Показати запис класу служби" - -msgid "Search for Class of Service entry" -msgstr "Шукати запис класу служби" - -msgid "password policy" -msgstr "правила для паролів" - -msgid "password policies" -msgstr "правила щодо паролів" - -msgid "Password Policies" -msgstr "Правила щодо паролів" - -msgid "Max repeat" -msgstr "Макс. повторення" - -msgid "Maximum number of same consecutive characters" -msgstr "Максимальна кількість однакових символів поспіль" - -msgid "Max sequence" -msgstr "Макс. послідовність" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "Максимальна довжина можливої послідовності з абетки (abcd)" - -msgid "Dictionary check" -msgstr "Перевірка за словником" - -msgid "Check if the password is a dictionary word" -msgstr "Перевіряти, чи є пароль словом зі словника" - -msgid "User check" -msgstr "Перевірка на ім'я користувача" - -msgid "Check if the password contains the username" -msgstr "Перевіряти, чи не міститься у паролі ім'я користувача" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" -"Якщо визначено maxrepeat, maxsequence, dictcheck або usercheck, мінімальною " -"довжиною має бути число >= 6" - -msgid "Maximum password life must be greater than minimum." -msgstr "" -"Максимальний строк дії пароля має перевищувати мінімальний строк його дії." - -msgid "cannot delete global password policy" -msgstr "неможливо вилучити загальні правила паролів" - -msgid "priority cannot be set on global policy" -msgstr "для загальних правил не може встановлювати пріоритети" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" -"\n" -"Довіра між областями\n" -"\n" -"Керування відносинами довіри між доменами IPA і Active Directory.\n" -"\n" -"З метою надання доступу користувачам віддаленого домену до ресурсів у " -"домені\n" -"IPA слід встановити відносини довіри. У поточній версії у IPA передбачено\n" -"підтримку довіри лише між доменами IPA і Active Directory під керуванням " -"Windows\n" -"Server 2008 або новішої версії з функціональними можливостями рівня 2008 " -"або\n" -"новішої версії.\n" -"\n" -"Будь ласка, зауважте, що слід належним чином налаштувати DNS на обох " -"доменах,\n" -"IPA і Active Directory, щоб домени могли виявити один одного. " -"Працездатність\n" -"відносин довіри залежить від можливості виявлення спеціальних ресурсів у\n" -"іншому домені за допомогою записів DNS.\n" -"\n" -"Приклад:\n" -"\n" -"1. Встановити довіру між областями з Active Directory за допомогою " -"реєстраційних\n" -" даних адміністратора AD:\n" -"\n" -" ipa trust-add --type=ad <домен.ad> --admin <адміністратор домену AD> --" -"password\n" -"\n" -"2. Показати список всіх наявних відносин довіри:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Показати подробиці щодо певних відносин довіри:\n" -"\n" -" ipa trust-show <домен.ad>\n" -"\n" -"4. Вилучити наявні відносини довіри:\n" -"\n" -" ipa trust-del <домен.ad>\n" -"\n" -"Щойно відносини довіри буде встановлено, віддалених користувачів слід " -"прив’язати\n" -"до локальних груп POSIX, щоб скористатися ресурсами IPA. Прив’язку слід\n" -"виконати за допомогою використання зовнішньої участі групи не-POSIX, а " -"потім\n" -"цю групу має бути включено до однієї з локальних груп POSIX.\n" -"\n" -"Приклади:\n" -"\n" -"1. Створити групу для прив’язки адміністраторів та їхньої локальної групи " -"POSIX\n" -" довіреного домену:\n" -"\n" -" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc='<домен.ad> admins' ad_admins\n" -"\n" -"2. Додати ідентифікатор безпеки Domain Admins домену <домен.ad> до групи " -"ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Дозволити прив’язування учасників групи ad_admins_external до групи POSIX " -"ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Показати список зовнішніх учасників групи ad_admins_external для " -"перегляду їхніх SID:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"НАЛАШТУВАННЯ ДОВІРИ ЗАГАЛЬНОГО РІВНЯ\n" -"\n" -"Якщо встановлено підпакунок довіри AD IPA та запущено ipa-adtrust-install,\n" -"створюються налаштування локального домену (SID, GUID, назва NetBIOS). " -"Після\n" -"цього створені ідентифікатори використовуються для обміну даними з\n" -"довіреним доменом певного типу.\n" -"\n" -"1. Показати налаштування довіри загального рівня для типів довіри Active " -"Directory:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Змінити загальні налаштування для всіх довір типу Active Directory і\n" -" встановити іншу резервну основну групу (GID резервної основної групи\n" -" використовується як GID основного користувача, якщо користувача\n" -" розпізнано у домені IPA, але він не має жодного вже встановленого\n" -" основного GID):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Повернути для резервної основної групи значення типової прихованої групи\n" -" (будь-якої групи, у якій дозволено клас об’єктів posixGroup):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr " Крім того, цю команду можуть виконати такі сервери: %(masters)s" - -msgid "AD Trust setup" -msgstr "Налаштування довіри AD" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" -"Виконати вибрану команду без встановленої підтримки Samba 4 неможливо. " -"Переконайтеся, що вами встановлено підпакунок IPA server-trust-ad." - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" -"Вибрану команду не можна виконати без екземпляра Samba 4, встановленого у " -"цій системі. Переконайтеся, що на цьому сервері було виконано ipa-adtrust-" -"install." - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Без налаштовування власного домену не можна виконувати пошук у довірених " -"доменах. Спочатку запустіть ipa-adtrust-install на сервері IPA." - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" -"Спроба отримати список доменів із довіреного лісу зазнала невдачі. Подробиці " -"можна знайти у error_log" - -msgid "trust" -msgstr "довіра" - -msgid "trusts" -msgstr "записи довіри" - -msgid "Trust" -msgstr "Довіра" - -msgid "SID blocklist incoming" -msgstr "Список блокування вхідних SID" - -msgid "SID blocklist outgoing" -msgstr "Список блокування вихідних SID" - -msgid "UPN suffixes" -msgstr "Суфікси UPN" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "некоректний SID: {SID}" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" -"\n" -"Додати новий запис довіри для використання.\n" -"\n" -"За допомогою цієї команди можна встановити відносини довіри з\n" -"іншим доменом, який після цього вважається «довіреним». У результаті\n" -"користувачі довіреного домену зможуть отримувати доступ до ресурсів\n" -"цього домену.\n" -"\n" -"У поточній версії передбачено підтримку лише відносин довіри з доменами\n" -"Active Directory.\n" -"\n" -"Команду можна безпечно запускати декілька разів для одного і того самого\n" -"домену, такий запуск призводить до зміни у реєстраційних записах відносин\n" -"довіри з обох боків.\n" -"\n" -"Зауважте, що якщо команда раніше виконувалася із вказаним типом діапазону\n" -"або автоматичним визначенням типу діапазону, і ви хочете налаштувати\n" -"інший тип діапазону, ймовірно, вам доведеться вилучити першй діапазон " -"ідентифікаторів\n" -"за допомогою ipa idrange-del, перш ніж ви зможете повторити команду із " -"бажаним типом.\n" -" " - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" -"Тип діапазону ідентифікаторів довіреного домену, одне з дозволених значень" - -msgid "External trust" -msgstr "Зовнішня довіра" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" -"Встановити зовнішню довіру до домену у іншому лісі. Довіра не переходить за " -"межі домену." - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "Додано запис довіри Active Directory для області «%(value)s»" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Відновлено довіру до домену «%(value)s»" - -msgid "missing base_id" -msgstr "не вистачає base_id" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "pysss_murmur на сервері не доступний, отже base-id не надано." - -msgid "trust type" -msgstr "тип довіри" - -msgid "only \"ad\" is supported" -msgstr "передбачено підтримку лише «ad»" - -msgid "domain" -msgstr "домен" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" -"Не можна встановлювати довіру до AD, розгорнутою у тому самому домені, що і " -"IPA. Підтримки такої можливості не передбачено." - -msgid "Realm-domain mismatch" -msgstr "Невідповідність між областю і доменом" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" -"Для встановлення довіри з Active Directory назва домену і назва області " -"сервера IPA мають збігатися" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" -"До доменів області IPA включено домен %(domain)s. Перш ніж встановлювати " -"довіру, це включення слід усунути. Див. команду «ipa realmdomains-mod --del-" -"domain»." - -msgid "Trusted domain and administrator account use different realms" -msgstr "" -"Довіреним доменом і обліковим записом адміністратора використовуються різні " -"області" - -msgid "Realm administrator password should be specified" -msgstr "Має бути вказано пароль адміністратора області" - -msgid "id range type" -msgstr "тип діапазону ідентифікаторів" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" -"Якщо додається зв’язок довіри AD, значенням --range-type має бути лише ipa-" -"ad-trust або ipa-ad-trust-posix." - -msgid "id range" -msgstr "діапазон ідентифікаторів" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" -"Для цього зв’язку довіри вже існує діапазон ідентифікаторів. Вам слід або " -"вилучити попередній діапазон, або виключити з команди параметри --base-id/--" -"range-size." - -msgid "range exists" -msgstr "діапазон вже існує" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" -"Вже існує діапазон ідентифікаторів з тією самою назвою але іншим доменом " -"SID. Діапазон ідентифікаторів для нового довіреного домену має бути створено " -"вручну." - -msgid "range type change" -msgstr "зміна типу діапазону" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" -"Діапазон ідентифікаторів для довіреного домену вже існує, але належить до " -"іншого типу. Будь ласка, вилучіть попередній діапазон вручну або не " -"визначайте тип у примусовому порядку за допомогою параметра --range-type." - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "Не вдалося визначити контролер домену для домену {domain}. " - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" -"Для нього у DNS IPA визначено правила переспрямовування. Можливо, " -"переспрямовувач вказує не помилковий вузол?" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" -"IPA керує DNS. Будь ласка, переконайтеся, що поточні налаштування DNS " -"уможливлюють визначення адрес службових записів домену «{domain}». Приклади " -"налаштовування DNS за допомогою командного інтерфейсу або вебінтерфейсу " -"наведено у документації. " - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" -"Оскільки IPA не керує записами DNS, слід налаштувати DNS так, щоб система " -"визначала адресу домену «{domain}» за даними щодо вузлів IPA, і навпаки." - -msgid "Unable to verify write permissions to the AD" -msgstr "Не вдалося перевірити права доступу на запис до AD" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "Вказано недостатньо аргументів для виконання налаштовування довіри" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Вилучено запис довіри «%(value)s»" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" -"\n" -" Змінити запис довіри (для наступного використання).\n" -"\n" -" У поточній версії можлива зміна лише типова зміна атрибутів LDAP.\n" -" Додаткові варіанти буде додано у наступних випусках.\n" -" " - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "Змінено довіру «%(value)s» (зміни набудуть чинності за 60 секунд)" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "встановлено відповідність %(count)d запису довіри" -msgstr[1] "встановлено відповідність %(count)d записів довіри" -msgstr[2] "встановлено відповідність %(count)d записів довіри" - -msgid "trust configuration" -msgstr "довірені налаштування" - -msgid "Global Trust Configuration" -msgstr "Загальні довірені налаштування" - -msgid "IPA AD trust agents" -msgstr "Агенти довіри AD IPA" - -msgid "IPA servers configured as AD trust agents" -msgstr "Сервери IPA, які налаштовано як агенти довіри AD" - -msgid "IPA AD trust controllers" -msgstr "Контролери довіри AD IPA" - -msgid "IPA servers configured as AD trust controllers" -msgstr "Сервери IPA, які налаштовано як контролери довіри AD" - -msgid "unsupported trust type" -msgstr "непідтримуваний тип довіри" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "Змінено налаштування довіри «%(value)s»" - -msgid "SID" -msgstr "SID" - -msgid "sidgen_was_run" -msgstr "sidgen_was_run" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" -"Для виконання цієї команди має існувати група «editors», але групи з такою " -"назвою не знайдено." - -msgid "trust domain" -msgstr "довірений домен" - -msgid "trust domains" -msgstr "довірені домени" - -msgid "Trusted domains" -msgstr "Довірені домени" - -msgid "Trusted domain" -msgstr "Довірений домен" - -msgid "Domain enabled" -msgstr "Домен увімкнено" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "Дані щодо довіреного домену «%(value)s» вилучено" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"вилучення кореневого домену правила довіри неможливе, скористайтеся trust-" -"del для вилучення самого правила довіри" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" -"Список довірених доменів успішно оновлено. Для отримання поточного списку " -"цих доменів скористайтеся командою trustdomain-find." - -msgid "Configure this server as a trust agent." -msgstr "Налаштувати цей сервер як довірений агент." - -msgid "Enable support for trusted domains for old clients" -msgstr "Увімкнути підтримку довірених доменів для застарілих клієнтів" - -msgid "not allowed to remotely add agent" -msgstr "заборонено віддалено додавати агентів" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Увімкнено домен довіри «%(value)s»" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" -"Кореневий домен правила довіри для наявного правила довіри завжди увімкнено" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Домен довіри «%(value)s» вимкнено" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"вимикання кореневого домену правила довіри неможливе, скористайтеся trust-" -"del для вилучення самого правила довіри" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" -"\n" -"Прив’язка сертифікатів до профілів\n" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" -"\n" -"Керування налаштуваннями і правилами прив’язки сертифікатів до профілів.\n" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" -"\n" -"У IPA передбачено підтримку використання сертифікатів для розпізнавання. " -"Сертифікати\n" -"можуть зберігатися або у записі користувача (весь сертифікат у атрибуті\n" -"usercertificate), або просто прив’язуватися до запису користувача.\n" -"Цей код уможливлює керування правилами доступу до прив’язування сертифіката " -"до\n" -"запису користувача.\n" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" -"\n" -" Вивести загальні налаштування прив’язки сертифікатів до профілів:\n" -" ipa certmapconfig-show\n" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" -"\n" -" Змінити загальні налаштування прив’язки сертифікатів до профілів:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" -"\n" -" Створити правило прив’язування сертифікатів до профілів:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" -"\n" -" Змінити правило прив’язування сертифікатів до профілів:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" -"\n" -" Вимкнути правило прив’язування сертифікатів до профілів:\n" -" ipa certmaprule-disable rule1\n" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" -"\n" -" Увімкнути правило прив’язування сертифікатів до профілів:\n" -" ipa certmaprule-enable rule1\n" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" -"\n" -" Вивести дані щодо правила прив’язування сертифікатів до профілів:\n" -" ipa certmaprule-show rule1\n" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" -"\n" -" Знайти усі правила прив’язування сертифікатів до профілів із вказаним " -"доменом:\n" -" ipa certmaprule-find --domain example.com\n" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" -"\n" -" Вилучити правило прив’язування сертифікатів до профілів:\n" -" ipa certmaprule-del rule1\n" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" -"Домени «%s» не можна використовувати для застосування перевірки " -"altSecurityIdentities." - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" -"До довіреного домену Active Directory має бути застосовано правило прив'язки " -"з altSecurityIdentities, але з цим правилом не пов'язано жодного домену." - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "Домен %s не є ні доменом IPA, ні довіреним доменом." - -msgid "Certificate Identity Mapping configuration options" -msgstr "Параметри налаштування прив’язки сертифікатів до профілів" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "Загальні налаштування прив’язки сертифікатів до профілів" - -msgid "Prompt for the username" -msgstr "Запит щодо імені користувача" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" -"Запитувати ім’я користувача, якщо із сертифікатом пов’язано декілька профілів" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "Змінити налаштування прив’язки сертифікатів до профілів." - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "Показати поточні налаштування прив’язки сертифікатів до профілів." - -msgid "Certificate Identity Mapping Rules" -msgstr "Правила прив’язування сертифікатів до профілів" - -msgid "Certificate Identity Mapping Rule" -msgstr "Правило прив’язування сертифікатів до профілів" - -msgid "Certificate Identity Mapping Rule name" -msgstr "Назва правила прив’язування сертифікатів до профілів" - -msgid "Certificate Identity Mapping Rule description" -msgstr "Опис правила прив’язування сертифікатів до профілів" - -msgid "Mapping rule" -msgstr "Правило прив’язування" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" -"Правило, яке використовується для прив’язування сертифіката до запису " -"користувача" - -msgid "Matching rule" -msgstr "Правило відповідності" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" -"Правило, яке використовується для визначення того, чи придатний сертифікат " -"для розпізнавання" - -msgid "Domain where the user entry will be searched" -msgstr "Домен, у якому слід шукати запис користувача" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "Пріоритет правила (більше число — нижчий пріоритет)" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "Створити правило прив’язування сертифіката до профілів." - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Додано правило прив’язування сертифікатів до профілів «%(value)s»" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "Змінити правило прив’язування сертифікатів до профілів." - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Змінено правило прив’язування сертифікатів до профілів «%(value)s»" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "Шукати правила прив’язування сертифікатів до профілів." - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -"Встановлено відповідність %(count)d правила прив’язування сертифікатів до " -"профілів" -msgstr[1] "" -"Встановлено відповідність %(count)d правил прив’язування сертифікатів до " -"профілів" -msgstr[2] "" -"Встановлено відповідність %(count)d правил прив’язування сертифікатів до " -"профілів" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "Вивести дані щодо правила прив’язування сертифікатів до профілів." - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "Вилучити правило прив’язування сертифікатів до профілів." - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Вилучено правило прив’язування сертифікатів до профілів «%(value)s»" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "Увімкнути правило прив’язування сертифікатів до профілів." - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Увімкнено правило прив’язування сертифікатів до профілів «%(value)s»" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "Вимкнути правило прив’язування сертифікатів до профілів." - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Вимкнено правило прив’язування сертифікатів до профілів «%(value)s»" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" -"Не вдалося встановити з’єднання із sssd за допомогою SystemBus. Докладніший " -"опис — у файлі error_log" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" -"Не вдалося знайти користувачів за допомогою SystemBus. Докладніший опис — у " -"файлі error_log" - -msgid "User logins" -msgstr "Користувачі" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" -"\n" -" Шукати користувачів, яких пов’язано із наданим сертифікатом.\n" -"\n" -" Для отримання списку відповідних користувачів ця команда покладається\n" -" на дані SSSD, отже, вона може повертати кешовані дані. Докладніше про\n" -" очищення кешу SSSD можна дізнатися із документації до sss_cache.\n" -" " - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "Встановлено відповідність %(count)s користувача" -msgstr[1] "Встановлено відповідність %(count)s користувачів" -msgstr[2] "Встановлено відповідність %(count)s користувачів" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" -"неможливо додати права доступу «%(perm)s» з типом прив’язки «%(bindtype)s» " -"до привілею" - -msgid "Privilege" -msgstr "Привілей" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "Додано привілей «%(value)s»" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Вилучено привілей «%(value)s»" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "Змінено привілей «%(value)s»" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "встановлено відповідність %(count)d привілею" -msgstr[1] "встановлено відповідність %(count)d привілеїв" -msgstr[2] "встановлено відповідність %(count)d привілеїв" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" -"\n" -"Підтримка сеансів для IPA\n" - msgid "" "\n" "Services\n" @@ -30932,898 +31798,36 @@ msgstr "Вилучити альтернативну назву реєстрац msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "Вилучено псевдоніми реєстраційного запису служби «%(value)s»" -msgid "delegation" -msgstr "уповноваження" +msgid "self service permission" +msgstr "права доступу автослужби" -msgid "delegations" -msgstr "уповноваження" +msgid "self service permissions" +msgstr "права доступу до автослужби" -msgid "Delegations" -msgstr "Уповноваження" +msgid "Self Service Permissions" +msgstr "Права доступу до самообслуговування" -msgid "Delegation" -msgstr "Уповноваження" +msgid "Self Service Permission" +msgstr "Права доступу автослужби" #, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "Додано уповноваження «%(value)s»" +msgid "Added selfservice \"%(value)s\"" +msgstr "Додано самообслуговування «%(value)s»" #, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "Вилучено уповноваження «%(value)s»" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Вилучено самообслуговування «%(value)s»" #, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "Змінено уповноваження «%(value)s»" +msgid "Modified selfservice \"%(value)s\"" +msgstr "Змінено самообслуговування «%(value)s»" #, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "встановлено відповідність %(count)d уповноваження" -msgstr[1] "встановлено відповідність %(count)d уповноваження" -msgstr[2] "встановлено відповідність %(count)d уповноважень" - -msgid "The deny type has been deprecated." -msgstr "Тип «deny» вважається застарілим." - -msgid "HBAC rules" -msgstr "правила HBAC" - -msgid "HBAC Rules" -msgstr "Правила HBAC" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "Додано правило HBAC «%(value)s»" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Вилучено правило HBAC «%(value)s»" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "Змінено правило HBAC «%(value)s»" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "встановлено відповідність %(count)d правила HBAC" -msgstr[1] "встановлено відповідність %(count)d правил HBAC" -msgstr[2] "встановлено відповідність %(count)d правил HBAC" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "Увімкнено правило HBAC «%(value)s»" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "Вимкнено правило HBAC «%(value)s»" - -msgid "Access time" -msgstr "Час доступу" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "Додати вузли джерела та групи вузлів до правила HBAC." - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" -"\n" -"Імітація використання керування доступом на основі вузлів (HBAC)\n" -"\n" -"Правила HBAC керують тим, хто може отримувати доступ до певних служб на\n" -"певних вузлах.\n" -"Ви можете скористатися HBAC для керування тим, які користувачі або групи\n" -"на початковому вузлі можуть отримувати доступ до служби або групи служб\n" -"на вузлі призначення\n" -"\n" -"Оскільки застосування правил HBAC передбачає використання робочого\n" -"середовища, це додаток призначено для імітації обробки правил HBAC без\n" -"доступу до реального середовища\n" -"\n" -" Перевірити відповідність користувача з початкового вузла до служби на " -"іменованому\n" -" вузлі правилам уможливлення доступу.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host і --service є обов’язковими, інші можна не вказувати.\n" -"\n" -" Якщо вказано --rules, імітувати вмикання вказаних правил і перевірити\n" -" можливість входу користувача у разі використання лише цих правил.\n" -"\n" -" Якщо вказано --enabled, додати всі увімкнені правила HBAC до імітації\n" -"\n" -" Якщо вказано --disabled, додати всі вимкнені правила HBAC до імітації\n" -"\n" -" Якщо вказано --nodetail, не повертати даних щодо відповідних і " -"невідповідних\n" -" правил.\n" -"\n" -" Якщо вказано одночасно --rules і --enabled, виконати імітацію --rules _і_\n" -" всіх увімкнених правил IPA.\n" -"\n" -" Якщо не вказано --rules, буде виконано імітацію всіх увімкнених правил " -"IPA.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" 1. Використання всіх увімкнених правил HBAC у базі даних IPA:\n" -" $ ipa hbactest --user=a1a --srchost=foo --host=bar --service=sshd\n" -" --------------------\n" -" Надано доступ: Так\n" -" --------------------\n" -" невідповідне: my-second-rule\n" -" невідповідне: my-third-rule\n" -" невідповідне: myrule\n" -" відповідне: allow_all\n" -"\n" -" 2. Вимикання докладного резюме застосування правил:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Надано доступ: Так\n" -" --------------------\n" -"\n" -" 3. Перевірити явно вказані правила HBAC:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Надано доступ: Ні\n" -" ---------------------\n" -" невідповідне: my-second-rule\n" -" невідповідне: myrule\n" -"\n" -" 4. Використання всіх увімкнених правил HBAC у базі даних IPA + явно " -"вказаних правил:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Доступ надано: Так\n" -" --------------------\n" -" невідповідне: my-second-rule\n" -" невідповідне: my-third-rule\n" -" невідповідне: myrule\n" -" відповідне: allow_all\n" -"\n" -" 5. Перевірка всіх вимкнених правил HBAC у базі даних IPA:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Надано доступ: Ні\n" -" ---------------------\n" -" невідповідне: new-rule\n" -"\n" -" 6. Перевірка всіх вимкнених правил HBAC у базі даних IPA + явно вказані " -"правила:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Надано доступ: Ні\n" -" ---------------------\n" -" невідповідне: my-second-rule\n" -" невідповідне: my-third-rule\n" -" невідповідне: myrule\n" -"\n" -" 7. Перевірка всіх (увімкнених і вимкнених) правил HBAC у базі даних " -"IPA:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Надано доступ: Так\n" -" --------------------\n" -" невідповідне: my-second-rule\n" -" невідповідне: my-third-rule\n" -" невідповідне: myrule\n" -" невідповідне: new-rule\n" -" відповідне: allow_all\n" -"\n" -"\n" -"HBACTEST І ДОВІРЕНІ ДОМЕНИ\n" -"\n" -"Якщо у IPA налаштовано зовнішній довірений домен, правила HBAC також\n" -"застосовуються до користувачів, що отримують доступ до ресурсів IPA з\n" -"з довіреного домену. Після цього користувачі і групи довіреного домену\n" -"(на їхні SID) може бути прив’язано до зовнішніх груп, які можуть бути\n" -"учасниками груп POSIX у IPA. Такі прив’язки може бути використано у\n" -"правилах HBAC, отже уможливлення доступу до ресурсів, захищених системою\n" -"HBAC.\n" -"\n" -"Додаток hbactest здатен тестувати доступ як для локальних користувачів\n" -"IPA, так і користувачів з довірених доменів, як за повним іменем\n" -"користувача, так і за SID користувачів. У таких іменах користувачів\n" -"має бути вказано скорочено довірений домен (ДОМЕН\\Administrator) або\n" -"назву реєстраційного запису користувача (UPN), Administrator@ad.test.\n" -"\n" -"Будь ласка, зауважте, що виконувати hbactest з аргументом користувача\n" -"довіреного домену у параметрі --user можуть виконувати лише учасники\n" -"групи «trust admins».\n" -"\n" -"ПРИКЛАД:\n" -"\n" -" 1. Перевірити, чи відповідає користувач з довіреного домену,\n" -" вказаний за коротким іменем, якомусь правилу:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Надано доступ: Так\n" -" --------------------\n" -" Відповідні правила: allow_all\n" -" Відповідні правила: can_login\n" -"\n" -" 2. Перевірити, чи відповідає користувач з довіреного домену,\n" -" вказаний за назвою його домену, якомусь правилу:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Надано доступ: Так\n" -" --------------------\n" -" Відповідні правила: allow_all\n" -" Невідповідні правила: can_login\n" -"\n" -" 3. Перевірити, чи відповідає користувач з довіреного домену\n" -" вказаний за SID, якомусь правилу:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Надано доступ: Так\n" -" --------------------\n" -" Відповідні правила: allow_all\n" -" Відповідні правила: can_login\n" -"\n" -" 4. Перевірити, чи відповідає інший користувач з довіреного домену,\n" -" вказаний за SID, якомусь правилу:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Надано доступ: Так\n" -" --------------------\n" -" Відповідні правила: allow_all\n" -" Відповідні правила: can_login\n" -"\n" -" 5. Перевірити, чи відповідає інший користувач з довіреного домену,\n" -" вказаний за коротким ім’ям, якомусь правилу:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Надано доступ: Так\n" -" --------------------\n" -" Відповідні правила: allow_all\n" -" Невідповідні правила: can_login\n" - -msgid "Unresolved rules in --rules" -msgstr "Непридатні до обробки правила у --rules" - -#, python-format -msgid "Access granted: %s" -msgstr "Надано доступ: %s" - -msgid "operation not defined" -msgstr "дію не визначено" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "виконувати цю дію заборонено: %s" - -msgid "No such virtual command" -msgstr "Такої віртуальної команди не передбачено" - -msgid "Member service groups" -msgstr "Групи служб учасника" - -msgid "Member HBAC service groups" -msgstr "Групи служб HBAC учасника" - -msgid "Member ID user overrides" -msgstr "Перевизначення ідентифікатора учасника користувача" - -msgid "Indirect Member ID user overrides" -msgstr "Перевизначення ідентифікатора опосередкованого учасника користувача" - -msgid "Indirect Member permissions" -msgstr "Опосередковані права доступу учасника" - -msgid "Indirect Member HBAC service" -msgstr "Опосередкована служба HBAC учасника" - -msgid "Indirect Member HBAC service group" -msgstr "Опосередкована група служб HBAC учасника" - -msgid "Invalid format. Should be name=value" -msgstr "Некоректний формат. Правильний формат: назва=значення" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Основний вузол IPA не можна вилучати або вимикати" - -msgid "entry" -msgstr "запис" - -msgid "entries" -msgstr "записи" - -msgid "Entry" -msgstr "Запис" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "не знайдено запис контейнера (%(container)s)" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s: не знайдено %(oname)s" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "%(oname)s з назвою «%(pkey)s» вже існує" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "не можна використовувати атрибут «%(attribute)s»" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "ці атрибути не можна використовувати: %(attrs)s" - -msgid "attribute is not configurable" -msgstr "атрибут не можна налаштовувати" - -msgid "No such attribute on this entry" -msgstr "У цього запису немає такого атрибута" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "Перейменувати об’єкт %(ldap_obj_name)s" - -msgid "the entry was deleted while being modified" -msgstr "запис було вилучено під час внесення змін" - -#, python-format -msgid "%s" -msgstr "%s" - -#, python-format -msgid "%s to add" -msgstr "%s для додавання" - -#, python-format -msgid "%s to remove" -msgstr "%s для вилучення" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "Шукати %(searched_object)s у цих %(relationship)s %(ldap_object)s." - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "Шукати %(searched_object)s не у цих %(relationship)s %(ldap_object)s." - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "додано значення атрибута до запису %(value)s" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "вилучено значення атрибутів із запису %(value)s" - -msgid "one or more values to remove" -msgstr "одне або декілька значень для вилучення" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" -"\n" -"Основний користувач\n" -"\n" -"Містить загальні визначення щодо користувача або користувача етапу.\n" - -msgid "must be TRUE or FALSE" -msgstr "має дорівнювати TRUE або FALSE" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" -"Немає класу об'єктів ipaNTUserAttrs. Через це запис користувача не може " -"містити атрибутів SMB." - -msgid "User password expiration" -msgstr "Вичерпання строку дії пароля користувача" - -msgid "SMB logon script path" -msgstr "Шлях до скрипту входу до SMB" - -msgid "SMB profile path" -msgstr "Шлях до профілю SMB" - -msgid "SMB Home Directory" -msgstr "Домашній каталог SMB" - -msgid "SMB Home Directory Drive" -msgstr "Диск домашнього каталогу SMB" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "некоректний формат адреси електронної пошти: %(email)s" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "керування %(manager)s не знайдено" - -msgid "Issuer of the certificate" -msgstr "Видавець сертифіката" - -msgid "Subject of the certificate" -msgstr "Призначення сертифіката" - -msgid "cannot have an empty subject" -msgstr "поле призначення не може бути порожнім" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "не можна вказувати одночасно subject/issuer і certificate" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "не можна вказувати одночасно subject/issuer і ipacertmapdata" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "Додати одну або декілька прив’язок сертифікатів до запису користувача." - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "Додано прив’язки сертифікатів до запису користувача «%(value)s»" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" -"Вилучити одну або декілька прив’язок сертифікатів із запису користувача." - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "Вилучено прив’язки сертифікатів до запису користувача «%(value)s»" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" -"\n" -"Додаток для виконання декількох викликів ipa за допомогою одного віддаленого " -"виклику процедури\n" -"\n" -"Щоб запустити цей код на легкому сервері, віддайте такі команди:\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"де у файлі batch_request.json міститься десь такий код:\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"Формат відповіді має бути розподілений за рівнями вкладеності у подібний же " -"спосіб. На початку ви побачите таке:\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"а далі буде вкладена відповідь для кожного методу команди IPA, який було " -"надіслано у запиті\n" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" -"Виконати декілька викликів ipa за допомогою одного віддаленого виклику " -"процедури" - -msgid "must contain a tuple (list, dict)" -msgstr "має містити кортеж (список, словник)" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Додано користувача «%(value)s»" - -msgid "Default group for new users is not POSIX" -msgstr "Типовою групою для нових користувачів не є група POSIX" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Вилучено користувача «%(value)s»" - -#, python-format -msgid "%s: user is already preserved" -msgstr "%s: запис користувача вже захищено" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Змінено користувача «%(value)s»" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Відновлено обліковий запис користувача «%(value)s»" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "користувач «%s» вже є активним" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Обліковий запис користувача етапу «%(value)s»" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Вимкнено обліковий запис користувача «%(value)s»" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "Увімкнено обліковий запис користувача «%(value)s»" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" -"\n" -" Розблокувати обліковий запис користувача\n" -"\n" -" Обліковий запис може бути заблоковано, якщо відповідно до правил " -"безпеки\n" -" користувач перевищить обмеження на кількість введення помилкових " -"паролів\n" -" протягом певного часу. Запис блокується тимчасово, його може бути\n" -" розблоковано адміністратором." - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Розблоковано обліковий запис «%(value)s»" - -msgid "Failed logins" -msgstr "Кількість невдалих спроб увійти" - -msgid "Last successful authentication" -msgstr "Останнє успішне розпізнавання" - -msgid "Last failed authentication" -msgstr "Останнє невдале розпізнавання" - -msgid "Time now" -msgstr "Поточний час" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" -"\n" -" Стан блокування облікового запису користувача\n" -"\n" -" Обліковий запис може бути заблоковано, якщо введено неправильний пароль\n" -" забагато разів протягом певного проміжку часу, який визначається " -"правилами\n" -" роботи з паролями. Блокування облікового запису є тимчасовим станом, " -"його\n" -" може бути розблоковано адміністратором.\n" -"\n" -" Ця програма з’єднується з кожним основним вузлом IPA і показує стан\n" -" блокування на кожному з них.\n" -"\n" -" Щоб визначити, чи слід блокувати обліковий запис на певному сервері, " -"слід\n" -" виконати порівняння кількості помилкових спроб входу та час останньої\n" -" невдалої спроби з еталонними значеннями. Обліковий запис буде " -"заблоковано,\n" -" якщо буде перевищено кількість maxfail помилкових спроб протягом " -"проміжку\n" -" часу failinterval. Відповідні значення задаються правилами обробки " -"паролів,\n" -" пов’язаними з обліковим записом користувача.\n" -"\n" -" Зміни до лічильника помилкових спроб входу вносяться, лише коли " -"користувач\n" -" виконує спробу увійти, тому може статися так, що обліковий запис " -"заблоковано,\n" -" хоча час, що минув з останньої помилкової спроби, перевищує час " -"блокування\n" -" (lockouttime), заданий правилам обробки паролів. Це означає, що " -"користувач\n" -" може увійти до системи знову. " - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "Помилка %(host)s: %(error)s" - -#, python-format -msgid "%(host)s failed" -msgstr "Помилка %(host)s" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Обліковий запис вимкнено: %(disabled)s" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Додано сертифікати до запису користувача «%(value)s»" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Вилучено сертифікати із запису користувача «%(value)s»" - -msgid "Add new principal alias to the user entry" -msgstr "Додати новий псевдонім реєстраційного запису до запису користувача" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Додано нові псевдоніми до запису користувача «%(value)s»" - -msgid "Remove principal alias from the user entry" -msgstr "Вилучити псевдонім реєстраційного запису із запису користувача" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Вилучити псевдоніми із запису користувача «%(value)s»" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "встановлено відповідність %(count)d самообслуговування" +msgstr[1] "встановлено відповідність %(count)d самообслуговування" +msgstr[2] "встановлено відповідність %(count)d самообслуговувань" #, python-format msgid "all masters must have %(role)s role enabled" @@ -32028,6 +32032,27 @@ msgstr "Неперехідна зовнішня довіра до домену msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "Неперехідна зовнішня довіра до сумісної із RFC4120 області Kerberos" +msgid "Request must be a dict" +msgstr "Запит має належати до типу словника (dict)" + +msgid "Request is missing \"method\"" +msgstr "У запиті не вказано метод (\"method\")" + +msgid "Request is missing \"params\"" +msgstr "У запиті не вказано параметри (\"params\")" + +msgid "params must be a list" +msgstr "params має бути списком (list)" + +msgid "params must contain [args, options]" +msgstr "params має містити записи [аргументи, параметри]" + +msgid "params[0] (aka args) must be a list" +msgstr "params[0] (або аргументи) має бути списком (list)" + +msgid "params[1] (aka options) must be a dict" +msgstr "params[1] (або параметри) має належати до типу словника (dict)" + #, python-format msgid "" "\n" @@ -32055,27 +32080,6 @@ msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" "Топологія не дозволяє серверу %(server)s виконувати реплікацію із серверами:" -msgid "Request must be a dict" -msgstr "Запит має належати до типу словника (dict)" - -msgid "Request is missing \"method\"" -msgstr "У запиті не вказано метод (\"method\")" - -msgid "Request is missing \"params\"" -msgstr "У запиті не вказано параметри (\"params\")" - -msgid "params must be a list" -msgstr "params має бути списком (list)" - -msgid "params must contain [args, options]" -msgstr "params має містити записи [аргументи, параметри]" - -msgid "params[0] (aka args) must be a list" -msgstr "params[0] (або аргументи) має бути списком (list)" - -msgid "params[1] (aka options) must be a dict" -msgstr "params[1] (або параметри) має належати до типу словника (dict)" - #, python-format msgid "must equal %r" msgstr "має дорівнювати %r" diff --git a/po/zh_CN.po b/po/zh_CN.po index 047da8e64..4db6b4e99 100644 --- a/po/zh_CN.po +++ b/po/zh_CN.po @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:47+0200\n" +"POT-Creation-Date: 2021-02-15 20:32+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Chinese (China)\n" @@ -17,6 +17,101 @@ msgstr "" "Plural-Forms: nplurals=1; plural=0\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "无法解析主体名\n" + +#, fuzzy, c-format +#| msgid "Error parsing \"%1$s\": %2$s.\n" +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "解析\"%1$s\"：%2$s错误。\n" + +#, c-format +msgid "Removing principal %s\n" +msgstr "删除主体%s\n" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "打开keytab失败\n" + +#, c-format +msgid "principal not found\n" +msgstr "主体没有找到\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "无法删除条目\n" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to get result: %s\n" +msgid "Failed to set cursor '%1$s'\n" +msgstr "获取结果失败：%s\n" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "服务解析主体\n" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "域找不到\n" + +msgid "Print debugging information" +msgstr "打印调试信息" + +msgid "Debugging output" +msgstr "调试输出" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "从keytab中待删除的主体（例如：ftp/ftp.example.com@EXAMPLE.COM）" + +msgid "Kerberos Service Principal Name" +msgstr "Kerberos服务主体名" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "Keytab文件名" + +msgid "Remove all principals in this realm" +msgstr "删除该域中的所有主体" + +msgid "Realm name" +msgstr "域名" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "Kerberos文本初始化失败\n" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "打开keytab'%1$s'：%2$s失败\n" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "关闭keytab失败\n" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + #, c-format msgid "Out of memory!\n" msgstr "内存不足！\n" @@ -279,101 +374,6 @@ msgstr "主机名必须是完全限制的：%s\n" msgid "The hostname must not be: %s\n" msgstr "主机名必须不能是：%s\n" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "无法解析主体名\n" - -#, fuzzy, c-format -#| msgid "Error parsing \"%1$s\": %2$s.\n" -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "解析\"%1$s\"：%2$s错误。\n" - -#, c-format -msgid "Removing principal %s\n" -msgstr "删除主体%s\n" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "打开keytab失败\n" - -#, c-format -msgid "principal not found\n" -msgstr "主体没有找到\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "无法删除条目\n" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -#| msgid "Failed to get result: %s\n" -msgid "Failed to set cursor '%1$s'\n" -msgstr "获取结果失败：%s\n" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "服务解析主体\n" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "域找不到\n" - -msgid "Print debugging information" -msgstr "打印调试信息" - -msgid "Debugging output" -msgstr "调试输出" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "从keytab中待删除的主体（例如：ftp/ftp.example.com@EXAMPLE.COM）" - -msgid "Kerberos Service Principal Name" -msgstr "Kerberos服务主体名" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "Keytab文件名" - -msgid "Remove all principals in this realm" -msgstr "删除该域中的所有主体" - -msgid "Realm name" -msgstr "域名" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Kerberos文本初始化失败\n" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "打开keytab'%1$s'：%2$s失败\n" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "关闭keytab失败\n" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - #, c-format msgid "cannot open configuration file %s\n" msgstr "不能打开配置文件%s\n" @@ -9168,6 +9168,101 @@ msgid "" "Establish bi-directional trust. By default trust is inbound one-way only." msgstr "建立双向信任。默认信任仅是单项的。" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "指向该配置文件的配置文件ID" + +msgid "Profile description" +msgstr "配置文件描述" + +msgid "Brief description of this profile" +msgstr "该配置文件的简要描述" + +msgid "Store issued certificates" +msgstr "存储已发布证书" + +msgid "Whether to store certs issued using this profile" +msgstr "是否存储使用该配置文件的证书发布" + +msgid "Delete a Certificate Profile." +msgstr "删除一个证书配置文件。" + +msgid "Search for Certificate Profiles." +msgstr "查找证书配置文件。" + +msgid "Import a Certificate Profile." +msgstr "导入一个证书配置文件。" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "原始配置文件的文件名。不支持XML格式。" + +msgid "Modify Certificate Profile configuration." +msgstr "修改证书配置文件配置。" + +msgid "File containing profile configuration" +msgstr "文件包含配置文件配置" + +msgid "Display the properties of a Certificate Profile." +msgstr "显示一个证书配置文件的属性。" + +msgid "Write profile configuration to file" +msgstr "将配置文件配置写进文件" + msgid "" "\n" "ID ranges\n" @@ -9380,101 +9475,6 @@ msgid "" " " msgstr "" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "指向该配置文件的配置文件ID" - -msgid "Profile description" -msgstr "配置文件描述" - -msgid "Brief description of this profile" -msgstr "该配置文件的简要描述" - -msgid "Store issued certificates" -msgstr "存储已发布证书" - -msgid "Whether to store certs issued using this profile" -msgstr "是否存储使用该配置文件的证书发布" - -msgid "Delete a Certificate Profile." -msgstr "删除一个证书配置文件。" - -msgid "Search for Certificate Profiles." -msgstr "查找证书配置文件。" - -msgid "Import a Certificate Profile." -msgstr "导入一个证书配置文件。" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "原始配置文件的文件名。不支持XML格式。" - -msgid "Modify Certificate Profile configuration." -msgstr "修改证书配置文件配置。" - -msgid "File containing profile configuration" -msgstr "文件包含配置文件配置" - -msgid "Display the properties of a Certificate Profile." -msgstr "显示一个证书配置文件的属性。" - -msgid "Write profile configuration to file" -msgstr "将配置文件配置写进文件" - msgid "Remove users that can manage this token." msgstr "移除可以管理该令牌的用户。" @@ -11703,181 +11703,23 @@ msgstr "待添加的以逗号分隔的sudo命令组列表" msgid "comma-separated list of sudo command groups to remove" msgstr "待移除的以逗号分隔的sudo命令组列表" -msgid "Additional instructions:" -msgstr "附加指示：" +msgid "Results are truncated, try a more specific search" +msgstr "结果被截断，请尝试更明确的搜索" #, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" -"没有发送API版本号，不能保证向前兼容。假定服务器的API版本%(server_version)s" +msgid "Unknown option: %(option)s" +msgstr "未知的选项：%(option)s" -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" -"自从IPA 4.0后DNS转发器语义改变了。你可以使用正向区域（dnsforwardzone-*）来替" -"代。查看帮助文档获取更多详细信息。" +msgid "Client version. Used to determine if server will accept request." +msgstr "客户端版本。用来确定是否服务器接受请求。" -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "DNSSEC支持是实验性的。%(additional_info)s" +msgid "any of the configured servers" +msgstr "任何已配置的服务器" -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "'%(option)s'选项已弃用。%(additional_info)s" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "%(label)s语义已改变了。%(current_behavior)s %(hint)s" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "DNS服务器%(server)s：%(error)s。" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"DNS服务器%(server)s不支持DNSSEC：%(error)s。如果DNSSEC认证在IPA服务器上启用" -"了，请禁用它。" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" -"正向\"%(fwzone)s\"无效因为在认证区域\"%(authzone)s\"缺少合适的NS记录。请添加" -"NS记录\"%(ns_rec)s\"到父区域\"%(authzone)s\"。" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"DNS服务器%(server)s不支持EDNS0 (RFC 6891)：%(error)s。如果DNSSEC认证在IPA服务" -"器上启用了，请禁用它。" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" -"DNSSEC认证失败：%(error)s。请确认你的DNSSEC配置或者在所有IPA服务器中禁用" -"DNSSEC认证。" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" -"不能创建域%(domain)s中的_kerberos TXT记录(%(error)s)。可能是因为该区域没有被" -"IPA管理。请手动创建该记录，包含下面值：'%(realm)s'" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" -"不能移除域%(domain)s中的_kerberos TXT记录(%(error)s)。可能是因为该区域没有被" -"IPA管理。请手动移除该记录。" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "没有安装DNSSEC密钥主机。DNSSEC区域签名不会工作直到安装DNSSEC密钥主机。" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" -"相对记录名'%(record)s'将区域名'%(zone)s'当作一个后缀，导致FQDN '%(fqdn)s'。这" -"通常是由于在名称规范后缺少一个点号引起的错误。" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "'%(command)s'已被弃用。%(additional_info)s" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "查找结果被截断：%(reason)s" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "你对域%(domain)s的信任已中断。请再次运行'ipa trust-add'来重新创建它。" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "主机%(host)s的DNS记录不能被移除。(%(reason)s)" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "更新系统记录'%(record)s'失败：%(error)s" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "IPA没有管理区域%(zone)s，请手动在你的DNS服务器上添加记录" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "自动更新DNS系统记录失败。请手动重新运行更新系统记录来获取缺少的记录。" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "应用改变的配置需要在IPA服务器%(server)s上重启服务%(service)s。" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" -"在IPA位置%(location)s没有DNS服务器。没有DNS服务器位置是不会按预期工作的。" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, fuzzy, python-format -#| msgid "The character %(char)r is not allowed." -msgid "The certificate for %(ca)s is not available on this server." -msgstr "字符%(char)r是不允许的。" +#, fuzzy +#| msgid "The number of times to retry authentication" +msgid "Exceeded number of tries to forward a request." +msgstr "重试认证的次数" #, python-format msgid "%(count)d variables" @@ -11929,6 +11771,140 @@ msgstr "已弃用的选项" msgid "No file to read" msgstr "无文件可读" +msgid "incorrect type" +msgstr "不正确的类型" + +msgid "Only one value is allowed" +msgstr "只允许一个值" + +msgid "this option is deprecated" +msgstr "该选项已被弃用" + +msgid "must be True or False" +msgstr "必须是True或False" + +msgid "must be an integer" +msgstr "必须是一个整数" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "必须至少%(minvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "最多%(maxvalue)d" + +msgid "must be a decimal number" +msgstr "必须是一个十进制数" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "必须至少%(minvalue)s" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "最多%(maxvalue)s" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "数字类'%(cls)s'不在允许的数字类列表中：%(allowed)s" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "必须匹配模式\"%(pattern)s\"" + +msgid "must be binary data" +msgstr "必须是二进制数据" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "必须至少%(minlength)d字节" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "最多%(maxlength)d字节" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "必须恰好是%(length)d字节" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "must be a certificate" +msgstr "撤销证书。" + +#, fuzzy +#| msgid "Submit a certificate signing request." +msgid "must be a certificate signing request" +msgstr "提交一个证书签名请求。" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "解码证书签名请求失败：%s" + +msgid "must be Unicode text" +msgstr "必须是Unicode文本" + +msgid "Leading and trailing spaces are not allowed" +msgstr "开头和结尾空格是不允许的" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "必须至少%(minlength)d字符" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "最多%(maxlength)d字符" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "必须恰好是%(length)d字符" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "字符%(char)r是不允许的。" + +#, python-format +msgid "must be '%(value)s'" +msgstr "必须是'%(value)s'" + +#, python-format +msgid "must be one of %(values)s" +msgstr "必须是%(values)s中的一个" + +msgid "must be datetime value" +msgstr "必须是时间值" + +msgid "does not match any of accepted formats: " +msgstr "不匹配任何可接受的格式：" + +msgid "incomplete time value" +msgstr "不完整的时间值" + +msgid "must be DNS name" +msgstr "必须是DNS名" + +msgid "must be absolute" +msgstr "必须是绝对的" + +msgid "must be relative" +msgstr "必须是相对的" + +msgid "must be dictionary" +msgstr "必须是字典" + +msgid "must be Kerberos principal" +msgstr "必须是Kerberos主体" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "有缺陷的主体：'%(value)s'" + +msgid "Service principal is required" +msgstr "需要服务主体" + msgid "A dictionary representing an LDAP entry" msgstr "一个字典代表一个LDAP条目" @@ -11938,16 +11914,6 @@ msgstr "LDAP条目列表" msgid "All commands should at least have a result" msgstr "所有命令至少有一个返回值" -msgid "Results are truncated, try a more specific search" -msgstr "结果被截断，请尝试更明确的搜索" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "未知的选项：%(option)s" - -msgid "Client version. Used to determine if server will accept request." -msgstr "客户端版本。用来确定是否服务器接受请求。" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "%(cver)s客户端和在'%(server)s'的%(sver)s服务器不兼容" @@ -12305,157 +12271,182 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" -msgid "incorrect type" -msgstr "不正确的类型" - -msgid "Only one value is allowed" -msgstr "只允许一个值" - -msgid "this option is deprecated" -msgstr "该选项已被弃用" - -msgid "must be True or False" -msgstr "必须是True或False" - -msgid "must be an integer" -msgstr "必须是一个整数" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "必须至少%(minvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "最多%(maxvalue)d" - -msgid "must be a decimal number" -msgstr "必须是一个十进制数" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "必须至少%(minvalue)s" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "最多%(maxvalue)s" +msgid "Additional instructions:" +msgstr "附加指示：" #, python-format msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "数字类'%(cls)s'不在允许的数字类列表中：%(allowed)s" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" +"没有发送API版本号，不能保证向前兼容。假定服务器的API版本%(server_version)s" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" +"自从IPA 4.0后DNS转发器语义改变了。你可以使用正向区域（dnsforwardzone-*）来替" +"代。查看帮助文档获取更多详细信息。" #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "必须匹配模式\"%(pattern)s\"" - -msgid "must be binary data" -msgstr "必须是二进制数据" +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "DNSSEC支持是实验性的。%(additional_info)s" #, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "必须至少%(minlength)d字节" +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "'%(option)s'选项已弃用。%(additional_info)s" #, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "最多%(maxlength)d字节" +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "%(label)s语义已改变了。%(current_behavior)s %(hint)s" #, python-format -msgid "must be exactly %(length)d bytes" -msgstr "必须恰好是%(length)d字节" - -#, fuzzy -#| msgid "Revoke a certificate." -msgid "must be a certificate" -msgstr "撤销证书。" - -#, fuzzy -#| msgid "Submit a certificate signing request." -msgid "must be a certificate signing request" -msgstr "提交一个证书签名请求。" +msgid "DNS server %(server)s: %(error)s." +msgstr "DNS服务器%(server)s：%(error)s。" #, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "解码证书签名请求失败：%s" - -msgid "must be Unicode text" -msgstr "必须是Unicode文本" - -msgid "Leading and trailing spaces are not allowed" -msgstr "开头和结尾空格是不允许的" +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"DNS服务器%(server)s不支持DNSSEC：%(error)s。如果DNSSEC认证在IPA服务器上启用" +"了，请禁用它。" #, python-format -msgid "must be at least %(minlength)d characters" -msgstr "必须至少%(minlength)d字符" +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" +"正向\"%(fwzone)s\"无效因为在认证区域\"%(authzone)s\"缺少合适的NS记录。请添加" +"NS记录\"%(ns_rec)s\"到父区域\"%(authzone)s\"。" #, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "最多%(maxlength)d字符" +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"DNS服务器%(server)s不支持EDNS0 (RFC 6891)：%(error)s。如果DNSSEC认证在IPA服务" +"器上启用了，请禁用它。" #, python-format -msgid "must be exactly %(length)d characters" -msgstr "必须恰好是%(length)d字符" +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" +"DNSSEC认证失败：%(error)s。请确认你的DNSSEC配置或者在所有IPA服务器中禁用" +"DNSSEC认证。" #, python-format -msgid "The character %(char)r is not allowed." +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" +"不能创建域%(domain)s中的_kerberos TXT记录(%(error)s)。可能是因为该区域没有被" +"IPA管理。请手动创建该记录，包含下面值：'%(realm)s'" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" +"不能移除域%(domain)s中的_kerberos TXT记录(%(error)s)。可能是因为该区域没有被" +"IPA管理。请手动移除该记录。" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "没有安装DNSSEC密钥主机。DNSSEC区域签名不会工作直到安装DNSSEC密钥主机。" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" +"相对记录名'%(record)s'将区域名'%(zone)s'当作一个后缀，导致FQDN '%(fqdn)s'。这" +"通常是由于在名称规范后缺少一个点号引起的错误。" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "'%(command)s'已被弃用。%(additional_info)s" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "查找结果被截断：%(reason)s" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "你对域%(domain)s的信任已中断。请再次运行'ipa trust-add'来重新创建它。" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "主机%(host)s的DNS记录不能被移除。(%(reason)s)" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "更新系统记录'%(record)s'失败：%(error)s" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "IPA没有管理区域%(zone)s，请手动在你的DNS服务器上添加记录" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "自动更新DNS系统记录失败。请手动重新运行更新系统记录来获取缺少的记录。" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "应用改变的配置需要在IPA服务器%(server)s上重启服务%(service)s。" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" +"在IPA位置%(location)s没有DNS服务器。没有DNS服务器位置是不会按预期工作的。" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "The character %(char)r is not allowed." +msgid "The certificate for %(ca)s is not available on this server." msgstr "字符%(char)r是不允许的。" -#, python-format -msgid "must be '%(value)s'" -msgstr "必须是'%(value)s'" - -#, python-format -msgid "must be one of %(values)s" -msgstr "必须是%(values)s中的一个" - -msgid "must be datetime value" -msgstr "必须是时间值" - -msgid "does not match any of accepted formats: " -msgstr "不匹配任何可接受的格式：" - -msgid "incomplete time value" -msgstr "不完整的时间值" - -msgid "must be DNS name" -msgstr "必须是DNS名" - -msgid "must be absolute" -msgstr "必须是绝对的" - -msgid "must be relative" -msgstr "必须是相对的" - -msgid "must be dictionary" -msgstr "必须是字典" - -msgid "must be Kerberos principal" -msgstr "必须是Kerberos主体" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "有缺陷的主体：'%(value)s'" - -msgid "Service principal is required" -msgstr "需要服务主体" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "%(filename)s：文件没找到" - -#, fuzzy, python-brace-format -#| msgid "Unable to parse principal\n" -msgid "Unable to parse option {item}" -msgstr "服务解析主体\n" - -msgid "any of the configured servers" -msgstr "任何已配置的服务器" - -#, fuzzy -#| msgid "The number of times to retry authentication" -msgid "Exceeded number of tries to forward a request." -msgstr "重试认证的次数" - msgid "Filename is empty" msgstr "文件名为空" @@ -12559,6 +12550,19 @@ msgstr "必须存在至少一个值等同规范主体名称" msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "域或UPN后缀覆盖信任域命名空间" +#, python-format +msgid "%(filename)s: file not found" +msgstr "%(filename)s：文件没找到" + +#, fuzzy, python-brace-format +#| msgid "Unable to parse principal\n" +msgid "Unable to parse option {item}" +msgstr "服务解析主体\n" + +#, python-format +msgid "objectclass %s not found" +msgstr "对象类%s没找到" + #, python-format msgid "Retrieving CA cert chain failed: %s" msgstr "检索CA证书链失败：%s" @@ -12575,10 +12579,6 @@ msgstr "检索CA状态失败：%s" msgid "Retrieving CA status failed with status %d" msgstr "检索CA状态失败%d" -#, python-format -msgid "objectclass %s not found" -msgstr "对象类%s没找到" - #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "不能与CMS通信（状态%d）" @@ -12704,117 +12704,11 @@ msgid "%(count)d automount key matched" msgid_plural "%(count)d automount keys matched" msgstr[0] "已匹配%(count)d个自动挂载键" +#, python-format msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "CA没有配置" - -msgid "invalid Profile ID" -msgstr "无效的配置文件ID" - -msgid "Certificate Profile" -msgstr "证书配置文件" - -msgid "Certificate Profiles" -msgstr "证书配置文件" - -msgid "Profile configuration" -msgstr "配置文件配置" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "已匹配%(count)d个配置文件" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "已导入配置文件\"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Input data specified multiple times" -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "多次指定输入数据" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "配置文件ID '%(cli_value)s'与配置文件数据'%(file_value)s'不匹配" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "已删除配置文件\"%(value)s\"" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "预定义的配置文件'%(profile_id)s'不能被删除" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "已修改配置文件\"%(value)s\"" - -msgid "Certificate profiles cannot be renamed" -msgstr "证书配置文件不能被重命名" - -#, fuzzy -#| msgid "" -#| "Insufficient privilege to create a certificate with subject alt name '%s'." -msgid "Insufficient privilege to modify a certificate profile." -msgstr "没有权限创建主题alt名为'%s'的证书。" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "对条目'%s'的'krbLastPwdChange'属性没有'write'权限。" msgid "" "\n" @@ -13036,23 +12930,4436 @@ msgstr "%iCA已移除。" msgid "%i CAs removed." msgstr "%iCAs已移除。" -#, fuzzy, python-brace-format -#| msgid "" -#| "Domain Level cannot be raised to {0}, server {1} does not support it." msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "域级别不能提高到{0}，服务器{1}不支持它。" +"\n" +"Auto Membership Rule.\n" +msgstr "" +"\n" +"自动成员规则。\n" -msgid "Server does not support domain level functionality" +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" msgstr "" -msgid "Domain Level cannot be lowered." -msgstr "域级别不能降低了。" +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" +"\n" +"规则是和组名直接关联的，因此你不能创建一个没有组或主机组的规则。\n" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" +"\n" +"条件是一个用于389-ds的正则表达式来用一个自动成员规则区匹配一个新添加的条目。" +"如果它匹配一个兼容规则，那么该条目被添加到合适的组或主机组中去。\n" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" +"\n" +"一个默认组或主机组可以指定给不匹配任何规则的条目。万一是用户条目，则该组会是" +"一个会退组，因为在IPA配置中所有用户默认是指定组的成员。\n" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" +"\n" +"automember-rebuild命令可以用来对现有条目跟踪运行自动成员规则，以此来重建它们" +"的成员组。\n" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "自动成员规则" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(otype)s \"%(oname)s\"没有找到" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "%s不是一个有效的属性。" + +#, fuzzy +#| msgid "Add an automember rule." +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "添加一个自动成员规则。" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "已添加自动成员规则\"%(value)s\"" + +msgid "Auto Membership is not configured" +msgstr "自动成员没有配置" + +#, fuzzy +#| msgid "Add conditions to an automember rule." +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "添加条件到一个自动成员规则。" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "已在\"%(value)s\"上添加条件" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "自动成员规则：%s没有找到！" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Remove conditions from an automember rule." +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "从一个自动成员规则中移除条件。" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "已从\"%(value)s\"中移除条件" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Modify an automember rule." +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "修改一个自动成员规则。" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "已修改自动成员规则\"%(value)s\"" + +#, fuzzy +#| msgid "Delete an automember rule." +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "删除一个自动成员规则。" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "已删除自动成员规则\"%(value)s\"" + +#, fuzzy +#| msgid "Search for automember rules." +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "查找自动成员规则。" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "已匹配%(count)d个规则" + +#, fuzzy +#| msgid "Display information about an automember rule." +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "显示一个自动成员规则信息。" + +#, fuzzy +#| msgid "Set default (fallback) group for all unmatched entries." +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "对所有不匹配的条目设置默认（回退）组。" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "已为自动成员\"%(value)s\"设置默认（回滚）组" + +#, fuzzy +#| msgid "Remove default (fallback) group for all unmatched entries." +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "对所有不匹配的条目移除默认（回退）组。" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "已为自动成员\"%(value)s\"移除默认（回滚）组" + +msgid "No default (fallback) group set" +msgstr "没有设置（回滚）组" + +#, fuzzy +#| msgid "Display information about the default (fallback) automember groups." +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "显示默认（回退）自动成员组的信息。" + +msgid "Task DN" +msgstr "任务DN" + +msgid "DN of the started task" +msgstr "已开始任务的DN" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "至少指定其中一个选项：类型，用户，主机" + +msgid "users and hosts cannot both be set" +msgstr "用户和主机不能被同时设置" + +msgid "hosts cannot be set when type is 'group'" +msgstr "当类型是'group'是主机不能被设置" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "当类型是'hostgroup'是用户不能被设置" + +msgid "Automember rebuild membership task started" +msgstr "自动成员重建成员关系任务已开始" + +msgid "Automember rebuild membership task completed" +msgstr "自动成员重建成员关系任务已完成" + +#, python-format +msgid "Task DN = '%s'" +msgstr "任务DN = '%s'" + +msgid "Automember" +msgstr "自动成员" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Remove conditions from an automember rule." +msgid "Remove orphan automember rules" +msgstr "从一个自动成员规则中移除条件。" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "用户组" + +msgid "User Group" +msgstr "用户组" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "已添加组\"%(value)s\"" + +msgid "gid cannot be set for external group" +msgstr "gid不能被设置为外部组" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "已删除组\"%(value)s\"" + +msgid "privileged group" +msgstr "特权组" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "已修改组\"%(value)s\"" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "已匹配%(count)d个组" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"没有安装Samba 4不能执行外部成员验证。确认你已经在IPA服务器上安装了server-" +"trust-ad子包" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" +"没有自己的域配置不能执行加入操作。首先确认你已经在IPA服务器上运行了ipa-" +"adtrust-install命令" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "从用户\"%(value)s\"中分离组\"%(value)s\"" + +msgid "not allowed to modify user entries" +msgstr "不允许修改用户条目" + +msgid "not allowed to modify group entries" +msgstr "不允许修改组条目" + +msgid "Not a managed group" +msgstr "不是一个管理组" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this group." +msgstr "添加可以管理该令牌的用户" + +#, fuzzy +#| msgid "Remove users that can manage this token." +msgid "Remove users that can manage members of this group." +msgstr "移除可以管理该令牌的用户。" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" +"\n" +"DNS服务器配置\n" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" +"\n" +"设置DNS服务器配置\n" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "DNS服务器" + +msgid "DNS servers" +msgstr "DNS服务器" + +msgid "DNS Servers" +msgstr "DNS服务器" + +msgid "DNS Server" +msgstr "DNS服务器" + +msgid "DNS Server name" +msgstr "DNS服务器名" + +msgid "SOA mname override" +msgstr "SOA mname覆盖" + +msgid "SOA mname (authoritative server) override" +msgstr "SOA mname（权威服务器）覆盖" + +msgid "Forwarders" +msgstr "转发器" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Per-server转发器。使用标准格式\"IP_ADDRESS port PORT\"为每个转发器指定一个自" +"定义端口" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" +"Per-server有条件的转发器策略。设置为\"none\"来禁止该区域转发至全局转发器。那" +"样的话，有条件的区域转发器被忽视了。" + +msgid "DNS is not configured" +msgstr "DNS没有配置" + +msgid "Modify DNS server configuration" +msgstr "修改DNS服务器配置" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "已修改DNS服务器\"%(value)s\"" + +msgid "Search for DNS servers." +msgstr "查找DNS服务器。" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "已匹配%(count)d个DNS服务器" + +#, fuzzy +#| msgid "KRA service is not enabled" +msgid "IPA DNS Server is not installed" +msgstr "KRA服务没有启用" + +msgid "Display configuration of a DNS server." +msgstr "显示一个DNS服务器配置。" + +msgid "Add a new DNS server." +msgstr "添加一个新的DNS服务器。" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "已添加新的DNS服务器\"%(value)s\"" + +msgid "Delete a DNS server" +msgstr "删除一个DNS服务器" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "已删除DNS服务器\"%(value)s\"" + +msgid "Host-based access control commands" +msgstr "基于主机访问控制命令" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "HBAC服务" + +msgid "HBAC Services" +msgstr "HBAC服务" + +msgid "HBAC Service" +msgstr "HBAC服务" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "已添加HBAC服务\"%(value)s\"" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "已删除HBAC服务\"%(value)s\"" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "已修改HBAC服务\"%(value)s\"" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "已匹配%(count)d个HBAC服务" + +msgid "HBAC service group" +msgstr "HBAC服务组" + +msgid "HBAC service groups" +msgstr "HBAC服务组" + +msgid "HBAC Service Groups" +msgstr "HBAC服务组" + +msgid "HBAC Service Group" +msgstr "HBAC服务组" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "已添加HBAC服务组\"%(value)s\"" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "已删除HBAC服务组\"%(value)s\"" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "已修改HBAC服务组\"%(value)s\"" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "已匹配%(count)d个HBAC服务组" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" +"\n" +"基类用户\n" +"\n" +"这包含了用户/计划用户常见的定义\n" + +msgid "must be TRUE or FALSE" +msgstr "必须是TRUE或FALSE" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "Principal alias" +msgstr "主体别名" + +#, fuzzy +#| msgid "Password expiration" +msgid "User password expiration" +msgstr "密码过期" + +msgid "SSH public key fingerprint" +msgstr "SSH公钥指纹" + +msgid "Base-64 encoded user certificate" +msgstr "Base-64编码的用户证书" + +#, fuzzy +#| msgid "Certificate Association Data" +msgid "Certificate mapping data" +msgstr "证书关联数据" + +msgid "SMB logon script path" +msgstr "" + +#, fuzzy +#| msgid "%i profile added." +msgid "SMB profile path" +msgstr "%i配置文件已添加。" + +#, fuzzy +#| msgid "Home directory" +msgid "SMB Home Directory" +msgstr "主目录" + +#, fuzzy +#| msgid "Home directory base" +msgid "SMB Home Directory Drive" +msgstr "主目录" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "无效的电子邮件格式：%(email)s" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "管理员%(manager)s没有找到" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "最多%(len)d个字符" + +msgid "Issuer" +msgstr "发行人" + +#, fuzzy +#| msgid "file to store certificate in" +msgid "Issuer of the certificate" +msgstr "存储证书文件" + +msgid "Subject" +msgstr "主题" + +#, fuzzy +#| msgid "File to store the certificate in." +msgid "Subject of the certificate" +msgstr "存储证书文件。" + +#, fuzzy +#| msgid "cannot be empty" +msgid "cannot have an empty subject" +msgstr "不能为空" + +#, fuzzy +#| msgid "cannot specify both raw certificate and file" +msgid "cannot specify both subject/issuer and certificate" +msgstr "不能同时指定原始证书和文件" + +#, fuzzy +#| msgid "cannot specify both raw certificate and file" +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "不能同时指定原始证书和文件" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificate mappings to the user entry." +msgstr "向用户条目中添加一个或多个证书" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "已为用户\"%(value)s\"添加证书" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificate mappings from the user entry." +msgstr "向用户条目中移除一个或多个证书" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "已为用户\"%(value)s\"删除证书" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "必须包含一个元组（列表，字典）" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "域级别不能提高到{0}，服务器{1}不支持它。" +msgid "{role}: role not found" +msgstr "{role}：角色没有找到" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "{attr}：没有这样的属性" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" +"\n" +"拓扑\n" +"\n" +"域级别为1的复制拓扑的管理。\n" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "拓扑管理需要最小域级别{0}" + +msgid "segment" +msgstr "段" + +msgid "segments" +msgstr "段" + +msgid "Topology Segments" +msgstr "拓扑段" + +msgid "Topology Segment" +msgstr "拓扑段" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "左节点不是一个拓扑节点：%(leftnode)s" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "右节点不是一个拓扑节点：%(rightnode)s" + +msgid "left node and right node must not be the same" +msgstr "左节点和右节点必须不同" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "左节点({host})不支持后缀'{suff}'" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "右节点({host})不支持后缀'{suff}'" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "已匹配%(count)d个段" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "已添加段\"%(value)s\"" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "已删除段\"%(value)s\"" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "已修改段\"%(value)s\"" + +#, python-format +msgid "%(value)s" +msgstr "%(value)s" + +msgid "left or right node has to be specified" +msgstr "左或右节点没有被指定" + +msgid "only one node can be specified" +msgstr "仅有一个节点可以被指定" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "副本更新段：要求\"%(pkey)s\"。" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "停止副本更新段：要求\"%(pkey)s\"。" + +msgid "suffixes" +msgstr "后缀" + +msgid "Topology suffixes" +msgstr "拓扑后缀" + +msgid "Topology suffix" +msgstr "拓扑后缀" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "已匹配%(count)d个拓扑后缀" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "已删除拓扑后缀\"%(value)s\"" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "已添加拓扑后缀\"%(value)s\"" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "已修改拓扑后缀\"%(value)s\"" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" +"\n" +"验证复制拓扑的后缀。\n" +"检查完成：\n" +" 1. 检查是否还有没有连接的拓扑。换句话说，是否在所有服务器之间存在复制路" +"径。\n" +" 2. 检查是否服务器没有超过推荐的副本协议数\n" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "Kerberos主体%s已存在。使用'ipa user-mod'来手动设置它。" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "不能确定Kerberos主体%s是否存在。使用'ipa user-mod'来手动设置它。" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "添加用户到默认组失败。使用'ipa group-add-member'来手动添加。" + +msgid "Migration of LDAP search reference is not supported." +msgstr "LDAP搜索帮助移植不支持。" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "%(user)s不是一个POSIX用户" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "检查存在组的GID。使用--group-overwrite-gid选项来覆盖GID" + +msgid "Invalid LDAP URI." +msgstr "无效的LDAP URI。" + +#, python-format +msgid "%s to exclude from migration" +msgstr "不移植%s" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "查询待移植对象的结果被服务器拦截；移植过程可能没有完成\n" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" +"%(container)s LDAP搜索没有返回任何结果（搜索基：%(search_base)s，对象类： " +"%(objectclass)s）" + +msgid "Default group for new users not found" +msgstr "新用户的默认组没有找到" + +msgid "netgroups" +msgstr "网络组" + +msgid "Netgroups" +msgstr "网络组" + +msgid "Netgroup" +msgstr "网络组" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "已添加网络组\"%(value)s\"" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "主机组名\"%s\"已存在。主机组和网络组共享一个共同的名字空间" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "已删除网络组\"%(value)s\"" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "已修改网络组\"%(value)s\"" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "已匹配%(count)d个网络组" + +msgid "One time password commands" +msgstr "一次性密码命令" + +msgid "OTP configuration options" +msgstr "OTP配置选项" + +msgid "OTP Configuration" +msgstr "OTP配置" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "已改变\"%(value)s\"的密码" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +#, fuzzy +#| msgid "Trust status" +msgid "PKINIT status" +msgstr "信任状态" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "Whether PKINIT is enabled or disabled" +msgstr "条目不能被启用或禁用" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)s server role matched" +#| msgid_plural "%(count)s server roles matched" +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "已匹配%(count)s个服务器角色" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" +"\n" +"RADIUS代理服务器\n" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" +"\n" +"管理RADIUS代理服务器。\n" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" +"\n" +"IPA对于krb5 OTP认证支持使用额外的RADIUS代理服务器。这在集成第三方认证服务时提" +"供了很多方便。\n" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "无效的属性名" + +msgid "invalid port number" +msgstr "无效的端口号" + +msgid "RADIUS proxy server" +msgstr "RADIUS代理服务器" + +msgid "RADIUS proxy servers" +msgstr "RADIUS代理服务器" + +msgid "RADIUS Servers" +msgstr "RADIUS代理服务器" + +msgid "RADIUS Server" +msgstr "RADIUS代理服务器" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "已添加RADIUS代理服务器\"%(value)s\"" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "已删除RADIUS代理服务器\"%(value)s\"" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "已修改RADIUS代理服务器\"%(value)s\"" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "已匹配%(count)d个RADIUS代理服务器" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "不能给一个特权添加带有绑定类型\"%(bindtype)s\"的权限\"%(perm)s\"" + +msgid "Privilege" +msgstr "特权" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "已添加特权\"%(value)s\"" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "已删除特权\"%(value)s\"" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "已修改特权\"%(value)s\"" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "已匹配%(count)d个特权" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "优先权必须是一个唯一值（(%(prio)d已被%(gname)s使用）" + +msgid "Add Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Delete an IPA service." +msgid "Delete Class of Service entry" +msgstr "删除一个IPA服务。" + +#, fuzzy +#| msgid "Modify an HBAC service group." +msgid "Modify Class of Service entry" +msgstr "修改一个HBAC服务组。" + +msgid "Display Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Search for an HBAC service group." +msgid "Search for Class of Service entry" +msgstr "查找一个HBAC服务组。" + +msgid "password policy" +msgstr "密码策略" + +msgid "password policies" +msgstr "密码策略" + +msgid "Password Policies" +msgstr "密码策略" + +msgid "Password Policy" +msgstr "密码策略" + +msgid "Max repeat" +msgstr "" + +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of same consecutive characters" +msgstr "返回的最大条目数" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "用户名" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "最小密码生存周期必须比最小值大。" + +msgid "cannot delete global password policy" +msgstr "不能删除全局密码策略" + +msgid "priority cannot be set on global policy" +msgstr "优先权布不能在本地策略上设置" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "Realm域" + +msgid "Realm Domains" +msgstr "Realm域" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "DNS区域的每个realm域必须包括SOA或NS记录。没有找到记录：%s" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "下面的域不属于该realm：%(domains)s" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" +"下面域的realm不能被检测到：%(domains)s。如果有属于该realm的域，请为它们创建一" +"个包含\"%(realm)s\"的_kerberos TXT记录。" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" +"--domain选项不能和--add-domain或--del-domain选项一起使用。使用--domain来显示" +"地指定整个realm域列表，添加/删除个别域，使用--add-domain/--del-domain。" + +msgid "IPA server domain cannot be omitted" +msgstr "IPA服务器域不能被省略" + +msgid "IPA server domain cannot be deleted" +msgstr "IPA服务器域不能被删除" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "允许模仿" + +msgid "Member principals" +msgstr "成员主体" + +#, fuzzy, python-format +#| msgid "Malformed principal: '%(value)s'" +msgid "Malformed principal: %(error)s" +msgstr "有缺陷的主体：'%(value)s'" + +msgid "Add target to a named service delegation." +msgstr "添加目标到一个命名服务授权。" + +#, python-format +msgid "member %s" +msgstr "成员%s" + +msgid "Remove member from a named service delegation." +msgstr "从一个命名服务授权中删除成员。" + +msgid "service delegation rule" +msgstr "服务授权规则" + +msgid "service delegation rules" +msgstr "服务授权规则" + +msgid "Service delegation rules" +msgstr "服务授权规则" + +msgid "Service delegation rule" +msgstr "服务授权规则" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "已添加服务授权规则\"%(value)s\"" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "已删除服务授权规则\"%(value)s\"" + +msgid "privileged service delegation rule" +msgstr "特权服务授权规则" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "已匹配%(count)d个服务授权规则" + +msgid "service delegation target" +msgstr "服务授权目标" + +msgid "service delegation targets" +msgstr "服务授权目标" + +msgid "Service delegation targets" +msgstr "服务授权目标" + +msgid "Service delegation target" +msgstr "服务授权目标" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "已添加服务授权目标\"%(value)s\"" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "已删除服务授权目标\"%(value)s\"" + +msgid "privileged service delegation target" +msgstr "特权服务授权目标" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "已匹配%(count)d个服务授权目标" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "计划用户" + +msgid "Stage User" +msgstr "计划用户" + +msgid "stage user" +msgstr "计划用户" + +msgid "stage users" +msgstr "计划用户" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "已添加计划用户\"%(value)s\"" + +msgid "givenname is required" +msgstr "需要名字" + +msgid "sn is required" +msgstr "需要sn" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "已删除计划用户\"%(value)s\"" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "已修改计划用户\"%(value)s\"" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "已匹配%(count)d个用户" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "激活一个计划用户\"%(value)s\"" + +msgid "Entry RDN is not 'uid'" +msgstr "条目RDN不是'uid'" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "条目没有'%(attribute)s'" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "活跃用户名\"%(user)s\"已存在" + +#, python-format +msgid "Stage user %s activated" +msgstr "计划用户%s已激活" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificates to the stageuser entry" +msgstr "向用户条目中添加一个或多个证书" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "已为用户\"%(value)s\"添加证书" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificates to the stageuser entry" +msgstr "向用户条目中移除一个或多个证书" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "已为用户\"%(value)s\"删除证书" + +#, fuzzy +#| msgid "Add new principal alias to the user entry" +msgid "Add new principal alias to the stageuser entry" +msgstr "为用户条目添加新的主体别名" + +#, fuzzy, python-format +#| msgid "Added new aliases to user \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "已为用户\"%(value)s\"添加新别名" + +#, fuzzy +#| msgid "Remove principal alias from the user entry" +msgid "Remove principal alias from the stageuser entry" +msgstr "从用户条目中删除主体别名" + +#, fuzzy, python-format +#| msgid "Removed aliases from user \"%(value)s\"" +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "已从用户\"%(value)s\"中删除别名" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "向用户条目中添加一个或多个证书" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "向用户条目中移除一个或多个证书" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" +"\n" +"IPA证书操作\n" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" +"\n" +"实现了一组命令来管理服务器的SSL证书。\n" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" +"\n" +"证书请求以PEM格式的证书签名请求(CSR)的形式存在。\n" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" +"\n" +"dogtag CA只是使用CSR的CN值，并强制主题的其他值在服务器中配置。\n" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" +"\n" +"一个证书是以一个服务主体存储，并一个服务主体需要一个主机。\n" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" +"\n" +"为了请求一个证书：\n" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" +"\n" +"* 主机必须存在\n" +"* 服务必须存在（或者你使用--add选项来自动添加它）\n" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" +"\n" +"查找：\n" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" +"\n" +"证书可能通过证书主题，序列号，撤销原因，有效日期和发布日期来查询。\n" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" +"\n" +"GMT格式的日期用来匹配证书里的日期。\n" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" +"\n" +"日期格式是YYYY-mm-dd。\n" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +#, fuzzy +#| msgid "Retrieve an existing certificate." +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "检索一个已存在的证书。" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +#, fuzzy +#| msgid "Check the status of a certificate signing request." +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "检查证书签名请求的状态。" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +#| "revocation reason details. " +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "撤销证书的原因（0-10）。输入\"ipa help cert\"来查看详细撤销原因。" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" +"\n" +"支持下面的撤销原因：\n" + +#, fuzzy +#| msgid "Unspecified" +msgid " * 0 - unspecified\n" +msgstr "未指定的" + +#, fuzzy +#| msgid "Key Compromise" +msgid " * 1 - keyCompromise\n" +msgstr "密钥泄露" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +#, fuzzy +#| msgid "CA certificate" +msgid " * 6 - certificateHold\n" +msgstr "CA证书" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +#, fuzzy +#| msgid "Privilege Withdrawn" +msgid " * 9 - privilegeWithdrawn\n" +msgstr "特权撤销" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" +"\n" +"注意没有使用原因码7。查看RFC 5280以获取更多详细信息：\n" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "CA没有配置" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" +"主体'%(principal)s'不允许使用含配置文件'%(profile_id)s'的CA '%(ca)s'来发布证" +"书。" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Host '%(host)s' not found" +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "主机'%(host)s'没有找到" + +msgid "Issuing CA" +msgstr "发行CA" + +msgid "Name of issuing CA" +msgstr "签发的CA名称" + +msgid "Base-64 encoded certificate." +msgstr "Base-64编码的证书。" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate chain" +msgstr "证书" + +#, fuzzy +#| msgid "CA certificate" +msgid "X.509 certificate chain" +msgstr "CA证书" + +msgid "Subject email address" +msgstr "主题电子邮件地址" + +msgid "Subject DNS name" +msgstr "主题DNS名" + +msgid "Subject X.400 address" +msgstr "主题X.400地址" + +msgid "Subject directory name" +msgstr "主题目录名" + +msgid "Subject EDI Party name" +msgstr "主题EDI参与方名称" + +msgid "Subject URI" +msgstr "主题URI" + +msgid "Subject IP Address" +msgstr "主题IP地址" + +msgid "Subject OID" +msgstr "主题OID" + +msgid "Subject UPN" +msgstr "主题UPN" + +msgid "Subject Kerberos principal name" +msgstr "主题Kerberos主体名" + +msgid "Subject Other Name" +msgstr "主题别名" + +msgid "Issuer DN" +msgstr "证书颁发机构名字" + +msgid "Not Before" +msgstr "不早于" + +msgid "Not After" +msgstr "不晚于" + +msgid "Fingerprint (SHA1)" +msgstr "指纹（SHA1）" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "Fingerprint (SHA256)" +msgstr "指纹（SHA1）" + +msgid "Serial number (hex)" +msgstr "序列号（十六进制）" + +msgid "Request status" +msgstr "请求状态" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "如果主体不存在则自动添加它（仅对服务主体）" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "在请求的主题中找不到通用名。" + +#, fuzzy, python-format +#| msgid "" +#| "hostname in subject of request '%(cn)s' does not match principal hostname " +#| "'%(hostname)s'" +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "请求主题'%(cn)s'的主机名与主体主机名'%(hostname)s'不匹配" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "请求主题'%(cn)s'的主机名与主体主机名'%(hostname)s'不匹配" + +msgid "DN commonName does not match user's login" +msgstr "DN通用名与用户登录名不匹配" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "DN电子邮件地址不匹配任何用户的电子邮件地址" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "对条目'%s'的'userCertificate'属性没有'write'权限。" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "主题alt名称类型%s禁止用户主体" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "在证书请求中主题alt名为%s的服务主体不存在" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "没有权限创建主题alt名为'%s'的证书。" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "在主题alt名中的主体'%s'与请求的主体不匹配" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "RFC822名称与任何用户的电子邮件地址都不匹配" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "主题alt名称类型%s禁止非用户主体" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "主题alt名称类型%s被禁止" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "CA'%s'被禁用" + +msgid "'add' option" +msgstr "'add'选项" + +msgid "The principal for this request doesn't exist." +msgstr "该请求的主题不存在。" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "状态" + +msgid "Revoked" +msgstr "撤销" + +msgid "Revocation reason" +msgstr "撤消原因" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "撤销证书的原因（0-10）。输入\"ipa help cert\"来查看详细撤销原因。" + +#, python-format +msgid "Owner %s" +msgstr "所有者%s" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "由CA'%(ca)s'发布序列号为%(serial)s的证书没有找到" + +msgid "7 is not a valid revocation reason" +msgstr "7不是一个有效的撤销原因" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "结果应该只包括主键属性(\"certificate\")" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "已匹配%(count)d个证书" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "查找含这些所有者%s的证书。" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "查找不含这些所有者%s的证书。" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "sudo命令" + +msgid "sudo commands" +msgstr "sudo命令" + +msgid "Sudo Commands" +msgstr "Sudo命令" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "已添加Sudo命令\"%(value)s\"" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "已删除Sudo命令\"%(value)s\"" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "已修改Sudo命令\"%(value)s\"" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "已匹配%(count)d个Sudo命令" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" +"\n" +"Sudo规则\n" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" +"\n" +"Sudo (su \"do\")允许一个系统管理员给特定用户（或用户组）授予权限使其有以root" +"或其他用户的能力来运行一些（或全部）命令，同时会对命令和命令参数提供一个审计" +"跟踪。\n" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" +"\n" +"IPA提供了一种方法来配置Sudo的各个方面：\n" +" 用户：用户/用户组允许调用Sudo。\n" +" 主机：主机/主机组上的用户允许调用Sudo。\n" +" 允许的命令：指定命令允许通过Sudo来运行。\n" +" 阻止的命令：指定命令禁止通过Sudo来运行。\n" +" 作为用户来运行：Sudo会调用用户或用户组的权限。\n" +" 作为组来运行：Sudo会调用组的gid权限。\n" +" 选项：各种Sudoers选项可以修改Sudo的行为。\n" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" +"\n" +"顺序可以添加到一个sudo规则中来控制它们评估的顺序（如果客户端支持）。该顺序是" +"一个整数并且是唯一的。\n" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "该选项已被弃用。" + +msgid "sudo rules" +msgstr "sudo规则" + +msgid "Sudo Rules" +msgstr "Sudo规则" + +msgid "Sudo Rule" +msgstr "Sudo规则" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "序号必须是唯一值（%(order)d已被%(rule)s使用）" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "已添加Sudo规则\"%(value)s\"" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "已删除Sudo规则\"%(value)s\"" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "已修改Sudo规则\"%(value)s\"" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "%(type)s类别不能设置为all'，虽然有允许%(objects)s" + +msgid "users" +msgstr "用户" + +msgid "command" +msgstr "命令" + +msgid "commands" +msgstr "命令" + +msgid "runAs user" +msgstr "作为用户来运行" + +msgid "runAs users" +msgstr "作为用户来运行" + +msgid "group runAs" +msgstr "作为组来运行" + +msgid "runAs groups" +msgstr "作为组来运行" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "已匹配%(count)d个Sudo规则" + +msgid "commands cannot be added when command category='all'" +msgstr "当命令类别='all'时命令不能被添加" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "当作为用户来运行或作为组来运行类别='all'时用户不能被添加" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "作为用户来运行不能接受'%(name)s'来作为一个用户名" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "作为用户来运行不能接受'%(name)s'来作为一个组名" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "作为组来运行不能接受'%(name)s'来作为一个组名" + +msgid "operation not defined" +msgstr "操作没有定义" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "不允许执行操作：%s" + +msgid "No such virtual command" +msgstr "没有这样的虚拟命令" + +msgid "commands for controlling sudo configuration" +msgstr "控制sudo配置的命令" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "sudo命令组" + +msgid "sudo command groups" +msgstr "sudo命令组" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "已添加Sudo命令组\"%(value)s\"" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "已删除Sudo命令组\"%(value)s\"" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "已修改Sudo命令组\"%(value)s\"" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "已匹配%(count)d个Sudo命令组" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "另外，下面服务器可以运行该命令：%(masters)s" + +msgid "AD Trust setup" +msgstr "AD信任设置" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" +"没有安装Samba 4不能执行被选命令。确认你已经在IPA上安装了server-trust-ad子包。" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" +"没有在该机器上进行Samba 4实例配置不能执行被选命令。确认你已经在该服务器上运行" +"ipa-adtrust-install。" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" +"没有自己的域配置不能在信任域中查找。首先确认你已经在IPA服务器上运行了ipa-" +"adtrust-install命令" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "从信任森林中获取域失败。在error_log中查看详细信息" + +msgid "trust" +msgstr "信任" + +msgid "trusts" +msgstr "信任" + +msgid "Trusts" +msgstr "信任" + +msgid "Trust" +msgstr "信任" + +#, fuzzy +#| msgid "SID blacklist incoming" +msgid "SID blocklist incoming" +msgstr "进来的SID黑名单" + +#, fuzzy +#| msgid "SID blacklist outgoing" +msgid "SID blocklist outgoing" +msgstr "出去的SID黑名单" + +msgid "Trust direction" +msgstr "信任方向" + +msgid "Trust type" +msgstr "信任类型" + +msgid "Trust status" +msgstr "信任状态" + +msgid "UPN suffixes" +msgstr "UPN后缀" + +#, fuzzy, python-brace-format +#| msgid "invalid Profile ID" +msgid "invalid SID: {SID}" +msgstr "无效的配置文件ID" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Active Directory domain range" +msgstr "活动目录域范围" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "有POSIX属性的活动目录信任范围" + +#, fuzzy +#| msgid "" +#| "Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "信任域ID范围的类型，是ipa-ad-trust-posix和ipa-ad-trust中的一个" + +msgid "External trust" +msgstr "外部的信任" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "建立外部信任到另一个森林域中。信任不会在域外传递。" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "已添加活动目录域\"%(value)s\"" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "重建信任域\"%(value)s\"" + +msgid "missing base_id" +msgstr "缺少base_id" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "pysss_murmur在服务器上不可用并没有提供base-id。" + +msgid "trust type" +msgstr "信任类型" + +msgid "only \"ad\" is supported" +msgstr "仅支持\"ad\"" + +msgid "domain" +msgstr "域" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "不能建立一个信任到部署在IPA同一域中的AD。这样的设置不支持。" + +msgid "Realm-domain mismatch" +msgstr "Realm-domain不匹配" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "为了建立信任活动目录，IPA服务器的域名和realm名必须匹配" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" +"信任域%(domain)s包含在IPArealm域中。建立信任需要删除之前的。查看\"ipa " +"realmdomains-mod --del-domain\"命令。" + +msgid "Trusted domain and administrator account use different realms" +msgstr "信任域和管理员账户使用不同域" + +msgid "Realm administrator password should be specified" +msgstr "域管理员密码应该被指定" + +msgid "id range type" +msgstr "id范围类型" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" +"当添加一个AD信任时仅有ipa-ad-trust和ipa-ad-trust-posix允许--range-type值。" + +msgid "id range" +msgstr "id范围" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" +"id范围已在该域中存在。你要么删除旧的范围，要么从命令中排除--base-id/--range-" +"size选项。" + +msgid "range exists" +msgstr "范围内存在" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "同名但不同域SID的ID范围已存在。新信任域的ID范围必须手动创建。" + +msgid "range type change" +msgstr "范围类型改变" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" +"信任域的ID范围已存在，但它有一个不同类型。请手动删除旧的范围，或者通过--" +"range-type选项不强制类型。" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "在IPA DNS中转发器策略阻止了它，也许是转发器指向了不正确的主机？" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "不能在AD中验证写权限" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "执行信任设置时没有指定足够的参数" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "已删除信任\"%(value)s\"" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "已修改信任\"%(value)s\"（改变将在60s内生效）" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "已匹配%(count)d个信任" + +msgid "trust configuration" +msgstr "信任配置" + +msgid "Global Trust Configuration" +msgstr "全局信任配置" + +msgid "IPA AD trust agents" +msgstr "IPA AD信任代理" + +msgid "IPA servers configured as AD trust agents" +msgstr "IPA服务器配置为AD信任代理" + +msgid "IPA AD trust controllers" +msgstr "IPA AD信任控制器" + +msgid "IPA servers configured as AD trust controllers" +msgstr "IPA服务器配置为AD信任控制器" + +msgid "unsupported trust type" +msgstr "不支持的信任类型" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "已修改\"%(value)s\"信任配置" + +msgid "Name" +msgstr "名称" + +#, fuzzy +#| msgid "GID" +msgid "SID" +msgstr "GID" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "该命令依赖于\"editors\"组的存在，但是该组没有找到。" + +msgid "trust domain" +msgstr "信任域" + +msgid "trust domains" +msgstr "信任域" + +msgid "Trusted domains" +msgstr "已信任的域" + +msgid "Trusted domain" +msgstr "已信任的域" + +msgid "Domain enabled" +msgstr "域已启用" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "删除信任域\"%(value)s\"的信息" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "不能删除信任的根域，使用trust-del来删除它自己的信任" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "信任域列表更新成功。使用trustdomain-find命令来列举它们。" + +#, fuzzy +#| msgid "IPA servers configured as AD trust agents" +msgid "Configure this server as a trust agent." +msgstr "IPA服务器配置为AD信任代理" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "必须是\"%s\"" + +#, fuzzy +#| msgid "not allowed to modify user entries" +msgid "not allowed to remotely add agent" +msgstr "不允许修改用户条目" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "已启用信任域\"%(value)s\"" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "信任的根域总是支持现有的信任" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "已禁用信任域\"%(value)s\"" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "不能禁用信任的根域，使用trust-del来删除它自己的信任" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +#, fuzzy +#| msgid "Subject DNS name" +msgid "Object class name" +msgstr "主题DNS名" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" +"\n" +"IPA服务器角色\n" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" +"\n" +"获取由IPA主服务器提供的角色（DNS服务器，CA等）状态。\n" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "服务器角色" + +msgid "server roles" +msgstr "服务器角色" + +msgid "IPA Server Roles" +msgstr "IPA服务器角色" + +msgid "IPA Server Role" +msgstr "IPA服务器角色" + +msgid "IPA server role name" +msgstr "IPA服务器角色名" + +msgid "Role status" +msgstr "角色状态" + +msgid "Status of the role" +msgstr "角色状态" + +msgid "Show role status on a server" +msgstr "显示服务器角色状态" + +msgid "Find a server role on a server(s)" +msgstr "在服务器上找到一个服务器角色" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "已匹配%(count)s个服务器角色" + +#, fuzzy +#| msgid "Included attributes" +msgid "Include IPA master entries" +msgstr "包含的属性" + +msgid "roles" +msgstr "角色" + +msgid "IPA role name" +msgstr "IPA角色名" + +msgid "" +"\n" +"Vaults\n" +msgstr "" +"\n" +"库\n" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" +"\n" +"管理库。\n" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" +"\n" +"基于所有者管理有三种库类别：\n" +"* 用户/私有库\n" +"* 服务库\n" +"* 共享库\n" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" +"\n" +"用户库被特定用户拥有并使用。私有库被当前用户拥有。服务库被一个服务拥有。共享" +"库被管理员拥有但可以被其他用户或服务使用。\n" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" +"\n" +"基于安全机制有三种库类型：\n" +"* 标准库\n" +"* 对称库\n" +"* 非对称库\n" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" +"\n" +"标准库使用一种安全机制来传输和存储密码。密码仅能被有权限访问该库的用户检" +"索。\n" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" +"\n" +"对称库和标准库类似，但它在传输前会使用一个密码来预加密该密码。密码仅能使用相" +"同的密码来检索。\n" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" +"\n" +"非对称库和标准库类似，但它在传输前会使用一个公钥来预加密密码。该密码仅能通过" +"对应的私钥来检索。\n" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" +"\n" +" 库容器对象。\n" +" " + +msgid "vaultcontainer" +msgstr "库容器" + +msgid "vaultcontainers" +msgstr "库容器" + +msgid "Vault Containers" +msgstr "库容器" + +msgid "Vault Container" +msgstr "库容器" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "服务，共享的和用户选项不能被同时指定" + +msgid "Host is not supported" +msgstr "主机不被支持" + +msgid "KRA service is not enabled" +msgstr "KRA服务没有启用" + +msgid "Deleted vault container" +msgstr "已删除库容器" + +#, python-format +msgid "owner %s" +msgstr "所有者%s" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" +"\n" +" 库对象。\n" +" " + +msgid "vault" +msgstr "库" + +msgid "vaults" +msgstr "库" + +msgid "Vaults" +msgstr "库" + +msgid "Vault" +msgstr "库" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "服务，共享的和用户选项不能被同时指定" + +#, fuzzy +#| msgid "Modify a vault." +msgid "Add a vault." +msgstr "修改一个库。" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "已添加库\"%(value)s\"" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "已删除库\"%(value)s\"" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "已匹配%(count)d个库" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "服务，共享的和用户选项不能被同时指定" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "已修改库\"%(value)s\"" + +msgid "Vault configuration" +msgstr "库配置" + +msgid "IPA KRA servers" +msgstr "IPA KRA服务器" + +msgid "IPA servers configured as key recovery agents" +msgstr "IPA服务器配置为密钥恢复代理" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "数据归档到库\"%(value)s\"" + +#, fuzzy +#| msgid "Retrieve a data from a vault." +msgid "Retrieve data from a vault." +msgstr "从库中检索一个数据。" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "从库\"%(value)s\"中检索数据" + +msgid "No archived data." +msgstr "没有归档数据。" + +#, fuzzy +#| msgid "Checks if any of the servers has the CA service enabled." +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "检查是否有任何服务器启用了CA服务。" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "无效的配置文件ID" + +msgid "Certificate Profile" +msgstr "证书配置文件" + +msgid "Certificate Profiles" +msgstr "证书配置文件" + +msgid "Profile configuration" +msgstr "配置文件配置" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "已匹配%(count)d个配置文件" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "已导入配置文件\"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Input data specified multiple times" +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "多次指定输入数据" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "配置文件ID '%(cli_value)s'与配置文件数据'%(file_value)s'不匹配" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "已删除配置文件\"%(value)s\"" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "预定义的配置文件'%(profile_id)s'不能被删除" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "已修改配置文件\"%(value)s\"" + +msgid "Certificate profiles cannot be renamed" +msgstr "证书配置文件不能被重命名" + +#, fuzzy +#| msgid "" +#| "Insufficient privilege to create a certificate with subject alt name '%s'." +msgid "Insufficient privilege to modify a certificate profile." +msgstr "没有权限创建主题alt名为'%s'的证书。" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "主机组" + +msgid "Host Group" +msgstr "主机组" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "已添加主机组\"%(value)s\"" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "网络组名\"%s\"已存在。主机组和网络组共享一个共同的名字空间" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "已删除主机组\"%(value)s\"" + +msgid "hostgroup" +msgstr "主机组" + +msgid "privileged hostgroup" +msgstr "特权主机组" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "已修改主机组\"%(value)s\"" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "已匹配%(count)d个主机组" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this hostgroup." +msgstr "添加可以管理该令牌的用户" + +#, fuzzy +#| msgid "Remove users that can manage this token." +msgid "Remove users that can manage members of this hostgroup." +msgstr "移除可以管理该令牌的用户。" + +msgid "kerberos ticket policy settings" +msgstr "kerberos票据策略设置" + +msgid "Kerberos Ticket Policy" +msgstr "Kerberos票据策略" + +#, fuzzy +#| msgid "Max life" +msgid "OTP max life" +msgstr "最长存活期" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "OTP token maximum ticket life (seconds)" +msgstr "票据最长存活期（秒）" + +msgid "OTP max renew" +msgstr "" + +#, fuzzy +#| msgid "TOTP authentication time variance (seconds)" +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "TOTP认证时间差异（秒）" + +#, fuzzy +#| msgid "Max life" +msgid "RADIUS max life" +msgstr "最长存活期" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "RADIUS maximum ticket life (seconds)" +msgstr "票据最长存活期（秒）" + +#, fuzzy +#| msgid "RADIUS proxy server name" +msgid "RADIUS max renew" +msgstr "RADIUS代理服务器名称" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +#, fuzzy +#| msgid "Max life" +msgid "PKINIT max life" +msgstr "最长存活期" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "PKINIT maximum ticket life (seconds)" +msgstr "票据最长存活期（秒）" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "票据最长存活期（秒）" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "票据策略%s不可读" + +msgid "Default ticket policy could not be read" +msgstr "默认票据策略不可读" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "不能读UPG原过滤器定义。检查你的权限。" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" +"\n" +"IPA位置\n" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" +"\n" +"设置DNS位置\n" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "位置" + +msgid "locations" +msgstr "位置" + +msgid "IPA Locations" +msgstr "IPA位置" + +msgid "IPA Location" +msgstr "IPA位置" + +msgid "Location name" +msgstr "位置名" + +msgid "IPA location name" +msgstr "IPA位置名" + +msgid "IPA Location description" +msgstr "IPA本地描述" + +msgid "Servers" +msgstr "服务器" + +msgid "Servers that belongs to the IPA location" +msgstr "属于IPA位置的服务器" + +msgid "Advertised by servers" +msgstr "由服务器公布" + +msgid "List of servers which advertise the given location" +msgstr "公布给出位置的服务器列表" + +msgid "Add a new IPA location." +msgstr "添加一个新的IPA位置。" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "已添加IPA位置\"%(value)s\"" + +msgid "Delete an IPA location." +msgstr "删除一个IPA位置。" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "已删除IPA位置\"%(value)s\"" + +msgid "IPA Server" +msgstr "IPA服务器" + +msgid "Modify information about an IPA location." +msgstr "修改一个IPA位置信息。" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "已修改IPA位置\"%(value)s\"" + +msgid "Search for IPA locations." +msgstr "查找IPA位置。" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "已匹配%(count)d个IPA位置" + +msgid "Display information about an IPA location." +msgstr "显示一个IPA位置信息。" + +msgid "Servers in location" +msgstr "本地服务器" + +msgid "Role" +msgstr "角色" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "已添加角色\"%(value)s\"" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "已删除角色\"%(value)s\"" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "已修改角色\"%(value)s\"" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "已匹配%(count)d个角色" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "已添加用户\"%(value)s\"" + +msgid "Default group for new users is not POSIX" +msgstr "新用户的默认组不是POSIX" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "已删除用户\"%(value)s\"" + +#, python-format +msgid "%s: user is already preserved" +msgstr "%s：用户已保存" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "已修改用户\"%(value)s\"" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "已恢复用户账户\"%(value)s\"" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "用户%s已是活跃的" + +#, fuzzy, python-format +#| msgid "Enabled user account \"%(value)s\"" +msgid "Staged user account \"%(value)s\"" +msgstr "已启用用户账户\"%(value)s\"" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "已禁用用户账户\"%(value)s\"" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "已启用用户账户\"%(value)s\"" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "已解锁账户\"%(value)s\"" + +msgid "Failed logins" +msgstr "登录失败" + +msgid "Last successful authentication" +msgstr "上一次认证成功" + +msgid "Last failed authentication" +msgstr "上一次认证失败" + +msgid "Time now" +msgstr "当前时间" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "%(host)s已失败：%(error)s" + +#, python-format +msgid "%(host)s failed" +msgstr "%(host)s已失败" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "账户已禁用：%(disabled)s" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "已为用户\"%(value)s\"添加证书" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "已为用户\"%(value)s\"删除证书" + +msgid "Add new principal alias to the user entry" +msgstr "为用户条目添加新的主体别名" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "已为用户\"%(value)s\"添加新别名" + +msgid "Remove principal alias from the user entry" +msgstr "从用户条目中删除主体别名" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "已从用户\"%(value)s\"中删除别名" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" +"\n" +"OTP令牌\n" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"管理OTP 令牌。\n" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" +"\n" +"IPA支持使用OTP令牌来多因素认证。这个码能管理OTP令牌。\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Add a new token:\n" +#| " ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" +"\n" +" 增加一个新的令牌：\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "OTP令牌" + +msgid "OTP tokens" +msgstr "OTP令牌" + +msgid "OTP Tokens" +msgstr "OTP令牌" + +msgid "OTP Token" +msgstr "OTP令牌" + +#, fuzzy +#| msgid "UID" +msgid "URI" +msgstr "UID" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "已添加OTP令牌\"%(value)s\"" + +msgid "cannot be empty" +msgstr "不能为空" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "已删除OTP令牌\"%(value)s\"" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "已修改OTP令牌\"%(value)s\"" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "已匹配%(count)d个OTP令牌" + +msgid "A list of ACI values" +msgstr "ACI值列表" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "类型，过滤器，子树和目标组是互斥的" + +msgid "ACI prefix is required" +msgstr "需要ACI前缀" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "至少需要其中一个：类型，过滤器，子树，目标组，属性或它的成员" + +msgid "filter and memberof are mutually exclusive" +msgstr "过滤器和它的成员是互斥的" + +msgid "group, permission and self are mutually exclusive" +msgstr "组，权限和它们自己是互斥的" + +msgid "One of group, permission or self is required" +msgstr "需要组，权限或它们自己中的一个" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "组 '%s' 不存在" + +msgid "empty filter" +msgstr "空的过滤器" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "语法错误：%(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "无效的DN（%s）" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "ACI名\"%s\"没有找到" + +#, fuzzy +#| msgid "IPA object" +msgid "ACI object." +msgstr "IPA对象" + +msgid "ACIs" +msgstr "ACIs" + +#, fuzzy +#| msgid "ACIs" +msgid "ACI" +msgstr "ACIs" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "已创建ACI\"%(value)s\"" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "已删除ACI\"%(value)s\"" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "已修改ACI\"%(value)s\"" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d个ACI已匹配" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "已重命名ACI为\"%(value)s\"" msgid "" "\n" @@ -13614,9 +17921,6 @@ msgstr "" "\n" "管理权限\n" -msgid "DNS is not configured" -msgstr "DNS没有配置" - #, fuzzy #| msgid "hosts cannot be set when type is 'group'" msgid "cannot be used when a zone is specified" @@ -13841,1443 +18145,548 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "不更新记录只返回预期的记录" +#, fuzzy, python-brace-format +#| msgid "" +#| "Domain Level cannot be raised to {0}, server {1} does not support it." msgid "" -"\n" -"DNS server configuration\n" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "域级别不能提高到{0}，服务器{1}不支持它。" + +msgid "Server does not support domain level functionality" msgstr "" -"\n" -"DNS服务器配置\n" + +msgid "Domain Level cannot be lowered." +msgstr "域级别不能降低了。" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "域级别不能提高到{0}，服务器{1}不支持它。" msgid "" "\n" -"Manipulate DNS server configuration\n" +"API Schema\n" msgstr "" "\n" -"设置DNS服务器配置\n" +"API 模式\n" msgid "" "\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" +"Provides API introspection capabilities.\n" +msgstr "" +"\n" +"提供API自省能力。\n" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" msgstr "" msgid "" "\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" msgstr "" -msgid "DNS server" -msgstr "DNS服务器" +msgid "Documentation" +msgstr "文档" -msgid "DNS servers" -msgstr "DNS服务器" +msgid "Exclude from" +msgstr "排斥" -msgid "DNS Servers" -msgstr "DNS服务器" - -msgid "DNS Server" -msgstr "DNS服务器" - -msgid "DNS Server name" -msgstr "DNS服务器名" - -msgid "SOA mname override" -msgstr "SOA mname覆盖" - -msgid "SOA mname (authoritative server) override" -msgstr "SOA mname（权威服务器）覆盖" - -msgid "Forwarders" -msgstr "转发器" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Per-server转发器。使用标准格式\"IP_ADDRESS port PORT\"为每个转发器指定一个自" -"定义端口" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" -"Per-server有条件的转发器策略。设置为\"none\"来禁止该区域转发至全局转发器。那" -"样的话，有条件的区域转发器被忽视了。" - -msgid "Modify DNS server configuration" -msgstr "修改DNS服务器配置" +msgid "Include in" +msgstr "包含" #, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "已修改DNS服务器\"%(value)s\"" +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "结果应该只包括主键属性(\"%s\")" -msgid "Search for DNS servers." -msgstr "查找DNS服务器。" +msgid "Help topic" +msgstr "帮助主题" + +msgid "Version" +msgstr "版本" + +msgid "Parameters" +msgstr "参数" + +msgid "Method of" +msgstr "方法" + +msgid "Method name" +msgstr "方法名" #, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "已匹配%(count)d个DNS服务器" +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s：%(oname)s没有找到" + +msgid "Display information about a command." +msgstr "显示一个命令信息。" + +msgid "Search for commands." +msgstr "查找命令。" #, fuzzy -#| msgid "KRA service is not enabled" -msgid "IPA DNS Server is not installed" -msgstr "KRA服务没有启用" +#| msgid "Run Commands" +msgid "Return command defaults" +msgstr "允许命令" -msgid "Display configuration of a DNS server." -msgstr "显示一个DNS服务器配置。" +msgid "Display information about a class." +msgstr "显示一个类信息。" -msgid "Add a new DNS server." -msgstr "添加一个新的DNS服务器。" +msgid "Search for classes." +msgstr "查找类。" -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "已添加新的DNS服务器\"%(value)s\"" +msgid "Display information about a help topic." +msgstr "显示一个帮助主题信息。" -msgid "Delete a DNS server" -msgstr "删除一个DNS服务器" +msgid "Search for help topics." +msgstr "查找帮助主题。" -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "已删除DNS服务器\"%(value)s\"" +msgid "Required" +msgstr "必需的" -msgid "REST API is not logged in." -msgstr "REST API没有登录。" +msgid "Multi-value" +msgstr "多值" -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "从CA REST API的Non-2xx响应：%(status)d. %(explanation)s" - -msgid "Unable to communicate with CMS" -msgstr "不能与CMS通信" - -msgid "Response from CA was not valid JSON" -msgstr "CA响应是无效的JSON" - -msgid "Host-based access control commands" -msgstr "基于主机访问控制命令" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "HBAC服务" - -msgid "HBAC Services" -msgstr "HBAC服务" - -msgid "HBAC Service" -msgstr "HBAC服务" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "已添加HBAC服务\"%(value)s\"" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "已删除HBAC服务\"%(value)s\"" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "已修改HBAC服务\"%(value)s\"" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "已匹配%(count)d个HBAC服务" - -msgid "HBAC service group" -msgstr "HBAC服务组" - -msgid "HBAC service groups" -msgstr "HBAC服务组" - -msgid "HBAC Service Groups" -msgstr "HBAC服务组" - -msgid "HBAC Service Group" -msgstr "HBAC服务组" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "已添加HBAC服务组\"%(value)s\"" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "已删除HBAC服务组\"%(value)s\"" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "已修改HBAC服务组\"%(value)s\"" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "已匹配%(count)d个HBAC服务组" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "计划用户" - -msgid "Stage User" -msgstr "计划用户" - -msgid "stage user" -msgstr "计划用户" - -msgid "stage users" -msgstr "计划用户" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "已添加计划用户\"%(value)s\"" - -msgid "givenname is required" -msgstr "需要名字" - -msgid "sn is required" -msgstr "需要sn" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "最多%(len)d个字符" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "已删除计划用户\"%(value)s\"" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "已修改计划用户\"%(value)s\"" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "已匹配%(count)d个用户" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "激活一个计划用户\"%(value)s\"" - -msgid "Entry RDN is not 'uid'" -msgstr "条目RDN不是'uid'" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "条目没有'%(attribute)s'" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "活跃用户名\"%(user)s\"已存在" - -#, python-format -msgid "Stage user %s activated" -msgstr "计划用户%s已激活" +msgid "Always ask" +msgstr "总是询问" #, fuzzy -#| msgid "Add one or more certificates to the user entry" -msgid "Add one or more certificates to the stageuser entry" -msgstr "向用户条目中添加一个或多个证书" +#| msgid "CLI name" +msgid "CLI metavar" +msgstr "CLI名称" + +msgid "CLI name" +msgstr "CLI名称" + +msgid "Confirm (password)" +msgstr "确认（密码）" + +msgid "Default" +msgstr "默认" + +msgid "Default from" +msgstr "默认的" + +msgid "Label" +msgstr "级别" + +msgid "Convert on server" +msgstr "在服务器上转换" + +msgid "Option group" +msgstr "选项组" + +msgid "Sensitive" +msgstr "敏感的" + +msgid "Positional argument" +msgstr "位置参数" #, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "已为用户\"%(value)s\"添加证书" +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(parent)s：%(oname)s没有找到" -#, fuzzy -#| msgid "Remove one or more certificates to the user entry" -msgid "Remove one or more certificates to the stageuser entry" -msgstr "向用户条目中移除一个或多个证书" +msgid "Display information about a command parameter." +msgstr "显示一个命令参数信息。" + +msgid "Search command parameters." +msgstr "查找命令参数。" #, fuzzy, python-format -#| msgid "Removed certificates from user \"%(value)s\"" -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "已为用户\"%(value)s\"删除证书" +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(parent)s：%(oname)s没有找到" + +msgid "Display information about a command output." +msgstr "显示一个命令输出信息。" + +msgid "Search for command outputs." +msgstr "查找命令输出。" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "客户端缓存的模式指纹" + +msgid "Member service groups" +msgstr "成员服务组" + +msgid "Member HBAC service groups" +msgstr "成员HBAC服务组" #, fuzzy -#| msgid "Add new principal alias to the user entry" -msgid "Add new principal alias to the stageuser entry" -msgstr "为用户条目添加新的主体别名" +#| msgid "User ID overrides" +msgid "Member ID user overrides" +msgstr "用户ID覆盖" + +#, fuzzy +#| msgid "Indirect Member users" +msgid "Indirect Member ID user overrides" +msgstr "间接成员用户" + +msgid "Indirect Member permissions" +msgstr "间接成员权限" + +msgid "Indirect Member HBAC service" +msgstr "间接成员HBAC服务" + +msgid "Indirect Member HBAC service group" +msgstr "间接成员HBAC服务组" + +msgid "Invalid format. Should be name=value" +msgstr "无效的格式。应该是“名称=值”" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "IPA主主机不能被删除或禁用" + +msgid "entry" +msgstr "条目" + +msgid "entries" +msgstr "条目" + +msgid "Entry" +msgstr "条目" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "容器条目(%(container)s)没有找到" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s：%(oname)s没有找到" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "名为\"%(pkey)s\"的%(oname)s已存在" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "不支持属性\"%(attribute)s\"" + +#, fuzzy, python-format +#| msgid "attribute \"%s\" not allowed" +msgid "these attributes are not allowed: %(attrs)s" +msgstr "不允许属性\"%s\"" + +msgid "attribute is not configurable" +msgstr "属性没有配置" + +msgid "No such attribute on this entry" +msgstr "该条目没有这样的属性" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "重命名%(ldap_obj_name)s对象" + +msgid "the entry was deleted while being modified" +msgstr "正被修改的条目已被删除" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "待添加的%s" + +#, python-format +msgid "%s to remove" +msgstr "待移除的%s" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "查找有这些%(relationship)s %(ldap_object)s的%(searched_object)s。" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "查找没有%(relationship)s %(ldap_object)s的%(searched_object)s。" #, fuzzy, python-format #| msgid "Added new aliases to user \"%(value)s\"" -msgid "Added new aliases to stageuser \"%(value)s\"" +msgid "added attribute value to entry %(value)s" msgstr "已为用户\"%(value)s\"添加新别名" -#, fuzzy -#| msgid "Remove principal alias from the user entry" -msgid "Remove principal alias from the stageuser entry" -msgstr "从用户条目中删除主体别名" - #, fuzzy, python-format #| msgid "Removed aliases from user \"%(value)s\"" -msgid "Removed aliases from stageuser \"%(value)s\"" +msgid "removed attribute values from entry %(value)s" msgstr "已从用户\"%(value)s\"中删除别名" -#, fuzzy -#| msgid "Add one or more certificates to the user entry" -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "向用户条目中添加一个或多个证书" +msgid "one or more values to remove" +msgstr "待移除的一个或多个值" + +msgid "The deny type has been deprecated." +msgstr "阻止类型已被弃用。" + +msgid "HBAC rules" +msgstr "HBAC规则" + +msgid "HBAC Rules" +msgstr "HBAC规则" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "已添加HBAC规则\"%(value)s\"" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "已删除HBAC规则\"%(value)s\"" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "已修改HBAC规则\"%(value)s\"" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "已匹配%(count)d个HBAC规则" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "已启用HBAC规则\"%(value)s\"" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "已禁用HBAC规则\"%(value)s\"" + +msgid "Access time" +msgstr "访问时间" #, fuzzy -#| msgid "Remove one or more certificates to the user entry" -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "向用户条目中移除一个或多个证书" +#| msgid "Add source hosts and hostgroups from a HBAC rule." +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "从一个HBAC规则中添加源主机和主机组。" msgid "" "\n" -"Topology\n" +"Simulate use of Host-based access controls\n" "\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"拓扑\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"域级别为1的复制拓扑的管理。\n" - -msgid "" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" "\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" "\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" +" --user, --host, and --service are mandatory, others are optional.\n" "\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" "\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" "\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" "\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" "\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" "\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "拓扑管理需要最小域级别{0}" - -msgid "segment" -msgstr "段" - -msgid "segments" -msgstr "段" - -msgid "Topology Segments" -msgstr "拓扑段" - -msgid "Topology Segment" -msgstr "拓扑段" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "左节点不是一个拓扑节点：%(leftnode)s" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "右节点不是一个拓扑节点：%(rightnode)s" - -msgid "left node and right node must not be the same" -msgstr "左节点和右节点必须不同" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "左节点({host})不支持后缀'{suff}'" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "右节点({host})不支持后缀'{suff}'" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "已匹配%(count)d个段" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "已添加段\"%(value)s\"" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "已删除段\"%(value)s\"" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "已修改段\"%(value)s\"" - -#, python-format -msgid "%(value)s" -msgstr "%(value)s" - -msgid "left or right node has to be specified" -msgstr "左或右节点没有被指定" - -msgid "only one node can be specified" -msgstr "仅有一个节点可以被指定" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "副本更新段：要求\"%(pkey)s\"。" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "停止副本更新段：要求\"%(pkey)s\"。" - -msgid "suffixes" -msgstr "后缀" - -msgid "Topology suffixes" -msgstr "拓扑后缀" - -msgid "Topology suffix" -msgstr "拓扑后缀" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "已匹配%(count)d个拓扑后缀" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "已删除拓扑后缀\"%(value)s\"" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "已添加拓扑后缀\"%(value)s\"" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "已修改拓扑后缀\"%(value)s\"" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" -"\n" -"验证复制拓扑的后缀。\n" -"检查完成：\n" -" 1. 检查是否还有没有连接的拓扑。换句话说，是否在所有服务器之间存在复制路" -"径。\n" -" 2. 检查是否服务器没有超过推荐的副本协议数\n" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "对条目'%s'的'krbLastPwdChange'属性没有'write'权限。" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "主机组" - -msgid "Host Group" -msgstr "主机组" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "已添加主机组\"%(value)s\"" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "网络组名\"%s\"已存在。主机组和网络组共享一个共同的名字空间" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "已删除主机组\"%(value)s\"" - -msgid "hostgroup" -msgstr "主机组" - -msgid "privileged hostgroup" -msgstr "特权主机组" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "已修改主机组\"%(value)s\"" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "已匹配%(count)d个主机组" - -#, fuzzy -#| msgid "Add users that can manage this token." -msgid "Add users that can manage members of this hostgroup." -msgstr "添加可以管理该令牌的用户" - -#, fuzzy -#| msgid "Remove users that can manage this token." -msgid "Remove users that can manage members of this hostgroup." -msgstr "移除可以管理该令牌的用户。" - -msgid "" -"\n" -"Vaults\n" -msgstr "" -"\n" -"库\n" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" -"\n" -"管理库。\n" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" -"\n" -"基于所有者管理有三种库类别：\n" -"* 用户/私有库\n" -"* 服务库\n" -"* 共享库\n" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" -"\n" -"用户库被特定用户拥有并使用。私有库被当前用户拥有。服务库被一个服务拥有。共享" -"库被管理员拥有但可以被其他用户或服务使用。\n" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" -"\n" -"基于安全机制有三种库类型：\n" -"* 标准库\n" -"* 对称库\n" -"* 非对称库\n" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" -"\n" -"标准库使用一种安全机制来传输和存储密码。密码仅能被有权限访问该库的用户检" -"索。\n" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" -"\n" -"对称库和标准库类似，但它在传输前会使用一个密码来预加密该密码。密码仅能使用相" -"同的密码来检索。\n" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" -"\n" -"非对称库和标准库类似，但它在传输前会使用一个公钥来预加密密码。该密码仅能通过" -"对应的私钥来检索。\n" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" -"\n" -" 库容器对象。\n" -" " - -msgid "vaultcontainer" -msgstr "库容器" - -msgid "vaultcontainers" -msgstr "库容器" - -msgid "Vault Containers" -msgstr "库容器" - -msgid "Vault Container" -msgstr "库容器" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "服务，共享的和用户选项不能被同时指定" - -msgid "Host is not supported" -msgstr "主机不被支持" - -msgid "KRA service is not enabled" -msgstr "KRA服务没有启用" - -msgid "Deleted vault container" -msgstr "已删除库容器" - -#, python-format -msgid "owner %s" -msgstr "所有者%s" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" -"\n" -" 库对象。\n" -" " - -msgid "vault" -msgstr "库" - -msgid "vaults" -msgstr "库" - -msgid "Vaults" -msgstr "库" - -msgid "Vault" -msgstr "库" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "服务，共享的和用户选项不能被同时指定" - -#, fuzzy -#| msgid "Modify a vault." -msgid "Add a vault." -msgstr "修改一个库。" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "已添加库\"%(value)s\"" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "已删除库\"%(value)s\"" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "已匹配%(count)d个库" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "服务，共享的和用户选项不能被同时指定" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "已修改库\"%(value)s\"" - -msgid "Vault configuration" -msgstr "库配置" - -msgid "IPA KRA servers" -msgstr "IPA KRA服务器" - -msgid "IPA servers configured as key recovery agents" -msgstr "IPA服务器配置为密钥恢复代理" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "数据归档到库\"%(value)s\"" - -#, fuzzy -#| msgid "Retrieve a data from a vault." -msgid "Retrieve data from a vault." -msgstr "从库中检索一个数据。" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "从库\"%(value)s\"中检索数据" - -msgid "No archived data." -msgstr "没有归档数据。" - -#, fuzzy -#| msgid "Checks if any of the servers has the CA service enabled." -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "检查是否有任何服务器启用了CA服务。" - -msgid "netgroups" -msgstr "网络组" - -msgid "Netgroups" -msgstr "网络组" - -msgid "Netgroup" -msgstr "网络组" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "已添加网络组\"%(value)s\"" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "主机组名\"%s\"已存在。主机组和网络组共享一个共同的名字空间" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "已删除网络组\"%(value)s\"" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "已修改网络组\"%(value)s\"" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "已匹配%(count)d个网络组" - -msgid "One time password commands" -msgstr "一次性密码命令" - -msgid "OTP configuration options" -msgstr "OTP配置选项" - -msgid "OTP Configuration" -msgstr "OTP配置" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "已改变\"%(value)s\"的密码" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -#, fuzzy -#| msgid "Trust status" -msgid "PKINIT status" -msgstr "信任状态" - -#, fuzzy -#| msgid "This entry cannot be enabled or disabled" -msgid "Whether PKINIT is enabled or disabled" -msgstr "条目不能被启用或禁用" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)s server role matched" -#| msgid_plural "%(count)s server roles matched" -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "已匹配%(count)s个服务器角色" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" -"\n" -"RADIUS代理服务器\n" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" -"\n" -"管理RADIUS代理服务器。\n" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" -"\n" -"IPA对于krb5 OTP认证支持使用额外的RADIUS代理服务器。这在集成第三方认证服务时提" -"供了很多方便。\n" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "无效的属性名" - -msgid "invalid port number" -msgstr "无效的端口号" - -msgid "RADIUS proxy server" -msgstr "RADIUS代理服务器" - -msgid "RADIUS proxy servers" -msgstr "RADIUS代理服务器" - -msgid "RADIUS Servers" -msgstr "RADIUS代理服务器" - -msgid "RADIUS Server" -msgstr "RADIUS代理服务器" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "已添加RADIUS代理服务器\"%(value)s\"" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "已删除RADIUS代理服务器\"%(value)s\"" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "已修改RADIUS代理服务器\"%(value)s\"" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "已匹配%(count)d个RADIUS代理服务器" - -msgid "A list of ACI values" -msgstr "ACI值列表" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "类型，过滤器，子树和目标组是互斥的" - -msgid "ACI prefix is required" -msgstr "需要ACI前缀" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "至少需要其中一个：类型，过滤器，子树，目标组，属性或它的成员" - -msgid "filter and memberof are mutually exclusive" -msgstr "过滤器和它的成员是互斥的" - -msgid "group, permission and self are mutually exclusive" -msgstr "组，权限和它们自己是互斥的" - -msgid "One of group, permission or self is required" -msgstr "需要组，权限或它们自己中的一个" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "组 '%s' 不存在" - -msgid "empty filter" -msgstr "空的过滤器" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "语法错误：%(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "无效的DN（%s）" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "ACI名\"%s\"没有找到" - -#, fuzzy -#| msgid "IPA object" -msgid "ACI object." -msgstr "IPA对象" - -msgid "ACIs" -msgstr "ACIs" - -#, fuzzy -#| msgid "ACIs" -msgid "ACI" -msgstr "ACIs" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "已创建ACI\"%(value)s\"" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "已删除ACI\"%(value)s\"" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "已修改ACI\"%(value)s\"" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d个ACI已匹配" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "已重命名ACI为\"%(value)s\"" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" -#, fuzzy -#| msgid "must be at least %(minvalue)d" -msgid "must be at least 10" -msgstr "必须至少%(minvalue)d" +msgid "Unresolved rules in --rules" +msgstr "在--rules中不能解析的规则" -msgid "configuration options" -msgstr "配置选项" +#, python-format +msgid "Access granted: %s" +msgstr "访问授权：%s" -msgid "Configuration" -msgstr "配置" +msgid "ID View" +msgstr "ID视图" -#, fuzzy -#| msgid "Maximum username length" -msgid "Maximum hostname length" -msgstr "最大用户名长度" +msgid "system ID View" +msgstr "系统ID视图" -msgid "IPA masters" -msgstr "IPA主服务器" +msgid "ID Views" +msgstr "ID视图" -msgid "List of all IPA masters" -msgstr "所有IPA主服务器列表" +msgid "User object overrides" +msgstr "用户对象覆盖" -#, fuzzy -#| msgid "IPA masters" -msgid "Hidden IPA masters" -msgstr "IPA主服务器" +msgid "Group object overrides" +msgstr "组对象覆盖" -#, fuzzy -#| msgid "List of all IPA masters" -msgid "List of all hidden IPA masters" -msgstr "所有IPA主服务器列表" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "IPA CA服务器" - -msgid "IPA servers configured as certificate authority" -msgstr "IPA服务器配置为证书认证机构" - -#, fuzzy -#| msgid "IPA CA servers" -msgid "Hidden IPA CA servers" -msgstr "IPA CA服务器" - -#, fuzzy -#| msgid "IPA servers configured as certificate authority" -msgid "Hidden IPA servers configured as certificate authority" -msgstr "IPA服务器配置为证书认证机构" - -msgid "IPA CA renewal master" -msgstr "IPA CA更新主服务器" - -msgid "Renewal master for IPA certificate authority" -msgstr "为IPA证书认证机构更新主服务器" - -#, fuzzy -#| msgid "IPA servers configured as key recovery agents" -msgid "IPA servers configured as key recovery agent" -msgstr "IPA服务器配置为密钥恢复代理" - -#, fuzzy -#| msgid "IPA KRA servers" -msgid "Hidden IPA KRA servers" -msgstr "IPA KRA服务器" - -#, fuzzy -#| msgid "IPA servers configured as key recovery agents" -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "IPA服务器配置为密钥恢复代理" +msgid "Hosts the view applies to" +msgstr "适用于主机的视图" msgid "Domain resolution order" msgstr "" @@ -15287,246 +18696,175 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "允许迁移的以逗号分隔的用户组列表" -#, fuzzy -#| msgid "IPA server configured as DNSSec key master" -msgid "IPA servers configured as domain name server" -msgstr "IPA服务器配置为DNSSec密钥主机" - -#, fuzzy -#| msgid "IPA DNS servers" -msgid "Hidden IPA DNS servers" -msgstr "IPA DNS服务器" - -#, fuzzy -#| msgid "IPA servers configured as key recovery agents" -msgid "Hidden IPA servers configured as domain name server" -msgstr "IPA服务器配置为密钥恢复代理" - -#, fuzzy -#| msgid "IPA DNSSec key master" -msgid "DNSec key master" -msgstr "IPA DNSSec密钥主机" - -#, fuzzy -#| msgid "options are not allowed" -msgid "Empty domain is not allowed" -msgstr "选项是不允许的" - -#, fuzzy, python-format -#| msgid "invalid domain-name: %s" -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "无效的域名：%s" - -#, fuzzy, python-format -#| msgid "Removed information about the trusted domain \"%(value)s\"" -msgid "Server has no information about domain '%(domain)s'" -msgstr "删除信任域\"%(value)s\"的信息" +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "已添加ID视图\"%(value)s\"" #, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "The group doesn't exist" -msgstr "组不存在" +msgid "Deleted ID View \"%(value)s\"" +msgstr "已删除ID视图\"%(value)s\"" #, python-format -msgid "attribute \"%s\" not allowed" -msgstr "不允许属性\"%s\"" - -msgid "May not be empty" -msgstr "可能不是闲置的" +msgid "Modified an ID View \"%(value)s\"" +msgstr "已修改一个ID视图\"%(value)s\"" #, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "%(obj)s默认属性%(attr)s是不允许的！" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "已匹配%(count)d个ID视图" -msgid "A list of SELinux users delimited by $ expected" -msgstr "SELinux用户列表期望以$分隔" +msgid "Default Trust View cannot be applied on hosts" +msgstr "默认信任视图不能应用于主机上" + +msgid "not found" +msgstr "没有找到" + +#, fuzzy +#| msgid "Default Trust View cannot be applied on hosts" +msgid "ID View cannot be applied to IPA master" +msgstr "默认信任视图不能应用于主机上" + +msgid "ID View already applied" +msgstr "ID视图已应用" + +msgid "value" +msgstr "值" #, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "SELinux用户'%(user)s'是无效的：%(error)s" +msgid "ID View applied to %i host." +msgstr "ID视图应用于%i主机。" -msgid "SELinux user map default user not in order list" -msgstr "SELinux用户映射默认用户没有在列表中" +#, python-format +msgid "ID View applied to %i hosts." +msgstr "ID视图应用于%i主机。" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "从%i主机中清除ID视图。" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "从%i主机中清除ID视图。" msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" +"你正尝试引用一个不允许覆盖的神奇私有组。而不是尝试覆盖对应用户的GID属性。" -msgid "groups" -msgstr "用户组" - -msgid "User Group" -msgstr "用户组" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "已添加组\"%(value)s\"" - -msgid "gid cannot be set for external group" -msgstr "gid不能被设置为外部组" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "已删除组\"%(value)s\"" - -msgid "privileged group" -msgstr "特权组" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "已修改组\"%(value)s\"" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "已匹配%(count)d个组" +msgid "IPA object" +msgstr "IPA对象" msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" msgstr "" -"没有安装Samba 4不能执行外部成员验证。确认你已经在IPA服务器上安装了server-" -"trust-ad子包" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" -"没有自己的域配置不能执行加入操作。首先确认你已经在IPA服务器上运行了ipa-" -"adtrust-install命令" #, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "从用户\"%(value)s\"中分离组\"%(value)s\"" +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "锚'%(anchor)s'不能被解析。" -msgid "not allowed to modify user entries" -msgstr "不允许修改用户条目" +msgid "Default Trust View cannot contain IPA users" +msgstr "默认信任视图不能包含IPA用户" -msgid "not allowed to modify group entries" -msgstr "不允许修改组条目" +msgid "Add a new ID override." +msgstr "添加一个新的ID覆盖。" -msgid "Not a managed group" -msgstr "不是一个管理组" +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "已添加ID覆盖\"%(value)s\"" -#, fuzzy -#| msgid "Add users that can manage this token." -msgid "Add users that can manage members of this group." -msgstr "添加可以管理该令牌的用户" +msgid "Delete an ID override." +msgstr "删除一个ID覆盖。" -#, fuzzy -#| msgid "Remove users that can manage this token." -msgid "Remove users that can manage members of this group." -msgstr "移除可以管理该令牌的用户。" +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "已删除ID覆盖\"%(value)s\"" + +msgid "Modify an ID override." +msgstr "修改一个ID覆盖。" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "已修改一个ID覆盖\"%(value)s\"" + +msgid "ID override" +msgstr "ID覆盖" + +msgid "ID overrides cannot be renamed" +msgstr "ID覆盖不能被重命名" + +msgid "Search for an ID override." +msgstr "查找一个ID覆盖。" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "已匹配%(count)d个ID覆盖" + +msgid "Display information about an ID override." +msgstr "显示一个ID覆盖信息。" + +msgid "User ID override" +msgstr "用户ID覆盖" + +msgid "User ID overrides" +msgstr "用户ID覆盖" + +msgid "Group ID override" +msgstr "组ID覆盖" + +msgid "Group ID overrides" +msgstr "组ID覆盖" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "向id覆盖用户条目中添加一个或多个证书" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "已添加证书到id覆盖用户\"%(value)s\"" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "从id覆盖用户条目中移除一个或多个证书" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "已从id覆盖用户\"%(value)s\"中移除证书" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "已添加用户ID覆盖\"%(value)s\"" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "已删除用户ID覆盖\"%(value)s\"" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "已修改一个用户ID覆盖\"%(value)s\"" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "已匹配%(count)d个用户ID覆盖" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "已添加组ID覆盖\"%(value)s\"" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "已删除组ID覆盖\"%(value)s\"" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "已修改一个组ID覆盖\"%(value)s\"" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "已匹配%(count)d个组ID覆盖" msgid "" "\n" @@ -15786,1303 +19124,34 @@ msgid "%(count)d permission matched" msgid_plural "%(count)d permissions matched" msgstr[0] "已匹配%(count)d个权限" -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"OTP令牌\n" +msgid "delegation" +msgstr "授权" -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" -"\n" -"管理OTP 令牌。\n" +msgid "delegations" +msgstr "授权" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" -"\n" -"IPA支持使用OTP令牌来多因素认证。这个码能管理OTP令牌。\n" +msgid "Delegations" +msgstr "授权" -#, fuzzy -#| msgid "" -#| "\n" -#| " Add a new token:\n" -#| " ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" -"\n" -" 增加一个新的令牌：\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "OTP令牌" - -msgid "OTP tokens" -msgstr "OTP令牌" - -msgid "OTP Tokens" -msgstr "OTP令牌" - -msgid "OTP Token" -msgstr "OTP令牌" - -#, fuzzy -#| msgid "UID" -msgid "URI" -msgstr "UID" +msgid "Delegation" +msgstr "授权" #, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "已添加OTP令牌\"%(value)s\"" - -msgid "cannot be empty" -msgstr "不能为空" +msgid "Added delegation \"%(value)s\"" +msgstr "已添加授权\"%(value)s\"" #, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "已删除OTP令牌\"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" +msgstr "已删除授权\"%(value)s\"" #, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "已修改OTP令牌\"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" +msgstr "已修改授权\"%(value)s\"" #, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "已匹配%(count)d个OTP令牌" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" -"\n" -"Sudo规则\n" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" -"\n" -"Sudo (su \"do\")允许一个系统管理员给特定用户（或用户组）授予权限使其有以root" -"或其他用户的能力来运行一些（或全部）命令，同时会对命令和命令参数提供一个审计" -"跟踪。\n" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" -"\n" -"IPA提供了一种方法来配置Sudo的各个方面：\n" -" 用户：用户/用户组允许调用Sudo。\n" -" 主机：主机/主机组上的用户允许调用Sudo。\n" -" 允许的命令：指定命令允许通过Sudo来运行。\n" -" 阻止的命令：指定命令禁止通过Sudo来运行。\n" -" 作为用户来运行：Sudo会调用用户或用户组的权限。\n" -" 作为组来运行：Sudo会调用组的gid权限。\n" -" 选项：各种Sudoers选项可以修改Sudo的行为。\n" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" -"\n" -"顺序可以添加到一个sudo规则中来控制它们评估的顺序（如果客户端支持）。该顺序是" -"一个整数并且是唯一的。\n" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "该选项已被弃用。" - -msgid "sudo rules" -msgstr "sudo规则" - -msgid "Sudo Rules" -msgstr "Sudo规则" - -msgid "Sudo Rule" -msgstr "Sudo规则" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "序号必须是唯一值（%(order)d已被%(rule)s使用）" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "已添加Sudo规则\"%(value)s\"" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "已删除Sudo规则\"%(value)s\"" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "已修改Sudo规则\"%(value)s\"" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "%(type)s类别不能设置为all'，虽然有允许%(objects)s" - -msgid "users" -msgstr "用户" - -msgid "command" -msgstr "命令" - -msgid "commands" -msgstr "命令" - -msgid "runAs user" -msgstr "作为用户来运行" - -msgid "runAs users" -msgstr "作为用户来运行" - -msgid "group runAs" -msgstr "作为组来运行" - -msgid "runAs groups" -msgstr "作为组来运行" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "已匹配%(count)d个Sudo规则" - -msgid "commands cannot be added when command category='all'" -msgstr "当命令类别='all'时命令不能被添加" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "当作为用户来运行或作为组来运行类别='all'时用户不能被添加" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "作为用户来运行不能接受'%(name)s'来作为一个用户名" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "作为用户来运行不能接受'%(name)s'来作为一个组名" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "作为组来运行不能接受'%(name)s'来作为一个组名" - -msgid "commands for controlling sudo configuration" -msgstr "控制sudo配置的命令" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -msgid "sudo command" -msgstr "sudo命令" - -msgid "sudo commands" -msgstr "sudo命令" - -msgid "Sudo Commands" -msgstr "Sudo命令" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "已添加Sudo命令\"%(value)s\"" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "已删除Sudo命令\"%(value)s\"" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "已修改Sudo命令\"%(value)s\"" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "已匹配%(count)d个Sudo命令" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "sudo命令组" - -msgid "sudo command groups" -msgstr "sudo命令组" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "已添加Sudo命令组\"%(value)s\"" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "已删除Sudo命令组\"%(value)s\"" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "已修改Sudo命令组\"%(value)s\"" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "已匹配%(count)d个Sudo命令组" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "Realm域" - -msgid "Realm Domains" -msgstr "Realm域" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "DNS区域的每个realm域必须包括SOA或NS记录。没有找到记录：%s" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "下面的域不属于该realm：%(domains)s" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" -"下面域的realm不能被检测到：%(domains)s。如果有属于该realm的域，请为它们创建一" -"个包含\"%(realm)s\"的_kerberos TXT记录。" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" -"--domain选项不能和--add-domain或--del-domain选项一起使用。使用--domain来显示" -"地指定整个realm域列表，添加/删除个别域，使用--add-domain/--del-domain。" - -msgid "IPA server domain cannot be omitted" -msgstr "IPA服务器域不能被省略" - -msgid "IPA server domain cannot be deleted" -msgstr "IPA服务器域不能被删除" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -#, fuzzy -#| msgid "Subject DNS name" -msgid "Object class name" -msgstr "主题DNS名" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "kerberos票据策略设置" - -msgid "Kerberos Ticket Policy" -msgstr "Kerberos票据策略" - -#, fuzzy -#| msgid "Max life" -msgid "OTP max life" -msgstr "最长存活期" - -#, fuzzy -#| msgid "Maximum ticket life (seconds)" -msgid "OTP token maximum ticket life (seconds)" -msgstr "票据最长存活期（秒）" - -msgid "OTP max renew" -msgstr "" - -#, fuzzy -#| msgid "TOTP authentication time variance (seconds)" -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "TOTP认证时间差异（秒）" - -#, fuzzy -#| msgid "Max life" -msgid "RADIUS max life" -msgstr "最长存活期" - -#, fuzzy -#| msgid "Maximum ticket life (seconds)" -msgid "RADIUS maximum ticket life (seconds)" -msgstr "票据最长存活期（秒）" - -#, fuzzy -#| msgid "RADIUS proxy server name" -msgid "RADIUS max renew" -msgstr "RADIUS代理服务器名称" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -#, fuzzy -#| msgid "Max life" -msgid "PKINIT max life" -msgstr "最长存活期" - -#, fuzzy -#| msgid "Maximum ticket life (seconds)" -msgid "PKINIT maximum ticket life (seconds)" -msgstr "票据最长存活期（秒）" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -#, fuzzy -#| msgid "Maximum ticket life (seconds)" -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "票据最长存活期（秒）" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "票据策略%s不可读" - -msgid "Default ticket policy could not be read" -msgstr "默认票据策略不可读" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "不能读UPG原过滤器定义。检查你的权限。" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" -"\n" -"IPA位置\n" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" -"\n" -"设置DNS位置\n" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "位置" - -msgid "locations" -msgstr "位置" - -msgid "IPA Locations" -msgstr "IPA位置" - -msgid "IPA Location" -msgstr "IPA位置" - -msgid "Location name" -msgstr "位置名" - -msgid "IPA location name" -msgstr "IPA位置名" - -msgid "IPA Location description" -msgstr "IPA本地描述" - -msgid "Servers" -msgstr "服务器" - -msgid "Servers that belongs to the IPA location" -msgstr "属于IPA位置的服务器" - -msgid "Advertised by servers" -msgstr "由服务器公布" - -msgid "List of servers which advertise the given location" -msgstr "公布给出位置的服务器列表" - -msgid "Add a new IPA location." -msgstr "添加一个新的IPA位置。" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "已添加IPA位置\"%(value)s\"" - -msgid "Delete an IPA location." -msgstr "删除一个IPA位置。" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "已删除IPA位置\"%(value)s\"" - -msgid "IPA Server" -msgstr "IPA服务器" - -msgid "Modify information about an IPA location." -msgstr "修改一个IPA位置信息。" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "已修改IPA位置\"%(value)s\"" - -msgid "Search for IPA locations." -msgstr "查找IPA位置。" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "已匹配%(count)d个IPA位置" - -msgid "Display information about an IPA location." -msgstr "显示一个IPA位置信息。" - -msgid "Servers in location" -msgstr "本地服务器" - -msgid "" -"\n" -"API Schema\n" -msgstr "" -"\n" -"API 模式\n" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" -"\n" -"提供API自省能力。\n" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "名称" - -msgid "Documentation" -msgstr "文档" - -msgid "Exclude from" -msgstr "排斥" - -msgid "Include in" -msgstr "包含" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "结果应该只包括主键属性(\"%s\")" - -msgid "Help topic" -msgstr "帮助主题" - -msgid "Version" -msgstr "版本" - -msgid "Parameters" -msgstr "参数" - -msgid "Method of" -msgstr "方法" - -msgid "Method name" -msgstr "方法名" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s：%(oname)s没有找到" - -msgid "Display information about a command." -msgstr "显示一个命令信息。" - -msgid "Search for commands." -msgstr "查找命令。" - -#, fuzzy -#| msgid "Run Commands" -msgid "Return command defaults" -msgstr "允许命令" - -msgid "Display information about a class." -msgstr "显示一个类信息。" - -msgid "Search for classes." -msgstr "查找类。" - -msgid "Display information about a help topic." -msgstr "显示一个帮助主题信息。" - -msgid "Search for help topics." -msgstr "查找帮助主题。" - -msgid "Required" -msgstr "必需的" - -msgid "Multi-value" -msgstr "多值" - -msgid "Always ask" -msgstr "总是询问" - -#, fuzzy -#| msgid "CLI name" -msgid "CLI metavar" -msgstr "CLI名称" - -msgid "CLI name" -msgstr "CLI名称" - -msgid "Confirm (password)" -msgstr "确认（密码）" - -msgid "Default" -msgstr "默认" - -msgid "Default from" -msgstr "默认的" - -msgid "Label" -msgstr "级别" - -msgid "Convert on server" -msgstr "在服务器上转换" - -msgid "Option group" -msgstr "选项组" - -msgid "Sensitive" -msgstr "敏感的" - -msgid "Positional argument" -msgstr "位置参数" - -#, fuzzy, python-format -#| msgid "%(parent)s: %(oname)s not found" -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(parent)s：%(oname)s没有找到" - -msgid "Display information about a command parameter." -msgstr "显示一个命令参数信息。" - -msgid "Search command parameters." -msgstr "查找命令参数。" - -#, fuzzy, python-format -#| msgid "%(parent)s: %(oname)s not found" -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(parent)s：%(oname)s没有找到" - -msgid "Display information about a command output." -msgstr "显示一个命令输出信息。" - -msgid "Search for command outputs." -msgstr "查找命令输出。" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "客户端缓存的模式指纹" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "ID范围" - -msgid "ID Range" -msgstr "ID范围" - -msgid "local domain range" -msgstr "本地域范围" - -msgid "Active Directory domain range" -msgstr "活动目录域范围" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "有POSIX属性的活动目录信任范围" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "对象ID范围修改超出定义范围是不允许的" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"没有安装Samba 4不能执行SID验证。确认你已经在IPA服务器上安装了server-trust-ad" -"子包" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" -"跨域信任没有配置。首先确认你已经在IPA服务器上运行了ipa-adtrust-install命令" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "对于一个信任域来说，SID不被认为是一个有效的SID" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "已添加ID范围\"%(value)s\"" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "选项dom-sid和dom-name不能被同时使用" - -#, fuzzy -#| msgid "trusted domain object not found" -msgid "Specified trusted domain name could not be found." -msgstr "信任域对象没有找到" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "选项dom-sid/dom-name和rid-base必须同时使用" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "当IPA范围类型是ipa-ad-trust-posix时，选项rid-base不能使用" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" -"当信任域的SID被指定时，IPA范围类型必须是ipa-ad-trust或ipa-ad-trust-posix中的" -"一个" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "选项dom-sid/dom-name和secondary-rid-base不能同时使用" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" -"当信任域的SID没有被指定时，IPA范围类型必不能是ipa-ad-trust或ipa-ad-trust-" -"posix。" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "选项secondary-rid-base和rid-base必须同时使用" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "主要RID范围和次要RID范围不能覆盖" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" -"你必须同时指定 rid-base和secondary-rid-base选项，因为ipa-adtrust-install已经" -"运行了。" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "已删除ID范围\"%(value)s\"" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "已匹配%(count)d个范围" - -#, fuzzy -#| msgid "Modify ID range." -msgid "" -"Modify ID range.\n" -"\n" -msgstr "修改ID范围。" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "已修改ID范围\"%(value)s\"" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" -"这个命令在本地IPA域中不能用来改变ID分配。运行`ipa help idrange`查看更多信息" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "指定信任域名的SID没有找到。请使用dom-sid选项直接指定SID。" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "选项dom-sid和secondary-rid-base不能同时使用" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "选项dom-sid和rid-base必须同时使用" - -msgid "self service permission" -msgstr "自助服务权限" - -msgid "self service permissions" -msgstr "自助服务权限" - -msgid "Self Service Permissions" -msgstr "自助服务权限" - -msgid "Self Service Permission" -msgstr "自助服务权限" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "已添加自助服务\"%(value)s\"" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "已删除自助服务\"%(value)s\"" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "已修改自助服务\"%(value)s\"" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "已匹配%(count)d个自助服务" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" -"\n" -"IPA服务器角色\n" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" -"\n" -"获取由IPA主服务器提供的角色（DNS服务器，CA等）状态。\n" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "服务器角色" - -msgid "server roles" -msgstr "服务器角色" - -msgid "IPA Server Roles" -msgstr "IPA服务器角色" - -msgid "IPA Server Role" -msgstr "IPA服务器角色" - -msgid "IPA server role name" -msgstr "IPA服务器角色名" - -msgid "Role status" -msgstr "角色状态" - -msgid "Status of the role" -msgstr "角色状态" - -msgid "Show role status on a server" -msgstr "显示服务器角色状态" - -msgid "Find a server role on a server(s)" -msgstr "在服务器上找到一个服务器角色" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "已匹配%(count)s个服务器角色" - -#, fuzzy -#| msgid "Included attributes" -msgid "Include IPA master entries" -msgstr "包含的属性" - -msgid "roles" -msgstr "角色" - -msgid "IPA role name" -msgstr "IPA角色名" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "已匹配%(count)d个授权" msgid "HBAC rule and local members cannot both be set" msgstr "HBAC规则和本地成员不能被同时设置" @@ -17146,1059 +19215,218 @@ msgstr "已启用SELinux用户映射\"%(value)s\"" msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "已禁用SELinux用户映射\"%(value)s\"" -#, python-brace-format -msgid "{role}: role not found" -msgstr "{role}：角色没有找到" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "{attr}：没有这样的属性" - -msgid "pyhbac is not installed." +msgid "" +"\n" +"IPA servers\n" msgstr "" +"\n" +"IPA服务器\n" msgid "" "\n" -"IPA certificate operations\n" +"Get information about installed IPA servers.\n" msgstr "" "\n" -"IPA证书操作\n" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" -"\n" -"实现了一组命令来管理服务器的SSL证书。\n" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" -"\n" -"证书请求以PEM格式的证书签名请求(CSR)的形式存在。\n" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" -"\n" -"dogtag CA只是使用CSR的CN值，并强制主题的其他值在服务器中配置。\n" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" -"\n" -"一个证书是以一个服务主体存储，并一个服务主体需要一个主机。\n" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" -"\n" -"为了请求一个证书：\n" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" -"\n" -"* 主机必须存在\n" -"* 服务必须存在（或者你使用--add选项来自动添加它）\n" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" -"\n" -"查找：\n" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" -"\n" -"证书可能通过证书主题，序列号，撤销原因，有效日期和发布日期来查询。\n" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" -"\n" -"GMT格式的日期用来匹配证书里的日期。\n" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" -"\n" -"日期格式是YYYY-mm-dd。\n" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" +"获取安装IPA服务器信息。\n" #, fuzzy -#| msgid "Retrieve an existing certificate." +#| msgid "Find a server role on a server(s)" msgid "" "\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "检索一个已存在的证书。" +" Find all servers:\n" +" ipa server-find\n" +msgstr "在服务器上找到一个服务器角色" msgid "" "\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" msgstr "" -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" +msgid "server" +msgstr "服务器" + +msgid "servers" +msgstr "服务器" + +msgid "IPA Servers" +msgstr "IPA服务器" + +msgid "Server location" +msgstr "服务器位置" #, fuzzy -#| msgid "Check the status of a certificate signing request." -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "检查证书签名请求的状态。" +#| msgid "Service Settings" +msgid "Service weight" +msgstr "服务设置" + +msgid "Weight for server services" +msgstr "服务器服务权重" + +#, fuzzy +#| msgid "Service delegation target" +msgid "Service relative weight" +msgstr "服务授权目标" + +#, fuzzy +#| msgid "Relative weight for entries with the same priority." +msgid "Relative weight for server services (counts per location)" +msgstr "拥有相同优先级条目的相对权重。" + +msgid "Enabled server roles" +msgstr "已启用服务器角色" + +msgid "List of enabled roles" +msgstr "已启用角色列表" + +msgid "Modify information about an IPA server." +msgstr "修改一个IPA服务器信息。" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "已修改IPA服务器\"%(value)s\"" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "已匹配%(count)d个IPA服务器" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "已删除IPA服务器\"%(value)s\"" + +msgid "Ignore topology errors" +msgstr "忽略拓扑错误" + +msgid "Ignore topology connectivity problems after removal" +msgstr "删除后忽略拓扑连通性问题" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "不检查最后的CA或DNS服务器" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "不检查最后一个CA主服务器或DNS服务器是否被删除了" + +msgid "Force server removal" +msgstr "强制服务器删除" + +msgid "Force server removal even if it does not exist" +msgstr "强制服务器删除即使它不存在" msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." msgstr "" +"副本是活跃的DNSSEC密钥主机。卸载会导致你DNS系统崩溃。首先请禁用或替代DNSSEC密" +"钥主机。" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "删除这台服务器将使得你的安装过程没有DNS。" #, fuzzy #| msgid "" -#| "Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -#| "revocation reason details. " +#| "Deleting this server is not allowed as it would leave your installation " +#| "without a CA." msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "撤销证书的原因（0-10）。输入\"ipa help cert\"来查看详细撤销原因。" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "删除这台服务器是不允许的因为这将导致你的安装过程没有CA。" msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "删除这台服务器是不允许的因为这将导致你的安装过程没有CA。" -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" +msgid "Ignoring these warnings and proceeding with removal" +msgstr "忽略这些警告并给予清除" +#, python-format msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "从s4u2proxy条目%(dn)s中清除成员主体%(principal)s失败：%(err)s" -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "为%(master)s清除DNA主机名条目失败：%(err)s" -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "从服务器列表中删除服务器%(master)s失败：%(err)s" -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" -"\n" -"支持下面的撤销原因：\n" +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "为%(master)s清除Custodia密钥失败：%(err)s" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "清除服务器主体/密钥失败：%(err)s" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "清除%(hostname)s DNS条目失败：%(err)s" + +msgid "You may need to manually remove them from the tree" +msgstr "你可能需要从树中手动删除它们" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "强制删除%(hostname)s" + +msgid "Ignoring topology connectivity errors." +msgstr "忽略拓扑连通性错误。" + +msgid "Server has already been deleted" +msgstr "服务器已被删除" + +msgid "Agreements deleted" +msgstr "协议已删除" + +msgid "Following segments were not deleted:" +msgstr "下面部分没有被删除：" + +msgid "not allowed to perform server connection check" +msgstr "不允许执行服务器连接检查" #, fuzzy -#| msgid "Unspecified" -msgid " * 0 - unspecified\n" -msgstr "未指定的" +#| msgid "Show role status on a server" +msgid "Set enabled/hidden state of a server." +msgstr "显示服务器角色状态" #, fuzzy -#| msgid "Key Compromise" -msgid " * 1 - keyCompromise\n" -msgstr "密钥泄露" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -#, fuzzy -#| msgid "CA certificate" -msgid " * 6 - certificateHold\n" -msgstr "CA证书" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -#, fuzzy -#| msgid "Privilege Withdrawn" -msgid " * 9 - privilegeWithdrawn\n" -msgstr "特权撤销" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" -"\n" -"注意没有使用原因码7。查看RFC 5280以获取更多详细信息：\n" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" -"主体'%(principal)s'不允许使用含配置文件'%(profile_id)s'的CA '%(ca)s'来发布证" -"书。" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, fuzzy, python-format -#| msgid "Host '%(host)s' not found" -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "主机'%(host)s'没有找到" - -msgid "Issuing CA" -msgstr "发行CA" - -msgid "Name of issuing CA" -msgstr "签发的CA名称" - -msgid "Base-64 encoded certificate." -msgstr "Base-64编码的证书。" - -#, fuzzy -#| msgid "Certificate" -msgid "Certificate chain" -msgstr "证书" - -#, fuzzy -#| msgid "CA certificate" -msgid "X.509 certificate chain" -msgstr "CA证书" - -msgid "Subject" -msgstr "主题" - -msgid "Subject email address" -msgstr "主题电子邮件地址" - -msgid "Subject DNS name" -msgstr "主题DNS名" - -msgid "Subject X.400 address" -msgstr "主题X.400地址" - -msgid "Subject directory name" -msgstr "主题目录名" - -msgid "Subject EDI Party name" -msgstr "主题EDI参与方名称" - -msgid "Subject URI" -msgstr "主题URI" - -msgid "Subject IP Address" -msgstr "主题IP地址" - -msgid "Subject OID" -msgstr "主题OID" - -msgid "Subject UPN" -msgstr "主题UPN" - -msgid "Subject Kerberos principal name" -msgstr "主题Kerberos主体名" - -msgid "Subject Other Name" -msgstr "主题别名" - -msgid "Issuer" -msgstr "发行人" - -msgid "Issuer DN" -msgstr "证书颁发机构名字" - -msgid "Not Before" -msgstr "不早于" - -msgid "Not After" -msgstr "不晚于" - -msgid "Fingerprint (SHA1)" -msgstr "指纹（SHA1）" - -#, fuzzy -#| msgid "Fingerprint (SHA1)" -msgid "Fingerprint (SHA256)" -msgstr "指纹（SHA1）" - -msgid "Serial number (hex)" -msgstr "序列号（十六进制）" - -msgid "Request status" -msgstr "请求状态" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "如果主体不存在则自动添加它（仅对服务主体）" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "在请求的主题中找不到通用名。" - -#, fuzzy, python-format -#| msgid "" -#| "hostname in subject of request '%(cn)s' does not match principal hostname " -#| "'%(hostname)s'" -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "请求主题'%(cn)s'的主机名与主体主机名'%(hostname)s'不匹配" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "请求主题'%(cn)s'的主机名与主体主机名'%(hostname)s'不匹配" - -msgid "DN commonName does not match user's login" -msgstr "DN通用名与用户登录名不匹配" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "DN电子邮件地址不匹配任何用户的电子邮件地址" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "对条目'%s'的'userCertificate'属性没有'write'权限。" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "主题alt名称类型%s禁止用户主体" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "在证书请求中主题alt名为%s的服务主体不存在" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "没有权限创建主题alt名为'%s'的证书。" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "在主题alt名中的主体'%s'与请求的主体不匹配" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "RFC822名称与任何用户的电子邮件地址都不匹配" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "主题alt名称类型%s禁止非用户主体" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "主题alt名称类型%s被禁止" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "CA'%s'被禁用" - -msgid "'add' option" -msgstr "'add'选项" - -msgid "The principal for this request doesn't exist." -msgstr "该请求的主题不存在。" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Status" +#| msgid "Status" +msgid "State" msgstr "状态" -msgid "Revoked" -msgstr "撤销" +#, fuzzy +#| msgid "Server Name" +msgid "Server state" +msgstr "服务器名" -msgid "Revocation reason" -msgstr "撤消原因" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "撤销证书的原因（0-10）。输入\"ipa help cert\"来查看详细撤销原因。" - -#, python-format -msgid "Owner %s" -msgstr "所有者%s" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "由CA'%(ca)s'发布序列号为%(serial)s的证书没有找到" - -msgid "7 is not a valid revocation reason" -msgstr "7不是一个有效的撤销原因" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "结果应该只包括主键属性(\"certificate\")" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "已匹配%(count)d个证书" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "查找含这些所有者%s的证书。" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "查找不含这些所有者%s的证书。" - -msgid "ID View" -msgstr "ID视图" - -msgid "system ID View" -msgstr "系统ID视图" - -msgid "ID Views" -msgstr "ID视图" - -msgid "User object overrides" -msgstr "用户对象覆盖" - -msgid "Group object overrides" -msgstr "组对象覆盖" - -msgid "Hosts the view applies to" -msgstr "适用于主机的视图" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "已添加ID视图\"%(value)s\"" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "已删除ID视图\"%(value)s\"" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "已修改一个ID视图\"%(value)s\"" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "已匹配%(count)d个ID视图" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "默认信任视图不能应用于主机上" - -msgid "not found" -msgstr "没有找到" +#, fuzzy, python-format +#| msgid "Changed password for \"%(value)s\"" +msgid "Changed server state of \"%(value)s\"." +msgstr "已改变\"%(value)s\"的密码" #, fuzzy -#| msgid "Default Trust View cannot be applied on hosts" -msgid "ID View cannot be applied to IPA master" -msgstr "默认信任视图不能应用于主机上" - -msgid "ID View already applied" -msgstr "ID视图已应用" - -msgid "value" -msgstr "值" - -#, python-format -msgid "ID View applied to %i host." -msgstr "ID视图应用于%i主机。" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "ID视图应用于%i主机。" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "从%i主机中清除ID视图。" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "从%i主机中清除ID视图。" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" -"你正尝试引用一个不允许覆盖的神奇私有组。而不是尝试覆盖对应用户的GID属性。" - -msgid "IPA object" -msgstr "IPA对象" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "锚'%(anchor)s'不能被解析。" - -msgid "Default Trust View cannot contain IPA users" -msgstr "默认信任视图不能包含IPA用户" - -msgid "Add a new ID override." -msgstr "添加一个新的ID覆盖。" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "已添加ID覆盖\"%(value)s\"" - -msgid "Delete an ID override." -msgstr "删除一个ID覆盖。" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "已删除ID覆盖\"%(value)s\"" - -msgid "Modify an ID override." -msgstr "修改一个ID覆盖。" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "已修改一个ID覆盖\"%(value)s\"" - -msgid "ID override" -msgstr "ID覆盖" - -msgid "ID overrides cannot be renamed" -msgstr "ID覆盖不能被重命名" - -msgid "Search for an ID override." -msgstr "查找一个ID覆盖。" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "已匹配%(count)d个ID覆盖" - -msgid "Display information about an ID override." -msgstr "显示一个ID覆盖信息。" - -msgid "User ID override" -msgstr "用户ID覆盖" - -msgid "User ID overrides" -msgstr "用户ID覆盖" - -msgid "Base-64 encoded user certificate" -msgstr "Base-64编码的用户证书" - -msgid "Group ID override" -msgstr "组ID覆盖" - -msgid "Group ID overrides" -msgstr "组ID覆盖" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "向id覆盖用户条目中添加一个或多个证书" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "已添加证书到id覆盖用户\"%(value)s\"" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "从id覆盖用户条目中移除一个或多个证书" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "已从id覆盖用户\"%(value)s\"中移除证书" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "已添加用户ID覆盖\"%(value)s\"" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "已删除用户ID覆盖\"%(value)s\"" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "已修改一个用户ID覆盖\"%(value)s\"" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "已匹配%(count)d个用户ID覆盖" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "已添加组ID覆盖\"%(value)s\"" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "已删除组ID覆盖\"%(value)s\"" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "已修改一个组ID覆盖\"%(value)s\"" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "已匹配%(count)d个组ID覆盖" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" -"\n" -"自动成员规则。\n" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" -"\n" -"规则是和组名直接关联的，因此你不能创建一个没有组或主机组的规则。\n" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" -"\n" -"条件是一个用于389-ds的正则表达式来用一个自动成员规则区匹配一个新添加的条目。" -"如果它匹配一个兼容规则，那么该条目被添加到合适的组或主机组中去。\n" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" -"\n" -"一个默认组或主机组可以指定给不匹配任何规则的条目。万一是用户条目，则该组会是" -"一个会退组，因为在IPA配置中所有用户默认是指定组的成员。\n" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" -"\n" -"automember-rebuild命令可以用来对现有条目跟踪运行自动成员规则，以此来重建它们" -"的成员组。\n" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "自动成员规则" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(otype)s \"%(oname)s\"没有找到" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "%s不是一个有效的属性。" +#| msgid "IPA CA renewal master" +msgid "Cannot hide CA renewal master." +msgstr "IPA CA更新主服务器" #, fuzzy -#| msgid "Add an automember rule." -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "添加一个自动成员规则。" +#| msgid "IPA DNSSec key master" +msgid "Cannot hide DNSSec key master." +msgstr "IPA DNSSec密钥主机" #, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "已添加自动成员规则\"%(value)s\"" - -msgid "Auto Membership is not configured" -msgstr "自动成员没有配置" - -#, fuzzy -#| msgid "Add conditions to an automember rule." -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "添加条件到一个自动成员规则。" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "已在\"%(value)s\"上添加条件" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "自动成员规则：%s没有找到！" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " +msgid "Cannot hide last enabled %(name)s server." msgstr "" -#, fuzzy -#| msgid "Remove conditions from an automember rule." msgid "" "\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "从一个自动成员规则中移除条件。" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "已从\"%(value)s\"中移除条件" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " +"Session Support for IPA\n" msgstr "" -#, fuzzy -#| msgid "Modify an automember rule." -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "修改一个自动成员规则。" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "已修改自动成员规则\"%(value)s\"" - -#, fuzzy -#| msgid "Delete an automember rule." -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "删除一个自动成员规则。" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "已删除自动成员规则\"%(value)s\"" - -#, fuzzy -#| msgid "Search for automember rules." -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "查找自动成员规则。" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "已匹配%(count)d个规则" - -#, fuzzy -#| msgid "Display information about an automember rule." -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "显示一个自动成员规则信息。" - -#, fuzzy -#| msgid "Set default (fallback) group for all unmatched entries." -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "对所有不匹配的条目设置默认（回退）组。" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "已为自动成员\"%(value)s\"设置默认（回滚）组" - -#, fuzzy -#| msgid "Remove default (fallback) group for all unmatched entries." -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "对所有不匹配的条目移除默认（回退）组。" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "已为自动成员\"%(value)s\"移除默认（回滚）组" - -msgid "No default (fallback) group set" -msgstr "没有设置（回滚）组" - -#, fuzzy -#| msgid "Display information about the default (fallback) automember groups." -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "显示默认（回退）自动成员组的信息。" - -msgid "Task DN" -msgstr "任务DN" - -msgid "DN of the started task" -msgstr "已开始任务的DN" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "至少指定其中一个选项：类型，用户，主机" - -msgid "users and hosts cannot both be set" -msgstr "用户和主机不能被同时设置" - -msgid "hosts cannot be set when type is 'group'" -msgstr "当类型是'group'是主机不能被设置" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "当类型是'hostgroup'是用户不能被设置" - -msgid "Automember rebuild membership task started" -msgstr "自动成员重建成员关系任务已开始" - -msgid "Automember rebuild membership task completed" -msgstr "自动成员重建成员关系任务已完成" - -#, python-format -msgid "Task DN = '%s'" -msgstr "任务DN = '%s'" - -msgid "Automember" -msgstr "自动成员" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -#, fuzzy -#| msgid "Remove conditions from an automember rule." -msgid "Remove orphan automember rules" -msgstr "从一个自动成员规则中移除条件。" - msgid "" "\n" "Manage Certificate Authorities\n" @@ -18382,6 +19610,948 @@ msgstr "启用一个CA。" msgid "Enabled CA \"%(value)s\"" msgstr "已启用CA\"%(value)s\"" +#, fuzzy +#| msgid "Certificate Authority" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "证书颁发机构" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +#, fuzzy +#| msgid "Display information about a named service delegation rule." +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "显示一个命名服务授权规则信息。" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +#, fuzzy +#| msgid "Modify configuration options." +msgid "Certificate Identity Mapping configuration options" +msgstr "修改配置选项" + +#, fuzzy +#| msgid "Modify Certificate Profile configuration." +msgid "Certificate Identity Mapping Global Configuration" +msgstr "修改证书配置文件配置。" + +#, fuzzy +#| msgid "Prompt to set the user password" +msgid "Prompt for the username" +msgstr "提示设置用户密码" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +#, fuzzy +#| msgid "Modify Certificate Profile configuration." +msgid "Modify Certificate Identity Mapping configuration." +msgstr "修改证书配置文件配置。" + +#, fuzzy +#| msgid "Show the current configuration." +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "显示当前配置。" + +#, fuzzy +#| msgid "Certificate Authorities" +msgid "Certificate Identity Mapping Rules" +msgstr "证书颁发机构" + +#, fuzzy +#| msgid "Certificate Type" +msgid "Certificate Identity Mapping Rule" +msgstr "证书类型" + +#, fuzzy +#| msgid "Certificate profiles cannot be renamed" +msgid "Certificate Identity Mapping Rule name" +msgstr "证书配置文件不能被重命名" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Rule used to map the certificate with a user entry" +msgstr "向用户条目中移除一个或多个证书" + +#, fuzzy +#| msgid "Matching Type" +msgid "Matching rule" +msgstr "匹配类型" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +#, fuzzy +#| msgid "Priority of the policy (higher number means lower priority" +msgid "Priority of the rule (higher number means lower priority" +msgstr "策略优先级（数字越大意味着优先级越低" + +#, fuzzy +#| msgid "Create a new service delegation rule." +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "创建一个新的服务授权规则。" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "已为用户\"%(value)s\"添加证书" + +#, fuzzy +#| msgid "Modify Certificate Profile configuration." +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "修改证书配置文件配置。" + +#, fuzzy, python-format +#| msgid "Modified Certificate Profile \"%(value)s\"" +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "已修改配置文件\"%(value)s\"" + +#, fuzzy +#| msgid "Search for Certificate Profiles." +msgid "Search for Certificate Identity Mapping Rules." +msgstr "查找证书配置文件。" + +#, fuzzy, python-format +#| msgid "%(count)d service delegation rule matched" +#| msgid_plural "%(count)d service delegation rules matched" +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "已匹配%(count)d个服务授权规则" + +#, fuzzy +#| msgid "Display information about a named service delegation rule." +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "显示一个命名服务授权规则信息。" + +#, fuzzy +#| msgid "Delete a Certificate Profile." +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "删除一个证书配置文件。" + +#, fuzzy, python-format +#| msgid "Deleted service delegation target \"%(value)s\"" +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "已删除服务授权目标\"%(value)s\"" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "已为用户\"%(value)s\"添加证书" + +#, fuzzy +#| msgid "Delete a Certificate Profile." +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "删除一个证书配置文件。" + +#, fuzzy, python-format +#| msgid "Modified Certificate Profile \"%(value)s\"" +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "已修改配置文件\"%(value)s\"" + +#, fuzzy +#| msgid "" +#| "Fetching domains from trusted forest failed. See details in the error_log" +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "从信任森林中获取域失败。在error_log中查看详细信息" + +#, fuzzy +#| msgid "" +#| "Fetching domains from trusted forest failed. See details in the error_log" +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "从信任森林中获取域失败。在error_log中查看详细信息" + +#, fuzzy +#| msgid "User login" +msgid "User logins" +msgstr "用户登录名" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "已匹配%(count)d个用户" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 10" +msgstr "必须至少%(minvalue)d" + +msgid "configuration options" +msgstr "配置选项" + +msgid "Configuration" +msgstr "配置" + +#, fuzzy +#| msgid "Maximum username length" +msgid "Maximum hostname length" +msgstr "最大用户名长度" + +msgid "IPA masters" +msgstr "IPA主服务器" + +msgid "List of all IPA masters" +msgstr "所有IPA主服务器列表" + +#, fuzzy +#| msgid "IPA masters" +msgid "Hidden IPA masters" +msgstr "IPA主服务器" + +#, fuzzy +#| msgid "List of all IPA masters" +msgid "List of all hidden IPA masters" +msgstr "所有IPA主服务器列表" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "IPA CA服务器" + +msgid "IPA servers configured as certificate authority" +msgstr "IPA服务器配置为证书认证机构" + +#, fuzzy +#| msgid "IPA CA servers" +msgid "Hidden IPA CA servers" +msgstr "IPA CA服务器" + +#, fuzzy +#| msgid "IPA servers configured as certificate authority" +msgid "Hidden IPA servers configured as certificate authority" +msgstr "IPA服务器配置为证书认证机构" + +msgid "IPA CA renewal master" +msgstr "IPA CA更新主服务器" + +msgid "Renewal master for IPA certificate authority" +msgstr "为IPA证书认证机构更新主服务器" + +#, fuzzy +#| msgid "IPA servers configured as key recovery agents" +msgid "IPA servers configured as key recovery agent" +msgstr "IPA服务器配置为密钥恢复代理" + +#, fuzzy +#| msgid "IPA KRA servers" +msgid "Hidden IPA KRA servers" +msgstr "IPA KRA服务器" + +#, fuzzy +#| msgid "IPA servers configured as key recovery agents" +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "IPA服务器配置为密钥恢复代理" + +#, fuzzy +#| msgid "IPA server configured as DNSSec key master" +msgid "IPA servers configured as domain name server" +msgstr "IPA服务器配置为DNSSec密钥主机" + +#, fuzzy +#| msgid "IPA DNS servers" +msgid "Hidden IPA DNS servers" +msgstr "IPA DNS服务器" + +#, fuzzy +#| msgid "IPA servers configured as key recovery agents" +msgid "Hidden IPA servers configured as domain name server" +msgstr "IPA服务器配置为密钥恢复代理" + +#, fuzzy +#| msgid "IPA DNSSec key master" +msgid "DNSec key master" +msgstr "IPA DNSSec密钥主机" + +#, fuzzy +#| msgid "options are not allowed" +msgid "Empty domain is not allowed" +msgstr "选项是不允许的" + +#, fuzzy, python-format +#| msgid "invalid domain-name: %s" +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "无效的域名：%s" + +#, fuzzy, python-format +#| msgid "Removed information about the trusted domain \"%(value)s\"" +msgid "Server has no information about domain '%(domain)s'" +msgstr "删除信任域\"%(value)s\"的信息" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "组不存在" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "不允许属性\"%s\"" + +msgid "May not be empty" +msgstr "可能不是闲置的" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "%(obj)s默认属性%(attr)s是不允许的！" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "SELinux用户列表期望以$分隔" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "SELinux用户'%(user)s'是无效的：%(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "SELinux用户映射默认用户没有在列表中" + +msgid "REST API is not logged in." +msgstr "REST API没有登录。" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "从CA REST API的Non-2xx响应：%(status)d. %(explanation)s" + +msgid "Unable to communicate with CMS" +msgstr "不能与CMS通信" + +msgid "Response from CA was not valid JSON" +msgstr "CA响应是无效的JSON" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "Disable the Kerberos key, SSL certificate and all services of a host." +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "禁用该主机的Kerberos密钥，SSL证书和所有的服务。" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "主机" + +msgid "Base-64 encoded host certificate" +msgstr "Base-64编码的主机证书" + +msgid "Serial Number" +msgstr "序列号" + +msgid "Serial Number (hex)" +msgstr "序列号（十六进制）" + +msgid "Authentication Indicators" +msgstr "认证指标" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "新增主机 \"%(value)s\"" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "已删除主机 \"%(value)s\"" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "移除被IPA DNS管理的主机的A，AAAA，SSHFP和PTR记录" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "没有找到A，AAAA，SSHFP和PTR记录。" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "已修改主机 \"%(value)s\"" + +msgid "Password cannot be set on enrolled host." +msgstr "密码不能在注册主机上设置。" + +msgid "cn is immutable" +msgstr "cn是不变的" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "已匹配%(count)d个主机" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "已禁用主机\"%(value)s\"" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "已向主机\"%(value)s\"中添加证书" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "已从主机\"%(value)s\"中移除证书" + +msgid "Add new principal alias to host entry" +msgstr "为主机条目添加新的主体别名" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "已为主机\"%(value)s\"添加新别名" + +msgid "Remove principal alias from a host entry" +msgstr "从一个主机条目中移除主体别名" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "已从主机\"%(value)s\"中移除别名" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "ID范围" + +msgid "ID Range" +msgstr "ID范围" + +msgid "local domain range" +msgstr "本地域范围" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "对象ID范围修改超出定义范围是不允许的" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"没有安装Samba 4不能执行SID验证。确认你已经在IPA服务器上安装了server-trust-ad" +"子包" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" +"跨域信任没有配置。首先确认你已经在IPA服务器上运行了ipa-adtrust-install命令" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "对于一个信任域来说，SID不被认为是一个有效的SID" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "已添加ID范围\"%(value)s\"" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "选项dom-sid和dom-name不能被同时使用" + +#, fuzzy +#| msgid "trusted domain object not found" +msgid "Specified trusted domain name could not be found." +msgstr "信任域对象没有找到" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "选项dom-sid/dom-name和rid-base必须同时使用" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "当IPA范围类型是ipa-ad-trust-posix时，选项rid-base不能使用" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" +"当信任域的SID被指定时，IPA范围类型必须是ipa-ad-trust或ipa-ad-trust-posix中的" +"一个" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "选项dom-sid/dom-name和secondary-rid-base不能同时使用" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" +"当信任域的SID没有被指定时，IPA范围类型必不能是ipa-ad-trust或ipa-ad-trust-" +"posix。" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "选项secondary-rid-base和rid-base必须同时使用" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "主要RID范围和次要RID范围不能覆盖" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" +"你必须同时指定 rid-base和secondary-rid-base选项，因为ipa-adtrust-install已经" +"运行了。" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "已删除ID范围\"%(value)s\"" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "已匹配%(count)d个范围" + +#, fuzzy +#| msgid "Modify ID range." +msgid "" +"Modify ID range.\n" +"\n" +msgstr "修改ID范围。" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "已修改ID范围\"%(value)s\"" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" +"这个命令在本地IPA域中不能用来改变ID分配。运行`ipa help idrange`查看更多信息" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "指定信任域名的SID没有找到。请使用dom-sid选项直接指定SID。" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "选项dom-sid和secondary-rid-base不能同时使用" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "选项dom-sid和rid-base必须同时使用" + msgid "Internationalization messages" msgstr "" @@ -19613,12 +21783,6 @@ msgstr "证书已撤销" msgid "REVOKED" msgstr "" -msgid "Serial Number" -msgstr "序列号" - -msgid "Serial Number (hex)" -msgstr "序列号（十六进制）" - msgid "SHA1 Fingerprint" msgstr "SHA1指纹" @@ -19685,11 +21849,6 @@ msgstr "向一个服务中添加新证书" msgid "Add certificate mapping data" msgstr "TLSA证书关联数据" -#, fuzzy -#| msgid "Certificate Association Data" -msgid "Certificate mapping data" -msgstr "证书关联数据" - #, fuzzy #| msgid "Configuration" msgid "Configuration string" @@ -20527,9 +22686,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "主机" - msgid "Netgroup Settings" msgstr "网络组设置" @@ -20665,9 +22821,6 @@ msgstr "新的：密钥已设置" msgid "Add password policy" msgstr "密码策略" -msgid "Password Policy" -msgstr "密码策略" - #, fuzzy #| msgid "password policies" msgid "Remove password policies" @@ -21205,15 +23358,6 @@ msgstr "删除权限" msgid "Remove domains" msgstr "Realm域" -msgid "Trust direction" -msgstr "信任方向" - -msgid "Trust status" -msgstr "信任状态" - -msgid "Trust type" -msgstr "信任类型" - msgid "Alternative UPN suffixes" msgstr "可供选择的UPN后缀" @@ -21790,9 +23934,6 @@ msgstr "Sudo规则" msgid "Topology" msgstr "拓扑" -msgid "Trusts" -msgstr "信任" - msgid "True" msgstr "" @@ -21897,1514 +24038,6 @@ msgstr "必需字段" msgid "Unsupported value" msgstr "不支持的值" -msgid "Role" -msgstr "角色" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "已添加角色\"%(value)s\"" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "已删除角色\"%(value)s\"" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "已修改角色\"%(value)s\"" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "已匹配%(count)d个角色" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" -"\n" -"IPA服务器\n" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" -"\n" -"获取安装IPA服务器信息。\n" - -#, fuzzy -#| msgid "Find a server role on a server(s)" -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "在服务器上找到一个服务器角色" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "服务器" - -msgid "servers" -msgstr "服务器" - -msgid "IPA Servers" -msgstr "IPA服务器" - -msgid "Server location" -msgstr "服务器位置" - -#, fuzzy -#| msgid "Service Settings" -msgid "Service weight" -msgstr "服务设置" - -msgid "Weight for server services" -msgstr "服务器服务权重" - -#, fuzzy -#| msgid "Service delegation target" -msgid "Service relative weight" -msgstr "服务授权目标" - -#, fuzzy -#| msgid "Relative weight for entries with the same priority." -msgid "Relative weight for server services (counts per location)" -msgstr "拥有相同优先级条目的相对权重。" - -msgid "Enabled server roles" -msgstr "已启用服务器角色" - -msgid "List of enabled roles" -msgstr "已启用角色列表" - -msgid "Modify information about an IPA server." -msgstr "修改一个IPA服务器信息。" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "已修改IPA服务器\"%(value)s\"" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "已匹配%(count)d个IPA服务器" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "已删除IPA服务器\"%(value)s\"" - -msgid "Ignore topology errors" -msgstr "忽略拓扑错误" - -msgid "Ignore topology connectivity problems after removal" -msgstr "删除后忽略拓扑连通性问题" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "不检查最后的CA或DNS服务器" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "不检查最后一个CA主服务器或DNS服务器是否被删除了" - -msgid "Force server removal" -msgstr "强制服务器删除" - -msgid "Force server removal even if it does not exist" -msgstr "强制服务器删除即使它不存在" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" -"副本是活跃的DNSSEC密钥主机。卸载会导致你DNS系统崩溃。首先请禁用或替代DNSSEC密" -"钥主机。" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "删除这台服务器将使得你的安装过程没有DNS。" - -#, fuzzy -#| msgid "" -#| "Deleting this server is not allowed as it would leave your installation " -#| "without a CA." -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "删除这台服务器是不允许的因为这将导致你的安装过程没有CA。" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "删除这台服务器是不允许的因为这将导致你的安装过程没有CA。" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "忽略这些警告并给予清除" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "从s4u2proxy条目%(dn)s中清除成员主体%(principal)s失败：%(err)s" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "为%(master)s清除DNA主机名条目失败：%(err)s" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "从服务器列表中删除服务器%(master)s失败：%(err)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "为%(master)s清除Custodia密钥失败：%(err)s" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "清除服务器主体/密钥失败：%(err)s" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "清除%(hostname)s DNS条目失败：%(err)s" - -msgid "You may need to manually remove them from the tree" -msgstr "你可能需要从树中手动删除它们" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "强制删除%(hostname)s" - -msgid "Ignoring topology connectivity errors." -msgstr "忽略拓扑连通性错误。" - -msgid "Server has already been deleted" -msgstr "服务器已被删除" - -msgid "Agreements deleted" -msgstr "协议已删除" - -msgid "Following segments were not deleted:" -msgstr "下面部分没有被删除：" - -#, python-format -msgid "must be \"%s\"" -msgstr "必须是\"%s\"" - -msgid "not allowed to perform server connection check" -msgstr "不允许执行服务器连接检查" - -#, fuzzy -#| msgid "Show role status on a server" -msgid "Set enabled/hidden state of a server." -msgstr "显示服务器角色状态" - -#, fuzzy -#| msgid "Status" -msgid "State" -msgstr "状态" - -#, fuzzy -#| msgid "Server Name" -msgid "Server state" -msgstr "服务器名" - -#, fuzzy, python-format -#| msgid "Changed password for \"%(value)s\"" -msgid "Changed server state of \"%(value)s\"." -msgstr "已改变\"%(value)s\"的密码" - -#, fuzzy -#| msgid "IPA CA renewal master" -msgid "Cannot hide CA renewal master." -msgstr "IPA CA更新主服务器" - -#, fuzzy -#| msgid "IPA DNSSec key master" -msgid "Cannot hide DNSSec key master." -msgstr "IPA DNSSec密钥主机" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "允许模仿" - -msgid "Member principals" -msgstr "成员主体" - -#, fuzzy, python-format -#| msgid "Malformed principal: '%(value)s'" -msgid "Malformed principal: %(error)s" -msgstr "有缺陷的主体：'%(value)s'" - -msgid "Add target to a named service delegation." -msgstr "添加目标到一个命名服务授权。" - -#, python-format -msgid "member %s" -msgstr "成员%s" - -msgid "Remove member from a named service delegation." -msgstr "从一个命名服务授权中删除成员。" - -msgid "service delegation rule" -msgstr "服务授权规则" - -msgid "service delegation rules" -msgstr "服务授权规则" - -msgid "Service delegation rules" -msgstr "服务授权规则" - -msgid "Service delegation rule" -msgstr "服务授权规则" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "已添加服务授权规则\"%(value)s\"" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "已删除服务授权规则\"%(value)s\"" - -msgid "privileged service delegation rule" -msgstr "特权服务授权规则" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "已匹配%(count)d个服务授权规则" - -msgid "service delegation target" -msgstr "服务授权目标" - -msgid "service delegation targets" -msgstr "服务授权目标" - -msgid "Service delegation targets" -msgstr "服务授权目标" - -msgid "Service delegation target" -msgstr "服务授权目标" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "已添加服务授权目标\"%(value)s\"" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "已删除服务授权目标\"%(value)s\"" - -msgid "privileged service delegation target" -msgstr "特权服务授权目标" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "已匹配%(count)d个服务授权目标" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "Kerberos主体%s已存在。使用'ipa user-mod'来手动设置它。" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "不能确定Kerberos主体%s是否存在。使用'ipa user-mod'来手动设置它。" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "添加用户到默认组失败。使用'ipa group-add-member'来手动添加。" - -msgid "Migration of LDAP search reference is not supported." -msgstr "LDAP搜索帮助移植不支持。" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(user)s不是一个POSIX用户" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "检查存在组的GID。使用--group-overwrite-gid选项来覆盖GID" - -msgid "Invalid LDAP URI." -msgstr "无效的LDAP URI。" - -#, python-format -msgid "%s to exclude from migration" -msgstr "不移植%s" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "查询待移植对象的结果被服务器拦截；移植过程可能没有完成\n" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" -"%(container)s LDAP搜索没有返回任何结果（搜索基：%(search_base)s，对象类： " -"%(objectclass)s）" - -msgid "Default group for new users not found" -msgstr "新用户的默认组没有找到" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "Disable the Kerberos key, SSL certificate and all services of a host." -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "禁用该主机的Kerberos密钥，SSL证书和所有的服务。" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "Base-64编码的主机证书" - -msgid "Principal alias" -msgstr "主体别名" - -msgid "SSH public key fingerprint" -msgstr "SSH公钥指纹" - -msgid "Authentication Indicators" -msgstr "认证指标" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "新增主机 \"%(value)s\"" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "已删除主机 \"%(value)s\"" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "移除被IPA DNS管理的主机的A，AAAA，SSHFP和PTR记录" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "没有找到A，AAAA，SSHFP和PTR记录。" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "已修改主机 \"%(value)s\"" - -msgid "Password cannot be set on enrolled host." -msgstr "密码不能在注册主机上设置。" - -msgid "cn is immutable" -msgstr "cn是不变的" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "已匹配%(count)d个主机" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "已禁用主机\"%(value)s\"" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "已向主机\"%(value)s\"中添加证书" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "已从主机\"%(value)s\"中移除证书" - -msgid "Add new principal alias to host entry" -msgstr "为主机条目添加新的主体别名" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "已为主机\"%(value)s\"添加新别名" - -msgid "Remove principal alias from a host entry" -msgstr "从一个主机条目中移除主体别名" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "已从主机\"%(value)s\"中移除别名" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "优先权必须是一个唯一值（(%(prio)d已被%(gname)s使用）" - -msgid "Add Class of Service entry" -msgstr "" - -#, fuzzy -#| msgid "Delete an IPA service." -msgid "Delete Class of Service entry" -msgstr "删除一个IPA服务。" - -#, fuzzy -#| msgid "Modify an HBAC service group." -msgid "Modify Class of Service entry" -msgstr "修改一个HBAC服务组。" - -msgid "Display Class of Service entry" -msgstr "" - -#, fuzzy -#| msgid "Search for an HBAC service group." -msgid "Search for Class of Service entry" -msgstr "查找一个HBAC服务组。" - -msgid "password policy" -msgstr "密码策略" - -msgid "password policies" -msgstr "密码策略" - -msgid "Password Policies" -msgstr "密码策略" - -msgid "Max repeat" -msgstr "" - -#, fuzzy -#| msgid "Maximum number of entries returned" -msgid "Maximum number of same consecutive characters" -msgstr "返回的最大条目数" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -#| msgid "User name" -msgid "User check" -msgstr "用户名" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "最小密码生存周期必须比最小值大。" - -msgid "cannot delete global password policy" -msgstr "不能删除全局密码策略" - -msgid "priority cannot be set on global policy" -msgstr "优先权布不能在本地策略上设置" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "另外，下面服务器可以运行该命令：%(masters)s" - -msgid "AD Trust setup" -msgstr "AD信任设置" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" -"没有安装Samba 4不能执行被选命令。确认你已经在IPA上安装了server-trust-ad子包。" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" -"没有在该机器上进行Samba 4实例配置不能执行被选命令。确认你已经在该服务器上运行" -"ipa-adtrust-install。" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" -"没有自己的域配置不能在信任域中查找。首先确认你已经在IPA服务器上运行了ipa-" -"adtrust-install命令" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "从信任森林中获取域失败。在error_log中查看详细信息" - -msgid "trust" -msgstr "信任" - -msgid "trusts" -msgstr "信任" - -msgid "Trust" -msgstr "信任" - -#, fuzzy -#| msgid "SID blacklist incoming" -msgid "SID blocklist incoming" -msgstr "进来的SID黑名单" - -#, fuzzy -#| msgid "SID blacklist outgoing" -msgid "SID blocklist outgoing" -msgstr "出去的SID黑名单" - -msgid "UPN suffixes" -msgstr "UPN后缀" - -#, fuzzy, python-brace-format -#| msgid "invalid Profile ID" -msgid "invalid SID: {SID}" -msgstr "无效的配置文件ID" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -#, fuzzy -#| msgid "" -#| "Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "信任域ID范围的类型，是ipa-ad-trust-posix和ipa-ad-trust中的一个" - -msgid "External trust" -msgstr "外部的信任" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "建立外部信任到另一个森林域中。信任不会在域外传递。" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "已添加活动目录域\"%(value)s\"" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "重建信任域\"%(value)s\"" - -msgid "missing base_id" -msgstr "缺少base_id" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "pysss_murmur在服务器上不可用并没有提供base-id。" - -msgid "trust type" -msgstr "信任类型" - -msgid "only \"ad\" is supported" -msgstr "仅支持\"ad\"" - -msgid "domain" -msgstr "域" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "不能建立一个信任到部署在IPA同一域中的AD。这样的设置不支持。" - -msgid "Realm-domain mismatch" -msgstr "Realm-domain不匹配" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "为了建立信任活动目录，IPA服务器的域名和realm名必须匹配" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" -"信任域%(domain)s包含在IPArealm域中。建立信任需要删除之前的。查看\"ipa " -"realmdomains-mod --del-domain\"命令。" - -msgid "Trusted domain and administrator account use different realms" -msgstr "信任域和管理员账户使用不同域" - -msgid "Realm administrator password should be specified" -msgstr "域管理员密码应该被指定" - -msgid "id range type" -msgstr "id范围类型" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" -"当添加一个AD信任时仅有ipa-ad-trust和ipa-ad-trust-posix允许--range-type值。" - -msgid "id range" -msgstr "id范围" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" -"id范围已在该域中存在。你要么删除旧的范围，要么从命令中排除--base-id/--range-" -"size选项。" - -msgid "range exists" -msgstr "范围内存在" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "同名但不同域SID的ID范围已存在。新信任域的ID范围必须手动创建。" - -msgid "range type change" -msgstr "范围类型改变" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" -"信任域的ID范围已存在，但它有一个不同类型。请手动删除旧的范围，或者通过--" -"range-type选项不强制类型。" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "在IPA DNS中转发器策略阻止了它，也许是转发器指向了不正确的主机？" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "不能在AD中验证写权限" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "执行信任设置时没有指定足够的参数" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "已删除信任\"%(value)s\"" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "已修改信任\"%(value)s\"（改变将在60s内生效）" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "已匹配%(count)d个信任" - -msgid "trust configuration" -msgstr "信任配置" - -msgid "Global Trust Configuration" -msgstr "全局信任配置" - -msgid "IPA AD trust agents" -msgstr "IPA AD信任代理" - -msgid "IPA servers configured as AD trust agents" -msgstr "IPA服务器配置为AD信任代理" - -msgid "IPA AD trust controllers" -msgstr "IPA AD信任控制器" - -msgid "IPA servers configured as AD trust controllers" -msgstr "IPA服务器配置为AD信任控制器" - -msgid "unsupported trust type" -msgstr "不支持的信任类型" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "已修改\"%(value)s\"信任配置" - -#, fuzzy -#| msgid "GID" -msgid "SID" -msgstr "GID" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "该命令依赖于\"editors\"组的存在，但是该组没有找到。" - -msgid "trust domain" -msgstr "信任域" - -msgid "trust domains" -msgstr "信任域" - -msgid "Trusted domains" -msgstr "已信任的域" - -msgid "Trusted domain" -msgstr "已信任的域" - -msgid "Domain enabled" -msgstr "域已启用" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "删除信任域\"%(value)s\"的信息" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "不能删除信任的根域，使用trust-del来删除它自己的信任" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "信任域列表更新成功。使用trustdomain-find命令来列举它们。" - -#, fuzzy -#| msgid "IPA servers configured as AD trust agents" -msgid "Configure this server as a trust agent." -msgstr "IPA服务器配置为AD信任代理" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, fuzzy -#| msgid "not allowed to modify user entries" -msgid "not allowed to remotely add agent" -msgstr "不允许修改用户条目" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "已启用信任域\"%(value)s\"" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "信任的根域总是支持现有的信任" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "已禁用信任域\"%(value)s\"" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "不能禁用信任的根域，使用trust-del来删除它自己的信任" - -#, fuzzy -#| msgid "Certificate Authority" -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "证书颁发机构" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -#, fuzzy -#| msgid "Display information about a named service delegation rule." -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "显示一个命名服务授权规则信息。" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -#, fuzzy -#| msgid "Modify configuration options." -msgid "Certificate Identity Mapping configuration options" -msgstr "修改配置选项" - -#, fuzzy -#| msgid "Modify Certificate Profile configuration." -msgid "Certificate Identity Mapping Global Configuration" -msgstr "修改证书配置文件配置。" - -#, fuzzy -#| msgid "Prompt to set the user password" -msgid "Prompt for the username" -msgstr "提示设置用户密码" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -#, fuzzy -#| msgid "Modify Certificate Profile configuration." -msgid "Modify Certificate Identity Mapping configuration." -msgstr "修改证书配置文件配置。" - -#, fuzzy -#| msgid "Show the current configuration." -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "显示当前配置。" - -#, fuzzy -#| msgid "Certificate Authorities" -msgid "Certificate Identity Mapping Rules" -msgstr "证书颁发机构" - -#, fuzzy -#| msgid "Certificate Type" -msgid "Certificate Identity Mapping Rule" -msgstr "证书类型" - -#, fuzzy -#| msgid "Certificate profiles cannot be renamed" -msgid "Certificate Identity Mapping Rule name" -msgstr "证书配置文件不能被重命名" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -#, fuzzy -#| msgid "Remove one or more certificates to the user entry" -msgid "Rule used to map the certificate with a user entry" -msgstr "向用户条目中移除一个或多个证书" - -#, fuzzy -#| msgid "Matching Type" -msgid "Matching rule" -msgstr "匹配类型" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -#, fuzzy -#| msgid "Priority of the policy (higher number means lower priority" -msgid "Priority of the rule (higher number means lower priority" -msgstr "策略优先级（数字越大意味着优先级越低" - -#, fuzzy -#| msgid "Create a new service delegation rule." -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "创建一个新的服务授权规则。" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "已为用户\"%(value)s\"添加证书" - -#, fuzzy -#| msgid "Modify Certificate Profile configuration." -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "修改证书配置文件配置。" - -#, fuzzy, python-format -#| msgid "Modified Certificate Profile \"%(value)s\"" -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "已修改配置文件\"%(value)s\"" - -#, fuzzy -#| msgid "Search for Certificate Profiles." -msgid "Search for Certificate Identity Mapping Rules." -msgstr "查找证书配置文件。" - -#, fuzzy, python-format -#| msgid "%(count)d service delegation rule matched" -#| msgid_plural "%(count)d service delegation rules matched" -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "已匹配%(count)d个服务授权规则" - -#, fuzzy -#| msgid "Display information about a named service delegation rule." -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "显示一个命名服务授权规则信息。" - -#, fuzzy -#| msgid "Delete a Certificate Profile." -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "删除一个证书配置文件。" - -#, fuzzy, python-format -#| msgid "Deleted service delegation target \"%(value)s\"" -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "已删除服务授权目标\"%(value)s\"" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "已为用户\"%(value)s\"添加证书" - -#, fuzzy -#| msgid "Delete a Certificate Profile." -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "删除一个证书配置文件。" - -#, fuzzy, python-format -#| msgid "Modified Certificate Profile \"%(value)s\"" -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "已修改配置文件\"%(value)s\"" - -#, fuzzy -#| msgid "" -#| "Fetching domains from trusted forest failed. See details in the error_log" -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "从信任森林中获取域失败。在error_log中查看详细信息" - -#, fuzzy -#| msgid "" -#| "Fetching domains from trusted forest failed. See details in the error_log" -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "从信任森林中获取域失败。在error_log中查看详细信息" - -#, fuzzy -#| msgid "User login" -msgid "User logins" -msgstr "用户登录名" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, fuzzy, python-format -#| msgid "%(count)d user matched" -#| msgid_plural "%(count)d users matched" -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "已匹配%(count)d个用户" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "不能给一个特权添加带有绑定类型\"%(bindtype)s\"的权限\"%(perm)s\"" - -msgid "Privilege" -msgstr "特权" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "已添加特权\"%(value)s\"" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "已删除特权\"%(value)s\"" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "已修改特权\"%(value)s\"" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "已匹配%(count)d个特权" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - msgid "" "\n" "Services\n" @@ -23581,663 +24214,34 @@ msgstr "从一个服务中删除主体别名" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "已从服务主体\"%(value)s\"中删除别名" -msgid "delegation" -msgstr "授权" +msgid "self service permission" +msgstr "自助服务权限" -msgid "delegations" -msgstr "授权" +msgid "self service permissions" +msgstr "自助服务权限" -msgid "Delegations" -msgstr "授权" +msgid "Self Service Permissions" +msgstr "自助服务权限" -msgid "Delegation" -msgstr "授权" +msgid "Self Service Permission" +msgstr "自助服务权限" #, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "已添加授权\"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" +msgstr "已添加自助服务\"%(value)s\"" #, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "已删除授权\"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "已删除自助服务\"%(value)s\"" #, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "已修改授权\"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" +msgstr "已修改自助服务\"%(value)s\"" #, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "已匹配%(count)d个授权" - -msgid "The deny type has been deprecated." -msgstr "阻止类型已被弃用。" - -msgid "HBAC rules" -msgstr "HBAC规则" - -msgid "HBAC Rules" -msgstr "HBAC规则" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "已添加HBAC规则\"%(value)s\"" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "已删除HBAC规则\"%(value)s\"" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "已修改HBAC规则\"%(value)s\"" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "已匹配%(count)d个HBAC规则" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "已启用HBAC规则\"%(value)s\"" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "已禁用HBAC规则\"%(value)s\"" - -msgid "Access time" -msgstr "访问时间" - -#, fuzzy -#| msgid "Add source hosts and hostgroups from a HBAC rule." -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "从一个HBAC规则中添加源主机和主机组。" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "在--rules中不能解析的规则" - -#, python-format -msgid "Access granted: %s" -msgstr "访问授权：%s" - -msgid "operation not defined" -msgstr "操作没有定义" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "不允许执行操作：%s" - -msgid "No such virtual command" -msgstr "没有这样的虚拟命令" - -msgid "Member service groups" -msgstr "成员服务组" - -msgid "Member HBAC service groups" -msgstr "成员HBAC服务组" - -#, fuzzy -#| msgid "User ID overrides" -msgid "Member ID user overrides" -msgstr "用户ID覆盖" - -#, fuzzy -#| msgid "Indirect Member users" -msgid "Indirect Member ID user overrides" -msgstr "间接成员用户" - -msgid "Indirect Member permissions" -msgstr "间接成员权限" - -msgid "Indirect Member HBAC service" -msgstr "间接成员HBAC服务" - -msgid "Indirect Member HBAC service group" -msgstr "间接成员HBAC服务组" - -msgid "Invalid format. Should be name=value" -msgstr "无效的格式。应该是“名称=值”" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "IPA主主机不能被删除或禁用" - -msgid "entry" -msgstr "条目" - -msgid "entries" -msgstr "条目" - -msgid "Entry" -msgstr "条目" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "容器条目(%(container)s)没有找到" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s：%(oname)s没有找到" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "名为\"%(pkey)s\"的%(oname)s已存在" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "不支持属性\"%(attribute)s\"" - -#, fuzzy, python-format -#| msgid "attribute \"%s\" not allowed" -msgid "these attributes are not allowed: %(attrs)s" -msgstr "不允许属性\"%s\"" - -msgid "attribute is not configurable" -msgstr "属性没有配置" - -msgid "No such attribute on this entry" -msgstr "该条目没有这样的属性" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "重命名%(ldap_obj_name)s对象" - -msgid "the entry was deleted while being modified" -msgstr "正被修改的条目已被删除" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "待添加的%s" - -#, python-format -msgid "%s to remove" -msgstr "待移除的%s" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "查找有这些%(relationship)s %(ldap_object)s的%(searched_object)s。" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "查找没有%(relationship)s %(ldap_object)s的%(searched_object)s。" - -#, fuzzy, python-format -#| msgid "Added new aliases to user \"%(value)s\"" -msgid "added attribute value to entry %(value)s" -msgstr "已为用户\"%(value)s\"添加新别名" - -#, fuzzy, python-format -#| msgid "Removed aliases from user \"%(value)s\"" -msgid "removed attribute values from entry %(value)s" -msgstr "已从用户\"%(value)s\"中删除别名" - -msgid "one or more values to remove" -msgstr "待移除的一个或多个值" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" -"\n" -"基类用户\n" -"\n" -"这包含了用户/计划用户常见的定义\n" - -msgid "must be TRUE or FALSE" -msgstr "必须是TRUE或FALSE" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#, fuzzy -#| msgid "Password expiration" -msgid "User password expiration" -msgstr "密码过期" - -msgid "SMB logon script path" -msgstr "" - -#, fuzzy -#| msgid "%i profile added." -msgid "SMB profile path" -msgstr "%i配置文件已添加。" - -#, fuzzy -#| msgid "Home directory" -msgid "SMB Home Directory" -msgstr "主目录" - -#, fuzzy -#| msgid "Home directory base" -msgid "SMB Home Directory Drive" -msgstr "主目录" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "无效的电子邮件格式：%(email)s" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "管理员%(manager)s没有找到" - -#, fuzzy -#| msgid "file to store certificate in" -msgid "Issuer of the certificate" -msgstr "存储证书文件" - -#, fuzzy -#| msgid "File to store the certificate in." -msgid "Subject of the certificate" -msgstr "存储证书文件。" - -#, fuzzy -#| msgid "cannot be empty" -msgid "cannot have an empty subject" -msgstr "不能为空" - -#, fuzzy -#| msgid "cannot specify both raw certificate and file" -msgid "cannot specify both subject/issuer and certificate" -msgstr "不能同时指定原始证书和文件" - -#, fuzzy -#| msgid "cannot specify both raw certificate and file" -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "不能同时指定原始证书和文件" - -#, fuzzy -#| msgid "Add one or more certificates to the user entry" -msgid "Add one or more certificate mappings to the user entry." -msgstr "向用户条目中添加一个或多个证书" - -#, fuzzy, python-format -#| msgid "Added certificates to user \"%(value)s\"" -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "已为用户\"%(value)s\"添加证书" - -#, fuzzy -#| msgid "Remove one or more certificates to the user entry" -msgid "Remove one or more certificate mappings from the user entry." -msgstr "向用户条目中移除一个或多个证书" - -#, fuzzy, python-format -#| msgid "Removed certificates from user \"%(value)s\"" -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "已为用户\"%(value)s\"删除证书" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "必须包含一个元组（列表，字典）" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "已添加用户\"%(value)s\"" - -msgid "Default group for new users is not POSIX" -msgstr "新用户的默认组不是POSIX" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "已删除用户\"%(value)s\"" - -#, python-format -msgid "%s: user is already preserved" -msgstr "%s：用户已保存" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "已修改用户\"%(value)s\"" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "已恢复用户账户\"%(value)s\"" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "用户%s已是活跃的" - -#, fuzzy, python-format -#| msgid "Enabled user account \"%(value)s\"" -msgid "Staged user account \"%(value)s\"" -msgstr "已启用用户账户\"%(value)s\"" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "已禁用用户账户\"%(value)s\"" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "已启用用户账户\"%(value)s\"" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "已解锁账户\"%(value)s\"" - -msgid "Failed logins" -msgstr "登录失败" - -msgid "Last successful authentication" -msgstr "上一次认证成功" - -msgid "Last failed authentication" -msgstr "上一次认证失败" - -msgid "Time now" -msgstr "当前时间" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "%(host)s已失败：%(error)s" - -#, python-format -msgid "%(host)s failed" -msgstr "%(host)s已失败" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "账户已禁用：%(disabled)s" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "已为用户\"%(value)s\"添加证书" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "已为用户\"%(value)s\"删除证书" - -msgid "Add new principal alias to the user entry" -msgstr "为用户条目添加新的主体别名" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "已为用户\"%(value)s\"添加新别名" - -msgid "Remove principal alias from the user entry" -msgstr "从用户条目中删除主体别名" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "已从用户\"%(value)s\"中删除别名" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "已匹配%(count)d个自助服务" #, python-format msgid "all masters must have %(role)s role enabled" @@ -24435,6 +24439,27 @@ msgstr "不传递外部信任到另一个活动目录森林的域中" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "不传递外部信任到另一个活动目录森林的域中" +msgid "Request must be a dict" +msgstr "请求必须是一个字典" + +msgid "Request is missing \"method\"" +msgstr "请求缺少\"method\"" + +msgid "Request is missing \"params\"" +msgstr "请求缺少\"params\"" + +msgid "params must be a list" +msgstr "参数必须是一个列表" + +msgid "params must contain [args, options]" +msgstr "参数必须包含[args，options]" + +msgid "params[0] (aka args) must be a list" +msgstr "params[0] (aka args)必须是一个列表" + +msgid "params[1] (aka options) must be a dict" +msgstr "params[1] (aka options)必须是一个字典" + #, python-format msgid "" "\n" @@ -24458,27 +24483,6 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "拓扑不允许服务器%(server)s复制服务器：" -msgid "Request must be a dict" -msgstr "请求必须是一个字典" - -msgid "Request is missing \"method\"" -msgstr "请求缺少\"method\"" - -msgid "Request is missing \"params\"" -msgstr "请求缺少\"params\"" - -msgid "params must be a list" -msgstr "参数必须是一个列表" - -msgid "params must contain [args, options]" -msgstr "参数必须包含[args，options]" - -msgid "params[0] (aka args) must be a list" -msgstr "params[0] (aka args)必须是一个列表" - -msgid "params[1] (aka options) must be a dict" -msgstr "params[1] (aka options)必须是一个字典" - #, fuzzy, python-format #| msgid "must be \"%s\"" msgid "must equal %r"